Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/3138362e3230392e3136302e302f32342d3234203d3e20323731343039.roa
File:                     3138362e3230392e3136302e302f32342d3234203d3e20323731343039.roa (raw, json)
Hash identifier:          pOELZEQ1QZ67qUmTClQrggrZ0Q5CvZr2EifkcDKT53o=
Subject key identifier:   BA:12:AC:70:59:38:F7:96:BF:30:05:70:C4:D4:2D:DA:6E:FA:6B:BE
Certificate issuer:       /CN=A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5
Certificate serial:       03BE77867B03DCE425A84AF44F04C664A60AFCCE
Authority key identifier: A9:52:4A:CD:3B:13:45:5E:92:B8:9F:FE:DA:E5:CD:F4:7F:E1:63:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/3138362e3230392e3136302e302f32342d3234203d3e20323731343039.roa
Signing time:             Mon 17 Jul 2023 19:07:38 +0000
ROA not before:           Mon 17 Jul 2023 19:02:38 +0000
ROA not after:            Mon 15 Jul 2024 19:07:38 +0000
asID:                     271409
IP address blocks:        186.209.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:be:77:86:7b:03:dc:e4:25:a8:4a:f4:4f:04:c6:64:a6:0a:fc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5
        Validity
            Not Before: Jul 17 19:02:38 2023 GMT
            Not After : Jul 15 19:07:38 2024 GMT
        Subject: CN=BA12AC705938F796BF300570C4D42DDA6EFA6BBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7b:d2:20:ca:67:14:7a:3b:25:68:1f:fb:f7:
                    6c:db:77:c1:ba:69:33:da:8f:d2:bb:d1:c0:e4:d8:
                    34:eb:ca:71:bd:25:f8:41:79:7c:6a:7e:7d:de:fd:
                    cc:a3:fa:1b:e5:90:90:ee:53:6d:b6:0f:21:17:93:
                    9f:fa:91:09:02:9a:6a:96:f0:bb:36:9f:83:57:68:
                    80:7d:9c:31:52:31:03:f2:86:64:1a:a7:1c:af:f4:
                    9a:94:cb:4e:f9:4d:f5:93:ed:10:25:c4:4e:1a:d6:
                    c1:f2:f1:84:f5:38:6c:b5:b2:2a:a8:30:94:87:29:
                    6f:de:d9:02:0a:f7:6d:43:bb:e2:9a:04:75:87:1b:
                    04:be:c1:3e:91:ab:94:c4:d7:18:81:31:54:45:ff:
                    b7:be:7d:76:77:c6:8a:f8:90:87:fa:a7:5d:57:ee:
                    c5:c4:ff:4a:b1:ba:7f:37:3b:ea:86:33:65:3b:58:
                    65:22:6d:43:61:1f:9f:10:80:59:b7:8a:96:8b:2c:
                    19:dc:db:08:6f:e5:0f:b8:b5:de:4f:e8:81:6f:ce:
                    4d:73:93:ea:73:a8:fe:7f:a6:d3:c9:3c:ee:cf:70:
                    10:85:af:34:4b:bd:e6:a7:4d:41:2a:a9:00:f2:77:
                    cc:c9:99:87:24:f7:28:6a:0a:b1:d1:37:e4:90:df:
                    04:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:12:AC:70:59:38:F7:96:BF:30:05:70:C4:D4:2D:DA:6E:FA:6B:BE
            X509v3 Authority Key Identifier:
                keyid:A9:52:4A:CD:3B:13:45:5E:92:B8:9F:FE:DA:E5:CD:F4:7F:E1:63:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A9524ACD3B13455E92B89FFEDAE5CDF47FE163C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4HwbUNHmuwooUNvexdNcNJGDtXn1LkgnyH5aGEz5VFN/0/3138362e3230392e3136302e302f32342d3234203d3e20323731343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:b8:bb:1f:de:88:a6:5e:32:a3:02:0b:21:c3:98:00:e4:a5:
         32:93:d6:d6:6e:e4:57:6b:35:e3:05:78:67:f1:5e:ca:04:78:
         30:07:c4:c0:ba:e5:9e:0a:59:b3:6b:38:b7:19:70:05:66:c4:
         fb:b2:65:09:29:f4:af:6f:d3:ad:43:84:a7:84:4f:f6:6a:1e:
         f4:e7:b2:09:9c:77:c2:c9:2b:48:68:0c:1c:66:35:d7:e6:ac:
         00:d0:5d:08:71:d5:e9:ba:50:7c:8b:c1:b5:6d:64:f2:fc:68:
         8b:b0:06:37:7a:ef:87:35:c1:84:2e:26:c8:22:d9:b2:2c:58:
         89:a2:74:c6:f8:79:a1:f6:82:71:56:cd:2f:c0:d3:39:c8:76:
         6a:55:3d:80:1c:a0:d7:50:ed:6a:ad:7f:1f:98:55:3f:01:fa:
         ed:94:5f:b8:db:39:ce:aa:e3:a6:4a:b4:41:dd:08:ec:e5:88:
         81:01:e3:89:d0:17:8b:7f:ae:98:a2:9e:06:23:18:17:a5:f0:
         9e:5f:76:fe:f6:14:09:15:08:32:d9:16:e3:71:7f:7b:4f:36:
         44:f1:f9:a4:da:64:6c:5c:28:f6:17:7a:c8:93:a1:c0:60:51:
         df:7c:e9:a1:4e:2c:c3:8b:2a:bf:c7:2d:89:06:ce:a6:c6:54:
         b4:ab:47:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org