Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa
File:                     3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa (raw, json)
Hash identifier:          Evj/NAdOA9BbNWxXZU+BcBjT0bv4ZnEw4WVhAHvCl00=
Subject key identifier:   E9:51:1C:94:91:93:BD:DA:6A:45:47:1B:0B:0C:F4:61:67:D5:57:6D
Certificate issuer:       /CN=6BE684BE05E26786329CFC6C8E5B8F0195AE1548
Certificate serial:       67BAE925FA8C808FF01DAB3D3971F1CF6722B10C
Authority key identifier: 6B:E6:84:BE:05:E2:67:86:32:9C:FC:6C:8E:5B:8F:01:95:AE:15:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BE684BE05E26786329CFC6C8E5B8F0195AE1548.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa
Signing time:             Tue 20 Feb 2024 18:22:06 +0000
ROA not before:           Tue 20 Feb 2024 18:17:06 +0000
ROA not after:            Tue 18 Feb 2025 18:22:06 +0000
asID:                     266198
IP address blocks:        160.20.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ba:e9:25:fa:8c:80:8f:f0:1d:ab:3d:39:71:f1:cf:67:22:b1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BE684BE05E26786329CFC6C8E5B8F0195AE1548
        Validity
            Not Before: Feb 20 18:17:06 2024 GMT
            Not After : Feb 18 18:22:06 2025 GMT
        Subject: CN=E9511C949193BDDA6A45471B0B0CF46167D5576D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:b6:af:a5:0e:6f:37:1b:d9:54:75:97:11:
                    73:a3:6a:f3:16:90:69:76:fc:1f:9c:7f:d9:41:e6:
                    89:ce:9c:55:ec:ed:a0:24:ea:ee:b5:83:e8:07:78:
                    0e:b0:87:92:d3:7e:29:88:3b:22:e9:5e:16:f0:bf:
                    3c:2d:24:2d:1e:54:ba:ce:41:56:f4:1a:83:16:b5:
                    65:ac:6d:9d:26:7d:6c:07:ce:25:79:20:20:7a:77:
                    b1:97:31:ef:62:ec:0e:3b:4f:b3:53:91:e0:4e:45:
                    48:09:d9:cd:9e:e3:3c:e6:19:20:c4:70:9c:30:34:
                    ef:8a:a0:be:66:73:0a:98:9d:28:29:8c:39:8a:da:
                    45:bf:1a:27:1c:4a:87:1c:fc:7e:cb:09:f5:0a:f9:
                    7e:cf:99:dd:7a:23:82:ea:a1:ab:43:d1:23:f2:67:
                    a6:b8:79:e2:1d:4f:2a:58:67:2c:0a:41:38:be:cf:
                    99:a1:bd:9c:cb:a1:21:fc:49:8e:17:da:8f:ee:a5:
                    c5:fa:42:96:d7:22:f8:e7:78:46:11:98:92:68:d2:
                    42:1d:39:7f:da:9b:8f:03:14:b5:c5:cc:c5:1a:c4:
                    99:f2:36:41:35:22:4a:a0:74:85:3d:67:14:58:6f:
                    44:41:d4:78:8e:52:13:c6:b6:64:ff:ba:7a:1e:33:
                    d7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:51:1C:94:91:93:BD:DA:6A:45:47:1B:0B:0C:F4:61:67:D5:57:6D
            X509v3 Authority Key Identifier:
                keyid:6B:E6:84:BE:05:E2:67:86:32:9C:FC:6C:8E:5B:8F:01:95:AE:15:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/6BE684BE05E26786329CFC6C8E5B8F0195AE1548.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BE684BE05E26786329CFC6C8E5B8F0195AE1548.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:d1:e1:d4:4f:50:e1:2b:a6:08:ec:3e:f8:bc:69:44:fd:cf:
         c0:28:e0:9b:82:c0:c3:ad:be:4b:68:59:34:d8:84:d0:f3:ca:
         53:1c:29:55:54:61:87:42:08:c5:5e:02:9f:ad:6e:96:45:d7:
         7d:7b:df:62:30:39:c7:28:f5:44:bc:89:4f:36:dc:1c:b1:bd:
         d2:3c:04:c2:6b:15:31:5f:7c:2a:0b:10:8a:3f:e6:04:d5:b0:
         20:53:d5:a2:a4:24:33:7e:5b:4f:60:b0:a9:52:ac:1e:fe:b4:
         26:6c:8f:f4:0b:6f:ba:d8:0f:6e:98:96:9b:cb:41:a8:c2:4a:
         8e:cf:73:46:0c:10:94:36:2e:5f:10:34:a2:ea:1e:cd:9a:04:
         04:ae:b4:fd:2a:45:fd:03:46:4c:85:3f:26:48:1c:fd:2d:c2:
         65:81:9f:46:1a:1e:f6:39:6f:a3:15:6e:96:95:ea:ca:19:08:
         20:ed:a1:08:a9:73:25:16:d7:1e:ef:13:99:79:d7:5f:b0:b4:
         dd:45:62:fe:05:7d:9b:ee:de:39:81:99:00:dc:c2:9c:12:39:
         63:ee:ee:d2:1c:96:11:60:9f:b2:1a:ec:b5:08:9a:b1:d6:af:
         a9:87:5c:50:a3:bc:32:86:99:e0:7d:7f:d4:24:db:2c:5c:50:
         52:13:79:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org