Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3137302e302f32332d3233203d3e20323636313938.roa
File:                     3136302e32302e3137302e302f32332d3233203d3e20323636313938.roa (raw, json)
Hash identifier:          qfPhXeoKxEuCKnjgzkiHUvJVb7uL8YHfeCAN2ZtNvsY=
Subject key identifier:   F9:02:31:89:57:38:28:40:B5:20:61:50:DB:2F:D7:4C:74:A1:A0:36
Certificate issuer:       /CN=08569896B950AF614AD919489CA9496B4E462F59
Certificate serial:       436AB52DB94B7EE07179E2CB3AFFAFBE0E1DCD10
Authority key identifier: 08:56:98:96:B9:50:AF:61:4A:D9:19:48:9C:A9:49:6B:4E:46:2F:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08569896B950AF614AD919489CA9496B4E462F59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3137302e302f32332d3233203d3e20323636313938.roa
Signing time:             Tue 31 Oct 2023 20:44:04 +0000
ROA not before:           Tue 31 Oct 2023 20:39:04 +0000
ROA not after:            Tue 29 Oct 2024 20:44:04 +0000
asID:                     266198
IP address blocks:        160.20.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:6a:b5:2d:b9:4b:7e:e0:71:79:e2:cb:3a:ff:af:be:0e:1d:cd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08569896B950AF614AD919489CA9496B4E462F59
        Validity
            Not Before: Oct 31 20:39:04 2023 GMT
            Not After : Oct 29 20:44:04 2024 GMT
        Subject: CN=F902318957382840B5206150DB2FD74C74A1A036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:ca:91:14:06:0c:c9:f6:78:d4:86:e6:60:
                    46:19:d4:6b:94:57:56:11:20:e9:f6:32:2e:d8:1e:
                    39:de:71:72:0e:00:c2:b8:69:18:dd:61:c3:2b:25:
                    7f:0b:9a:ea:e4:14:40:ec:54:72:aa:7c:8e:00:10:
                    6e:c3:5a:9a:90:90:fc:a7:44:90:33:f5:fd:88:7d:
                    70:e2:4b:e1:b4:43:25:63:ef:1a:4b:61:be:2a:44:
                    7c:6c:a4:65:99:c8:f4:c7:2d:58:70:2b:bd:28:7d:
                    19:92:b3:6e:76:51:c6:94:6d:40:b3:d4:54:58:95:
                    4a:47:0b:8c:90:e8:6b:27:44:f8:82:23:f4:9e:d3:
                    3d:a8:16:01:04:92:55:3e:58:52:ed:a3:65:f8:8d:
                    92:f0:4b:56:d3:65:25:e3:9b:e0:c9:e7:a1:65:9f:
                    67:5a:c1:b4:be:c0:ea:4d:b1:4f:4d:c6:30:61:c3:
                    08:12:19:50:8b:8f:39:7b:cb:26:79:8f:1c:8f:e7:
                    03:62:a0:a2:64:fa:e1:91:69:88:1e:d0:02:f8:cb:
                    f5:73:af:35:0f:2c:5f:c4:9c:9b:9c:43:56:27:5a:
                    94:89:a7:3b:c9:dd:ab:7e:5f:17:c5:2d:48:9d:1e:
                    61:1f:e7:f0:91:41:e2:2f:0a:a0:d3:b6:bf:8b:dc:
                    61:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:02:31:89:57:38:28:40:B5:20:61:50:DB:2F:D7:4C:74:A1:A0:36
            X509v3 Authority Key Identifier:
