Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/3136302e3233382e3133302e302f32332d3233203d3e20323636353437.roa
File:                     3136302e3233382e3133302e302f32332d3233203d3e20323636353437.roa (raw, json)
Hash identifier:          efHPZ5gEFSIBNkiZOXI8ecVsLm81qw+6pSHitpjJNu4=
Subject key identifier:   97:F9:C1:31:C7:D0:0C:0E:91:50:F5:C6:4E:63:4C:23:6D:5C:59:73
Certificate issuer:       /CN=24458C13F40474E3749CBA0A49F59B362B4D3E0B
Certificate serial:       4282FD3BC566651CF20BBC75BFD8C101B51F7B50
Authority key identifier: 24:45:8C:13:F4:04:74:E3:74:9C:BA:0A:49:F5:9B:36:2B:4D:3E:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/3136302e3233382e3133302e302f32332d3233203d3e20323636353437.roa
Signing time:             Tue 14 Nov 2023 04:27:59 +0000
ROA not before:           Tue 14 Nov 2023 04:22:59 +0000
ROA not after:            Tue 12 Nov 2024 04:27:59 +0000
asID:                     266547
IP address blocks:        160.238.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:82:fd:3b:c5:66:65:1c:f2:0b:bc:75:bf:d8:c1:01:b5:1f:7b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24458C13F40474E3749CBA0A49F59B362B4D3E0B
        Validity
            Not Before: Nov 14 04:22:59 2023 GMT
            Not After : Nov 12 04:27:59 2024 GMT
        Subject: CN=97F9C131C7D00C0E9150F5C64E634C236D5C5973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:85:2c:1a:e2:bf:54:ff:a3:e9:cf:ed:2b:
                    f1:44:73:fa:a5:c3:ae:b3:5d:7c:1f:a9:50:d4:03:
                    c5:c5:18:48:a3:36:c1:76:4e:f2:d9:ea:67:ad:6c:
                    3f:31:a2:e2:7b:19:b6:18:05:97:9c:57:b0:0f:c3:
                    40:d9:7f:47:15:21:c2:e5:fb:56:00:2b:dc:56:81:
                    7c:dc:6c:2a:19:6d:e5:b5:ee:3c:10:b6:54:1c:f6:
                    1e:f7:68:9d:06:b5:74:6e:ae:f4:16:5c:3c:91:16:
                    52:e8:37:ae:20:bc:ac:71:60:52:d6:9a:09:cb:d8:
                    77:d0:d5:f9:39:17:90:40:81:f2:8a:0d:30:f3:20:
                    c0:52:73:63:6f:0d:a7:d0:df:21:32:da:74:0e:1b:
                    85:74:13:fd:a6:00:74:70:35:4b:31:b4:e2:45:71:
                    a9:7b:11:7f:0d:8e:c9:fa:37:2c:c0:d4:8f:cc:73:
                    04:fc:27:9e:15:e8:b4:dd:29:ac:3e:73:6b:2a:9d:
                    b6:5a:0f:96:32:4b:45:d1:d5:d6:c0:3c:97:48:b0:
                    6b:1c:44:4c:69:20:33:2f:f0:5c:3a:5d:7a:de:8f:
                    a0:c8:ce:a3:17:0b:7d:ea:28:56:d1:06:45:da:03:
                    0f:eb:3c:47:0c:9e:09:d9:a7:30:24:bd:dd:04:d3:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F9:C1:31:C7:D0:0C:0E:91:50:F5:C6:4E:63:4C:23:6D:5C:59:73
            X509v3 Authority Key Identifier:
                keyid:24:45:8C:13:F4:04:74:E3:74:9C:BA:0A:49:F5:9B:36:2B:4D:3E:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24458C13F40474E3749CBA0A49F59B362B4D3E0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6MAPURaQMTkfjJd9YMGCjVf8f45rkVfmPdYWFDeoBV8A/0/3136302e3233382e3133302e302f32332d3233203d3e20323636353437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:9c:00:a4:90:7f:b5:28:44:6c:1c:27:99:8d:6e:94:4c:52:
         19:13:2d:a3:1c:cc:32:e0:b7:1a:b1:b3:c2:49:32:b0:f6:8b:
         84:0c:9d:10:2d:2f:a7:04:af:a8:f6:34:b5:18:b4:bf:5a:85:
         6f:f9:66:04:5e:c0:cd:2b:ef:88:6b:4b:7e:fc:21:e5:98:99:
         a8:35:99:b6:20:1b:aa:ce:df:14:19:cb:43:7f:f9:a0:21:1c:
         5d:63:2f:b4:5d:b2:77:5f:5d:1f:d4:45:ac:8b:f1:0b:c0:17:
         e7:75:38:b8:08:64:5d:fd:87:60:7f:43:84:18:14:20:b0:c9:
         58:ce:3a:29:88:f9:ce:b8:76:fe:dd:f2:c9:dd:13:44:af:77:
         23:70:4c:95:2a:04:83:54:5f:b7:b8:8f:f6:09:d2:ca:48:66:
         29:b6:12:2a:da:48:4f:2b:78:2f:6c:b7:e9:5c:81:a4:c0:b0:
         04:8a:5a:c6:6b:b9:75:9e:d1:d7:36:ce:a2:4e:f9:82:04:85:
         b5:39:94:b9:31:93:97:90:20:f2:99:fa:54:a7:11:7b:aa:5c:
         f2:d3:1c:bd:46:bd:53:9d:19:fb:a9:81:8a:71:f5:7a:b4:6e:
         5d:3b:f8:49:0d:60:3b:32:3a:f6:1e:1f:c9:3f:09:bf:9a:41:
         90:7f:90:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org