Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3137312e302f32342d3234203d3e20323636313938.roa
File:                     3136302e32302e3137312e302f32342d3234203d3e20323636313938.roa (raw, json)
Hash identifier:          0+hZEPagOX/aV+Y7snDmM35c43/IhwEjQUreLdaBcNY=
Subject key identifier:   12:11:CA:1C:E8:F6:BB:53:17:17:AB:74:9D:5F:28:01:CB:A1:63:1F
Certificate issuer:       /CN=97389F2B9F86CECC561184F8858464370294B9B2
Certificate serial:       79BD077DECEB18781D6AF90E66E6BFE769C2F8D4
Authority key identifier: 97:38:9F:2B:9F:86:CE:CC:56:11:84:F8:85:84:64:37:02:94:B9:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97389F2B9F86CECC561184F8858464370294B9B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3137312e302f32342d3234203d3e20323636313938.roa
Signing time:             Fri 26 May 2023 12:47:13 +0000
ROA not before:           Fri 26 May 2023 12:42:13 +0000
ROA not after:            Fri 24 May 2024 12:47:13 +0000
asID:                     266198
IP address blocks:        160.20.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:bd:07:7d:ec:eb:18:78:1d:6a:f9:0e:66:e6:bf:e7:69:c2:f8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97389F2B9F86CECC561184F8858464370294B9B2
        Validity
            Not Before: May 26 12:42:13 2023 GMT
            Not After : May 24 12:47:13 2024 GMT
        Subject: CN=1211CA1CE8F6BB531717AB749D5F2801CBA1631F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:42:f5:65:7a:7f:be:1c:bf:18:bc:5d:ea:f8:
                    66:d8:07:5b:ca:41:53:85:1c:c5:b2:64:e4:c6:d3:
                    ca:14:be:f5:0f:fc:23:61:0c:45:9a:85:bc:32:0d:
                    13:81:86:55:90:ab:f0:3c:c6:43:ec:21:d4:a5:e4:
                    c9:0c:ce:e1:02:ff:40:8f:5c:59:6e:82:f4:72:0b:
                    ea:ca:d2:e9:7a:47:4f:9f:14:8d:62:68:84:68:da:
                    8b:03:b4:9b:10:b9:24:d0:d6:18:b5:5d:7d:2a:02:
                    20:94:68:80:29:dd:46:01:3e:3e:e7:27:0e:4a:66:
                    17:39:a3:3f:12:a0:14:83:83:9e:2b:c5:1d:a4:05:
                    ce:67:5b:f9:22:85:1c:e1:b2:0e:77:6e:a6:f7:e3:
                    6f:34:93:5d:da:1d:e7:63:bc:51:0f:c1:96:17:4f:
                    f4:ed:ea:5c:98:22:48:e1:4d:88:49:b8:11:ac:b4:
                    0c:cc:43:7a:79:5e:ae:6e:98:cf:df:b7:56:7b:d1:
                    86:7d:a6:a7:1e:a5:7f:e5:f5:2c:a9:38:d5:a3:fc:
                    97:14:7c:68:d5:f6:48:1a:c0:a4:52:d8:9d:bb:55:
                    86:bf:36:21:91:f2:fb:ec:eb:37:6c:b6:33:07:25:
                    56:ff:35:a5:91:5d:82:9e:0a:29:b4:84:8e:82:be:
                    7d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:11:CA:1C:E8:F6:BB:53:17:17:AB:74:9D:5F:28:01:CB:A1:63:1F
            X509v3 Authority Key Identifier:
                keyid:97:38:9F:2B:9F:86:CE:CC:56:11:84:F8:85:84:64:37:02:94:B9:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/97389F2B9F86CECC561184F8858464370294B9B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/97389F2B9F86CECC561184F8858464370294B9B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/0/3136302e32302e3137312e302f32342d3234203d3e20323636313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:71:53:f0:0d:ff:39:ec:c8:ff:f3:a7:59:07:56:6a:21:32:
         26:7a:fa:19:3c:22:db:14:d8:d6:08:d0:ae:48:32:6d:fd:72:
         07:92:b0:aa:03:89:53:5a:2e:ed:96:63:00:b5:4a:00:f7:8a:
         45:b6:a5:0f:ff:1c:e8:a6:23:65:09:63:82:38:a1:38:a1:6f:
         86:98:e4:a2:62:b0:41:f4:ca:80:22:79:ee:77:0d:04:be:8a:
         1b:21:57:3c:13:96:58:4e:cf:03:c9:58:1c:61:ae:82:a3:c4:
         39:38:76:2a:cf:56:f2:0d:04:44:f6:e5:5e:19:eb:c8:9a:a8:
         83:1a:4d:ae:5e:23:08:4e:d6:dc:c4:11:b8:fa:c4:54:f1:44:
         b1:e5:b3:28:2e:e1:b3:59:3c:03:18:96:fa:8b:29:81:1c:bd:
         96:50:eb:cf:d3:f2:d9:32:0a:53:ba:09:23:4b:b8:fa:fa:ac:
         81:f7:62:79:02:d7:d8:d7:4b:5e:9c:dc:4a:e0:74:9e:c2:42:
         26:15:7b:d2:d8:c2:2f:e2:4b:81:e0:76:6c:c1:a2:d0:b4:bb:
         c1:d5:87:3d:ad:b0:d0:c1:d0:2e:e8:d1:00:38:af:30:fc:eb:
         1e:d6:3e:e9:8f:48:ac:48:02:10:33:9d:1e:fa:89:06:82:f1:
         e5:ac:e9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org