Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3136382e302f32332d3233203d3e20323636313938.roa
File:                     3136302e32302e3136382e302f32332d3233203d3e20323636313938.roa (raw, json)
Hash identifier:          3u5uzG5zOHeeeXRqDkse2mVnu8Civ+xw/igDBKEcczI=
Subject key identifier:   44:7E:12:A5:6B:B5:6C:FC:87:9A:96:21:0D:2E:9D:90:FD:51:90:4A
Certificate issuer:       /CN=08569896B950AF614AD919489CA9496B4E462F59
Certificate serial:       1C733BDE6526DE62B1123C4BAECDB62F4F51D863
Authority key identifier: 08:56:98:96:B9:50:AF:61:4A:D9:19:48:9C:A9:49:6B:4E:46:2F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08569896B950AF614AD919489CA9496B4E462F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3136382e302f32332d3233203d3e20323636313938.roa
Signing time:             Tue 31 Oct 2023 20:44:02 +0000
ROA not before:           Tue 31 Oct 2023 20:39:02 +0000
ROA not after:            Tue 29 Oct 2024 20:44:02 +0000
asID:                     266198
IP address blocks:        160.20.168.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:73:3b:de:65:26:de:62:b1:12:3c:4b:ae:cd:b6:2f:4f:51:d8:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08569896B950AF614AD919489CA9496B4E462F59
        Validity
            Not Before: Oct 31 20:39:02 2023 GMT
            Not After : Oct 29 20:44:02 2024 GMT
        Subject: CN=447E12A56BB56CFC879A96210D2E9D90FD51904A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:45:4e:e6:ff:14:5b:e2:9e:1e:1e:50:56:e6:
                    df:06:de:b0:3c:6d:68:4c:ed:de:f3:b4:8c:ff:7b:
                    99:74:9b:5a:5f:a4:e8:d4:28:e6:7b:c9:ec:07:5d:
                    c9:9b:53:ae:96:ac:66:f3:79:cc:c7:dc:87:50:6d:
                    2d:73:4f:46:20:eb:ae:47:78:9b:0d:46:20:68:0a:
                    5f:c8:32:27:4b:bf:72:a4:bc:51:70:38:7b:48:61:
                    58:3c:b1:b8:65:1e:80:4b:4b:f2:ee:3d:99:77:76:
                    e8:d7:a5:a4:0c:19:58:6a:0b:a4:f7:bd:dc:5e:9d:
                    9f:24:94:56:77:2d:9d:30:01:2c:5b:16:8b:a7:3f:
                    27:0e:f9:22:2a:50:d2:28:7b:ca:3c:d9:40:cc:6e:
                    a8:4c:02:82:fe:66:9e:ea:de:07:1e:10:32:1d:8d:
                    20:5d:e8:ac:88:c4:aa:ec:72:b9:21:29:38:b6:f4:
                    43:c6:08:8f:23:38:58:a4:f3:7a:ea:45:9a:8f:4c:
                    16:0b:21:1a:14:0e:a6:eb:08:55:70:d8:72:74:92:
                    cd:d5:ef:0c:5d:17:dd:94:04:4d:d8:20:fa:19:fe:
                    d2:a6:b5:ad:88:49:0f:59:92:e0:0b:8a:aa:ea:c3:
                    e6:ef:17:38:cb:96:7d:19:4e:84:2d:76:66:b3:90:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7E:12:A5:6B:B5:6C:FC:87:9A:96:21:0D:2E:9D:90:FD:51:90:4A
            X509v3 Authority Key Identifier:
                keyid:08:56:98:96:B9:50:AF:61:4A:D9:19:48:9C:A9:49:6B:4E:46:2F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/08569896B950AF614AD919489CA9496B4E462F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08569896B950AF614AD919489CA9496B4E462F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3136382e302f32332d3233203d3e20323636313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:9c:35:54:60:6d:98:7e:bf:96:c7:16:aa:ce:d7:10:7d:77:
         54:dd:fd:39:b5:7a:35:35:f5:48:c2:f1:7f:69:0e:a8:db:9b:
         1d:3a:8b:b7:1c:14:f2:b7:09:2a:c5:9c:5e:4b:81:7d:00:d4:
         9e:24:1a:14:45:ed:9f:df:16:94:7d:da:58:d3:86:79:81:cd:
         95:a7:75:52:1c:f9:89:04:be:df:46:b7:13:f1:ab:ae:18:5b:
         ea:bc:17:f1:8f:5b:d8:1b:ae:b1:d1:29:da:45:84:c9:f4:8b:
         77:6f:24:63:bf:c1:b1:a4:3b:08:05:31:ec:51:98:cb:66:f7:
         79:0a:62:88:19:70:bd:4d:e4:58:72:6a:6b:18:5a:57:6a:34:
         34:e5:92:33:c6:d1:00:80:a4:7f:ef:d3:5c:dc:48:d8:74:d5:
         6b:34:1c:df:37:33:89:4c:e2:56:41:35:3f:20:4c:36:85:eb:
         6c:b0:8f:a4:0e:ca:5a:bf:63:c2:6f:f7:86:9a:22:fe:9d:06:
         77:7d:aa:81:eb:33:8b:ec:a7:32:ad:5b:3e:d1:56:e7:63:ed:
         f7:5a:56:b3:d0:3a:2a:14:7d:b0:99:e1:25:81:16:26:1f:61:
         73:5c:e7:e9:60:dc:18:d3:4a:71:58:f9:e5:fc:d5:7e:de:3e:
         40:ee:bb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:15 2025 by rpki-client