Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/0/3136302e3233382e3130382e302f32322d3234203d3e20323636323130.roa
File:                     3136302e3233382e3130382e302f32322d3234203d3e20323636323130.roa (raw, json)
Hash identifier:          kAW7IH9xXGCZcVLAlB0Lm1i6qUzon2XF4nBxzlYJlIA=
Subject key identifier:   E3:4B:0A:02:91:1A:EA:BD:E2:74:5D:5E:67:6A:30:BD:DF:D8:91:45
Certificate issuer:       /CN=F240E58D90E047C34933B303E800B88C0E9E9273
Certificate serial:       67118A26AC02136F5387457E5F34DE5FA93AA675
Authority key identifier: F2:40:E5:8D:90:E0:47:C3:49:33:B3:03:E8:00:B8:8C:0E:9E:92:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F240E58D90E047C34933B303E800B88C0E9E9273.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/0/3136302e3233382e3130382e302f32322d3234203d3e20323636323130.roa
Signing time:             Tue 10 Oct 2023 21:00:01 +0000
ROA not before:           Tue 10 Oct 2023 20:55:01 +0000
ROA not after:            Tue 08 Oct 2024 21:00:01 +0000
asID:                     266210
IP address blocks:        160.238.108.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:11:8a:26:ac:02:13:6f:53:87:45:7e:5f:34:de:5f:a9:3a:a6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F240E58D90E047C34933B303E800B88C0E9E9273
        Validity
            Not Before: Oct 10 20:55:01 2023 GMT
            Not After : Oct  8 21:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ff:e6:c9:80:62:e4:47:13:d4:0c:ec:76:1a:
                    50:58:18:b9:33:03:10:13:30:96:c2:75:72:3d:fc:
                    d3:d4:16:94:b1:53:75:fc:b6:ce:ea:3f:3f:0a:0b:
                    4d:c6:6e:29:dc:6f:9a:0b:6c:9e:f2:8f:0e:6a:91:
                    42:b2:ab:64:9a:27:c5:c2:82:ab:99:72:d7:a7:a6:
                    45:e7:6c:16:c7:e4:9b:1f:e1:6d:10:50:c7:ce:4e:
                    82:e1:ce:86:e9:d3:4e:1b:24:63:66:b4:72:06:29:
                    35:3c:20:52:02:a2:e8:49:77:c6:8f:f3:82:08:4b:
                    ae:e7:da:e7:39:0a:aa:88:d6:59:96:6f:ac:61:c2:
                    62:4e:14:9e:f2:84:d6:2e:29:3a:af:7e:ba:9b:a6:
                    fd:8c:00:f6:f3:6a:06:cf:28:29:f2:4a:d2:40:34:
                    81:9d:a6:a1:b6:57:3c:99:b8:63:31:10:7e:ef:06:
                    aa:71:39:0d:8a:16:a7:51:9e:2b:a6:2e:82:39:92:
                    41:0b:a0:e6:3f:ba:f5:28:29:71:cf:84:20:a2:b9:
                    12:2d:04:38:c4:2b:10:7a:fc:f1:41:21:64:e0:6b:
                    c4:a7:3e:20:ba:dc:23:8c:28:9e:fd:d2:c6:82:d1:
                    91:b9:b2:39:cb:22:4c:62:7b:b3:52:70:9a:5a:3a:
                    9c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:4B:0A:02:91:1A:EA:BD:E2:74:5D:5E:67:6A:30:BD:DF:D8:91:45
            X509v3 Authority Key Identifier:
                keyid:F2:40:E5:8D:90:E0:47:C3:49:33:B3:03:E8:00:B8:8C:0E:9E:92:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/0/F240E58D90E047C34933B303E800B88C0E9E9273.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F240E58D90E047C34933B303E800B88C0E9E9273.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qAnaXBwkYxLhuRLQ88sekxjuFH2nwmVwpe3uZdADj1y/0/3136302e3233382e3130382e302f32322d3234203d3e20323636323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:db:17:4e:38:1a:3e:bd:fc:51:67:01:38:16:06:c2:b0:4d:
         73:97:74:c3:5a:97:fd:13:21:c9:46:fe:dd:d3:48:5d:5b:70:
         39:57:96:30:95:1f:90:db:fc:bd:83:bb:b2:f8:c6:e8:9a:6b:
         61:e1:7e:16:40:bb:92:2d:0c:18:8c:5a:90:5a:73:17:30:d2:
         60:d3:70:87:7d:b4:7d:8a:01:0b:c1:4d:d6:0b:e2:54:10:98:
         e0:55:49:9a:1c:c2:d0:a9:f0:00:c9:75:5d:f1:27:45:f3:06:
         63:e0:5a:ee:ec:85:08:06:30:89:82:93:1e:76:b2:c5:41:54:
         73:c4:d0:4b:5d:3b:1b:cf:44:60:04:39:80:65:93:07:a4:04:
         34:d9:75:b4:30:40:ff:d3:a6:40:77:30:22:69:53:22:46:88:
         a6:de:c1:6a:e2:cd:1c:93:9f:e9:ed:34:7a:02:80:99:0c:91:
         c4:60:18:f3:96:31:a7:9b:d9:8c:c6:10:88:35:d2:02:02:ab:
         94:be:c4:95:e4:7a:0f:a8:25:04:69:8e:44:84:98:52:2f:97:
         96:66:5b:b7:6b:35:91:16:4c:b8:65:bb:90:a5:29:9e:b7:75:
         72:5b:fb:e1:c4:12:3a:02:73:59:61:84:fb:8f:2e:9c:ef:56:
         f1:47:24:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org