Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3136382e302f32322d3232203d3e20323636313938.roa
File:                     3136302e32302e3136382e302f32322d3232203d3e20323636313938.roa (raw, json)
Hash identifier:          kixNJL2QLP4gC1i6qgEU9fNM1IjAv8yhxQkHmp4cR+k=
Subject key identifier:   76:0B:5C:D9:BF:5B:45:2B:B0:F1:AC:1F:F2:9E:27:91:25:D0:F8:DC
Certificate issuer:       /CN=08569896B950AF614AD919489CA9496B4E462F59
Certificate serial:       3B8AECC5A8189D73C31A75981325F0260AF23976
Authority key identifier: 08:56:98:96:B9:50:AF:61:4A:D9:19:48:9C:A9:49:6B:4E:46:2F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08569896B950AF614AD919489CA9496B4E462F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3136382e302f32322d3232203d3e20323636313938.roa
Signing time:             Tue 31 Oct 2023 20:44:01 +0000
ROA not before:           Tue 31 Oct 2023 20:39:01 +0000
ROA not after:            Tue 29 Oct 2024 20:44:01 +0000
asID:                     266198
IP address blocks:        160.20.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8a:ec:c5:a8:18:9d:73:c3:1a:75:98:13:25:f0:26:0a:f2:39:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08569896B950AF614AD919489CA9496B4E462F59
        Validity
            Not Before: Oct 31 20:39:01 2023 GMT
            Not After : Oct 29 20:44:01 2024 GMT
        Subject: CN=760B5CD9BF5B452BB0F1AC1FF29E279125D0F8DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dc:a5:83:1a:8d:4c:9b:68:f2:7b:cd:d6:77:
                    2d:01:f7:57:a1:95:7c:aa:90:39:d4:9e:bb:a6:9c:
                    67:c9:4d:2a:8c:89:e7:72:13:08:32:c6:44:ab:c4:
                    b7:31:ab:aa:99:e1:36:4f:5a:e0:99:a7:38:fe:0e:
                    2b:e5:c1:db:fa:cc:23:db:cc:fe:77:9e:33:8b:1d:
                    e9:f2:dd:1a:04:24:bc:9b:2a:0e:38:5f:a8:74:af:
                    4c:a6:fd:6a:3b:b7:af:ec:39:8f:94:27:5c:a3:c2:
                    21:22:ea:04:d0:75:45:3f:1a:5e:c1:f4:38:0a:fe:
                    f2:2a:4f:23:b9:00:38:79:d3:97:fe:dd:19:90:c4:
                    4f:c7:c4:64:e3:c8:2e:55:fe:67:40:96:c5:3f:f8:
                    ab:32:b8:df:76:1f:7f:a7:af:dd:07:61:d8:39:81:
                    31:fc:b1:ba:8c:4b:dd:60:47:39:a0:1c:77:93:93:
                    3e:1e:fd:5f:fe:d5:b7:e2:13:dc:e8:82:16:0a:e7:
                    bb:cb:00:56:f4:11:d2:d1:b5:76:28:6c:b5:49:29:
                    21:4d:66:f9:cf:ed:da:77:8b:33:15:b3:e2:76:ad:
                    b0:1c:3e:b4:fe:c9:d4:17:51:40:65:3f:47:36:f4:
                    00:9a:fd:6c:8a:05:09:a6:d9:7c:e8:16:6c:5b:6f:
                    57:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0B:5C:D9:BF:5B:45:2B:B0:F1:AC:1F:F2:9E:27:91:25:D0:F8:DC
            X509v3 Authority Key Identifier:
                keyid:08:56:98:96:B9:50:AF:61:4A:D9:19:48:9C:A9:49:6B:4E:46:2F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/08569896B950AF614AD919489CA9496B4E462F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08569896B950AF614AD919489CA9496B4E462F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3136382e302f32322d3232203d3e20323636313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:84:48:0f:a4:7f:98:1b:a2:f6:a0:05:89:5b:ee:28:70:6e:
         e6:ad:02:ae:aa:9a:b1:5d:43:b1:98:ea:06:81:2e:fc:c2:04:
         d1:70:ac:87:11:77:8b:3f:8a:82:6f:e9:38:4c:e8:ef:4f:9c:
         82:18:b0:58:c7:67:d7:64:6c:c8:a1:5a:1e:0f:24:69:86:5c:
         a9:f5:61:b3:4b:5d:09:2c:d1:15:32:e8:62:6c:5a:1d:57:ca:
         d2:fd:41:10:db:3f:cc:00:4a:4d:7a:b7:88:90:a7:3e:f3:3b:
         ea:7b:e7:ab:35:3c:57:1f:25:99:e0:ce:e4:ea:41:cc:cd:ca:
         07:96:ac:e2:61:72:93:20:0d:f2:96:75:ab:74:b1:66:6c:94:
         61:e1:2e:a4:ab:82:a0:41:14:f8:eb:57:9c:5f:5c:b0:18:1f:
         46:78:3f:a2:a5:73:3a:9a:e0:99:6a:90:52:9e:46:04:4c:17:
         ae:f3:30:87:00:81:75:84:62:75:13:a5:5d:ec:7e:3a:75:01:
         10:3c:c5:08:f9:68:5f:82:96:7a:05:22:ea:41:a7:5f:b5:de:
         0c:a3:7f:71:34:c4:49:18:d1:c7:d7:1c:ea:73:0c:e3:f0:4f:
         50:95:20:58:c3:39:be:10:a9:73:7d:86:c0:50:68:c8:4e:50:
         85:0f:7f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org