Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/3136302e3233382e3134382e302f32322d3332203d3e20323636353533.roa
File:                     3136302e3233382e3134382e302f32322d3332203d3e20323636353533.roa (raw, json)
Hash identifier:          SjQN7IzbS+nMZwOZ5htRf6EjUN3Gap8k2UPbN1rtCP8=
Subject key identifier:   9D:95:08:C3:89:D9:B9:BA:F8:28:E3:5C:6B:FD:69:8B:F5:10:17:F5
Certificate issuer:       /CN=44B5BBA0335229473521F3DA7C0E55975284FD42
Certificate serial:       60B72095FEC56E5B9D8513B0E94CAF1EA1AE2568
Authority key identifier: 44:B5:BB:A0:33:52:29:47:35:21:F3:DA:7C:0E:55:97:52:84:FD:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44B5BBA0335229473521F3DA7C0E55975284FD42.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/3136302e3233382e3134382e302f32322d3332203d3e20323636353533.roa
Signing time:             Mon 25 Mar 2024 15:41:28 +0000
ROA not before:           Mon 25 Mar 2024 15:36:28 +0000
ROA not after:            Mon 24 Mar 2025 15:41:28 +0000
asID:                     266553
IP address blocks:        160.238.148.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:b7:20:95:fe:c5:6e:5b:9d:85:13:b0:e9:4c:af:1e:a1:ae:25:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44B5BBA0335229473521F3DA7C0E55975284FD42
        Validity
            Not Before: Mar 25 15:36:28 2024 GMT
            Not After : Mar 24 15:41:28 2025 GMT
        Subject: CN=9D9508C389D9B9BAF828E35C6BFD698BF51017F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:38:1d:9e:3a:7e:f5:e2:e2:f1:ec:42:c6:
                    c3:ef:35:2d:1c:70:3c:51:bf:c3:11:4f:f3:02:78:
                    bb:82:22:11:f6:c5:97:ea:92:15:94:04:f9:00:0a:
                    7c:b8:c6:e3:39:e7:75:2a:72:6b:e3:eb:6e:05:68:
                    7e:d3:92:2b:46:eb:9d:b9:71:d0:70:8c:80:5c:e4:
                    b2:5f:25:83:be:1d:db:7b:a0:5a:06:ba:f3:f7:03:
                    f9:17:e6:1e:8e:c6:32:f1:5f:ac:81:b3:34:e6:10:
                    43:9d:ac:1d:8e:20:1b:86:ae:45:db:f4:a3:26:25:
                    bc:9f:06:55:cd:75:e8:eb:a4:3e:53:65:5a:e9:6c:
                    20:11:2e:9c:24:d9:cd:fb:6f:96:90:3e:a2:00:f4:
                    95:e3:8d:6e:29:86:e2:7f:32:aa:ae:fc:32:2d:62:
                    3e:84:38:7a:71:da:84:51:d2:ab:c1:69:f4:a2:fc:
                    ac:6d:a4:29:7f:15:cb:c5:7d:c1:fb:03:d2:e6:41:
                    c7:a4:f6:8e:f2:49:7a:20:f6:f7:ca:cf:d6:91:2c:
                    43:24:43:83:4b:c6:cd:2d:66:2b:aa:d6:5b:d7:b0:
                    ad:8b:55:ea:19:f7:d0:6e:01:26:1f:7c:14:7d:27:
                    17:db:56:5c:88:b6:f7:93:b7:a3:e2:06:14:42:3a:
                    0f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:95:08:C3:89:D9:B9:BA:F8:28:E3:5C:6B:FD:69:8B:F5:10:17:F5
            X509v3 Authority Key Identifier:
                keyid:44:B5:BB:A0:33:52:29:47:35:21:F3:DA:7C:0E:55:97:52:84:FD:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/44B5BBA0335229473521F3DA7C0E55975284FD42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/44B5BBA0335229473521F3DA7C0E55975284FD42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/3136302e3233382e3134382e302f32322d3332203d3e20323636353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:8c:69:f4:31:16:06:f6:3a:8e:6f:62:2a:75:5a:10:cb:2c:
         1a:ab:32:c0:86:4b:14:21:c8:66:a3:dc:7a:e4:4e:1e:f9:bb:
         bc:d8:4b:0d:19:86:95:b0:11:59:9e:e8:c1:99:b6:74:3f:0c:
         da:0d:bc:00:27:12:f9:99:e2:63:28:f8:6c:6a:d6:09:2d:fb:
         6c:4f:69:e9:8d:ba:c0:6f:b9:22:0c:63:ee:09:76:1d:a5:ea:
         0b:b7:d1:e7:0f:74:cc:54:1a:61:0d:91:52:13:86:59:ad:af:
         09:7b:29:ea:cb:ff:54:07:3f:3e:0f:f1:01:6c:85:d0:6e:ea:
         2b:ba:18:3c:89:30:91:2d:8a:cf:ea:ba:eb:19:d6:be:b2:f3:
         0f:06:ec:0c:7f:c0:e7:55:1b:53:83:ba:5c:9f:6b:5b:2f:70:
         02:3f:91:1a:3c:69:cb:e1:d3:69:17:4c:c1:f3:5e:4a:26:5e:
         53:27:4b:28:e0:07:d4:bc:c4:9e:3c:aa:d7:cc:f5:eb:73:29:
         f7:7c:74:f0:e1:fb:96:ac:88:e1:96:a4:8c:9e:f6:8a:69:c5:
         3f:24:9c:2f:98:81:2a:c4:2e:55:be:b6:85:f1:c0:62:33:99:
         d4:c2:6f:ae:e4:f0:6a:d3:f2:f0:f0:51:c4:0e:16:ed:62:08:
         2d:9a:3d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org