                keyid:08:56:98:96:B9:50:AF:61:4A:D9:19:48:9C:A9:49:6B:4E:46:2F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/08569896B950AF614AD919489CA9496B4E462F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08569896B950AF614AD919489CA9496B4E462F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3137302e302f32332d3233203d3e20323636313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:93:fa:bb:68:af:63:1e:56:15:c3:08:76:b2:79:1a:77:1c:
         ce:4b:d0:50:ea:86:a8:c6:b1:21:15:ee:40:6c:7a:25:75:3f:
         89:dd:2a:de:86:1a:15:9a:db:b2:ca:05:cf:fb:3d:81:72:fd:
         26:47:86:f4:7c:0e:11:57:fd:37:f5:70:c0:89:38:02:cc:e0:
         11:ba:c7:1b:dc:3f:a2:da:3d:6d:9d:2b:11:ba:7d:64:27:19:
         4f:59:4a:eb:d5:de:ac:1e:6d:81:38:76:dd:6d:65:8a:32:db:
         ef:cc:af:f4:60:9c:67:28:c2:6b:3b:6e:7c:ff:3d:9f:27:22:
         c6:74:1e:90:b0:f0:e5:17:1b:b5:99:cf:a8:8f:33:62:3e:f0:
         38:89:8d:45:1c:50:6e:f3:96:84:23:c4:54:b6:bf:db:35:e4:
         c2:ca:a2:5b:32:a9:27:a6:44:b6:3f:51:4a:84:a4:56:eb:7b:
         e3:c1:29:cb:81:21:31:6e:ed:e0:91:05:51:11:26:04:b8:96:
         c3:44:6b:47:40:d9:13:1c:e5:09:cf:5a:a7:db:9c:ae:ca:ed:
         fd:b3:9d:f6:3a:fd:0d:6f:24:a8:dc:ff:72:2a:15:64:26:3e:
         86:6d:c4:c4:dd:39:e1:ea:a5:ac:af:b4:e3:67:d4:23:07:d6:
         e2:48:c2:5a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQ2q1LblLfuBxeeLLOv+vvg4dzRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg1Njk4OTZCOTUwQUY2MTRBRDkxOTQ4OUNBOTQ5NkI0
RTQ2MkY1OTAeFw0yMzEwMzEyMDM5MDRaFw0yNDEwMjkyMDQ0MDRaMDMxMTAvBgNV
BAMTKEY5MDIzMTg5NTczODI4NDBCNTIwNjE1MERCMkZENzRDNzRBMUEwMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9bsqRFAYMyfZ41IbmYEYZ1GuU
V1YRIOn2Mi7YHjnecXIOAMK4aRjdYcMrJX8LmurkFEDsVHKqfI4AEG7DWpqQkPyn
RJAz9f2IfXDiS+G0QyVj7xpLYb4qRHxspGWZyPTHLVhwK70ofRmSs252UcaUbUCz
1FRYlUpHC4yQ6GsnRPiCI/Se0z2oFgEEklU+WFLto2X4jZLwS1bTZSXjm+DJ56Fl
n2dawbS+wOpNsU9NxjBhwwgSGVCLjzl7yyZ5jxyP5wNioKJk+uGRaYge0AL4y/Vz
rzUPLF/EnJucQ1YnWpSJpzvJ3at+XxfFLUidHmEf5/CRQeIvCqDTtr+L3GFNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+QIxiVc4KEC1IGFQ2y/XTHShoDYwHwYDVR0j
BBgwFoAUCFaYlrlQr2FK2RlInKlJa05GL1kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHRpNHYyWjhIZzFueXR5YjRBbm1SaERxVDFQNWN6Vjg4SnZCYXhHYW1N
alIvMC8wODU2OTg5NkI5NTBBRjYxNEFEOTE5NDg5Q0E5NDk2QjRFNDYyRjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzA4NTY5ODk2Qjk1MEFGNjE0
QUQ5MTk0ODlDQTk0OTZCNEU0NjJGNTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh0aTR2Mlo4SGcxbnl0eWI0QW5tUmhEcVQxUDVjelY4OEp2QmF4R2FtTWpSLzAv
MzEzNjMwMmUzMjMwMmUzMTM3MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzYzMTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGgFKowDQYJKoZIhvcNAQELBQADggEBAB+T+rto
r2MeVhXDCHayeRp3HM5L0FDqhqjGsSEV7kBseiV1P4ndKt6GGhWa27LKBc/7PYFy
/SZHhvR8DhFX/Tf1cMCJOALM4BG6xxvcP6LaPW2dKxG6fWQnGU9ZSuvV3qwebYE4
dt1tZYoy2+/Mr/RgnGcowms7bnz/PZ8nIsZ0HpCw8OUXG7WZz6iPM2I+8DiJjUUc
UG7zloQjxFS2v9s15MLKolsyqSemRLY/UUqEpFbre+PBKcuBITFu7eCRBVERJgS4
lsNEa0dA2RMc5QnPWqfbnK7K7f2znfY6/Q1vJKjc/3IqFWQmPoZtxMTdOeHqpayv
tONn1CMH1uJIwlo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org