Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3136382e302f32342d3234203d3e20323636313938.roa
File:                     3136302e32302e3136382e302f32342d3234203d3e20323636313938.roa (raw, json)
Hash identifier:          PnneBS13tJaK5QxO4dk0unYaYXvL3CwcZoFLhKpFYBA=
Subject key identifier:   E0:8D:0E:98:02:9A:55:87:A6:8B:91:D0:F0:E3:0B:F2:F1:5B:95:93
Certificate issuer:       /CN=97389F2B9F86CECC561184F8858464370294B9B2
Certificate serial:       4BF13827AA2CC1694F62479A53F69D90B9CE5ABB
Authority key identifier: 97:38:9F:2B:9F:86:CE:CC:56:11:84:F8:85:84:64:37:02:94:B9:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97389F2B9F86CECC561184F8858464370294B9B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3136382e302f32342d3234203d3e20323636313938.roa
Signing time:             Thu 25 May 2023 19:22:30 +0000
ROA not before:           Thu 25 May 2023 19:17:30 +0000
ROA not after:            Thu 23 May 2024 19:22:30 +0000
asID:                     266198
IP address blocks:        160.20.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f1:38:27:aa:2c:c1:69:4f:62:47:9a:53:f6:9d:90:b9:ce:5a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97389F2B9F86CECC561184F8858464370294B9B2
        Validity
            Not Before: May 25 19:17:30 2023 GMT
            Not After : May 23 19:22:30 2024 GMT
        Subject: CN=E08D0E98029A5587A68B91D0F0E30BF2F15B9593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d4:46:2b:f9:b9:a5:d3:52:36:f6:4e:da:1e:
                    ae:e6:11:78:63:4a:ee:66:be:ea:95:b4:86:ee:2e:
                    bf:df:eb:66:4d:78:16:46:61:c2:40:44:ca:db:f3:
                    26:90:6d:81:88:f4:e3:f7:45:ba:76:7b:91:c1:22:
                    59:ab:74:0b:87:c9:a7:ee:8c:31:6f:ec:dd:20:a5:
                    5f:49:d5:e7:33:55:66:59:84:0f:57:ba:1a:08:d0:
                    c2:9e:6f:fc:66:5e:0d:9f:ab:a5:35:8f:04:2d:bf:
                    36:66:1d:78:45:ee:68:d7:c8:28:d6:6e:e1:23:b7:
                    bc:5e:27:b8:7a:d2:a4:93:cc:8b:8a:5e:c6:5a:ad:
                    4e:34:48:9b:62:90:40:c0:bc:4e:03:d2:76:03:41:
                    c9:62:06:07:1b:b6:a5:0f:7d:c6:c3:67:08:68:35:
                    67:c8:16:00:57:0b:d3:86:ad:c5:d4:5a:c2:2b:c7:
                    29:2a:77:5e:38:06:bc:c8:a7:53:96:aa:a9:d8:c2:
                    aa:bd:e8:ef:6e:1c:10:35:b4:df:b2:ca:83:41:61:
                    3c:98:39:b5:7c:f1:e9:d4:69:75:c0:f8:18:9d:84:
                    d3:ae:94:77:6b:4e:94:fd:ee:51:25:d9:60:3b:60:
                    26:5c:c4:e9:e4:70:78:9c:71:72:59:cf:b0:13:a6:
                    4b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8D:0E:98:02:9A:55:87:A6:8B:91:D0:F0:E3:0B:F2:F1:5B:95:93
            X509v3 Authority Key Identifier:
                keyid:97:38:9F:2B:9F:86:CE:CC:56:11:84:F8:85:84:64:37:02:94:B9:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/97389F2B9F86CECC561184F8858464370294B9B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97389F2B9F86CECC561184F8858464370294B9B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3136382e302f32342d3234203d3e20323636313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:5b:26:ca:91:89:9e:75:83:82:75:cd:fd:e4:fa:fd:36:84:
         75:47:06:97:56:b2:a8:58:9c:64:58:21:b2:1d:f7:c5:ae:55:
         e1:ea:89:f8:05:62:38:3c:82:73:ec:fc:9e:3c:17:c0:95:01:
         d8:76:60:d4:a3:18:f2:40:90:42:57:85:7d:e4:56:ef:77:b0:
         6a:57:00:cc:1f:5b:01:6c:60:e2:f6:7a:b0:77:67:d3:88:30:
         07:e0:0d:20:53:62:3e:74:4f:c4:a8:f0:7e:2b:cc:b8:27:81:
         16:48:4c:e8:3e:10:31:76:00:9b:2e:dd:bc:6a:5a:4a:a7:13:
         e6:be:c6:41:34:c6:d6:b4:2b:0e:f7:9b:8e:67:53:e4:cd:5e:
         b7:85:03:e1:11:7c:3d:b9:0e:02:3f:f8:70:ef:0c:18:e7:55:
         7a:02:3c:75:21:26:c8:47:36:08:5f:b8:0c:83:f2:3f:db:26:
         20:b3:0f:0f:ba:16:66:a1:d1:e6:56:63:07:28:3f:43:17:6a:
         ac:14:dc:13:b5:f6:d4:c1:33:28:2e:e3:32:20:54:f1:7c:8e:
         69:18:de:3d:eb:81:93:d7:0c:f7:bc:d4:39:cc:7e:a6:e2:01:
         95:25:38:26:2f:1a:a4:5f:46:1b:23:92:81:ab:37:2f:fd:1e:
         fa:1b:c2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org