Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/3136302e3233382e3232302e302f32322d3234203d3e20323632393932.roa
File:                     3136302e3233382e3232302e302f32322d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          VA8GEz70F1SlObW/jzrTY7vwtN0QNPqUpYSmK8iyVo4=
Subject key identifier:   BF:3C:00:99:4C:D9:D7:62:8E:29:55:22:D9:03:95:FE:A3:DF:24:63
Certificate issuer:       /CN=D7F9A5F1DEF91840838A45D3C3174E077F15F3DA
Certificate serial:       353955A1673A41D00F570C6A0E8614D56E7A4FAA
Authority key identifier: D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/3136302e3233382e3232302e302f32322d3234203d3e20323632393932.roa
Signing time:             Wed 23 Nov 2022 11:56:27 +0000
ROA not before:           Wed 23 Nov 2022 11:51:27 +0000
ROA not after:            Wed 22 Nov 2023 11:56:27 +0000
asID:                     262992
IP address blocks:        160.238.220.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:39:55:a1:67:3a:41:d0:0f:57:0c:6a:0e:86:14:d5:6e:7a:4f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F9A5F1DEF91840838A45D3C3174E077F15F3DA
        Validity
            Not Before: Nov 23 11:51:27 2022 GMT
            Not After : Nov 22 11:56:27 2023 GMT
        Subject: CN=BF3C00994CD9D7628E295522D90395FEA3DF2463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1e:28:d3:80:6b:c2:21:eb:85:74:e8:90:04:
                    82:a0:23:ed:98:85:c8:df:05:36:99:0e:2d:10:54:
                    75:80:d2:22:25:8c:11:e7:f7:33:3c:dc:df:f0:79:
                    9a:ee:1f:a4:ff:01:7b:3a:f9:af:6a:f4:76:d3:81:
                    06:d8:d0:71:45:e2:54:07:6d:80:93:ca:a5:02:f4:
                    59:c7:be:e0:e8:6a:9d:a7:55:b3:64:37:73:7f:fd:
                    5a:ef:30:05:a4:c2:d4:49:c4:06:e9:9a:35:f6:f0:
                    90:cf:e2:05:1a:c6:8d:01:7a:54:aa:6a:1f:80:a1:
                    53:ff:d1:c0:e9:3a:20:54:07:6c:fc:09:bf:4a:4c:
                    65:52:e5:91:6f:a9:d5:a1:fe:6f:79:22:9e:91:f3:
                    3a:fa:88:f2:57:fc:26:41:69:44:a6:48:58:2e:66:
                    af:96:38:d8:1d:8b:d4:e2:6c:db:22:6b:06:9f:9a:
                    39:f5:19:62:fd:69:ec:93:cd:43:82:52:00:67:02:
                    a0:7a:84:30:ce:38:ee:75:1f:9c:e8:87:3b:2a:1b:
                    e6:9d:cd:8f:4e:c4:4e:7b:e9:b8:cd:8e:17:99:d7:
                    98:b4:1c:71:ee:e7:45:cc:dd:07:16:89:61:ba:7a:
                    c1:bb:83:7e:5b:f4:92:41:4d:ca:f4:3d:f6:ae:c0:
                    83:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3C:00:99:4C:D9:D7:62:8E:29:55:22:D9:03:95:FE:A3:DF:24:63
            X509v3 Authority Key Identifier:
                keyid:D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/3136302e3233382e3232302e302f32322d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:f2:d5:47:5c:90:4c:84:de:e7:f7:35:81:66:b7:a1:47:fe:
         34:e4:ff:b2:af:c5:30:40:f4:2a:00:28:57:30:e9:b7:22:9e:
         08:cd:ad:3c:95:31:c2:f6:6c:28:61:2f:c3:a7:f1:61:92:a0:
         55:e9:96:99:86:ea:ee:37:c5:68:8a:f1:ea:9b:74:dc:bc:1c:
         4d:a7:a7:17:39:be:b8:e7:5b:2e:cf:08:83:3b:33:1f:34:14:
         1a:7d:29:5b:2b:2c:4e:c5:c2:8f:74:96:52:63:6f:b4:e9:47:
         35:5d:08:43:9d:8c:ef:85:08:77:64:f3:c7:08:78:8a:dd:3d:
         4b:83:f5:65:67:8f:4c:17:60:07:e0:e9:40:79:84:fb:e7:1b:
         db:f8:cf:89:ec:a8:3a:61:c5:5a:2d:7d:45:42:af:26:4d:30:
         9c:8c:ac:21:31:c5:5a:f9:d3:e7:5f:b8:fb:9e:a3:99:b5:7a:
         ed:bb:0c:29:45:ee:b6:09:81:63:d6:b9:57:49:f8:e0:d6:27:
         fe:7f:a2:22:f4:90:55:5f:b8:6c:f3:a6:f4:0e:c9:40:9c:ee:
         35:41:11:5a:24:00:5a:94:ab:60:5a:98:88:9b:88:be:91:4b:
         5d:dd:07:be:89:3a:f0:e6:33:f5:b1:d7:78:bb:2e:ba:d4:96:
         d3:5b:4d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org