Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa
File:                     3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa (raw, json)
Hash identifier:          RtW2b4f0qmXA1BzCJW0+I7yLCxSmcCMrK5trF4a7QOc=
Subject key identifier:   4B:FF:49:C2:9D:97:AE:3B:B3:E0:BB:24:74:E0:05:42:18:08:38:59
Certificate issuer:       /CN=9A87074F73DD530421306A811F62BA127C58A09C
Certificate serial:       1B1D6C08735A3BC9CA7EEFD5A46489F8367A53DF
Authority key identifier: 9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A87074F73DD530421306A811F62BA127C58A09C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa
Signing time:             Mon 18 Dec 2023 19:21:08 +0000
ROA not before:           Mon 18 Dec 2023 19:16:08 +0000
ROA not after:            Mon 16 Dec 2024 19:21:08 +0000
asID:                     270793
IP address blocks:        201.159.160.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1d:6c:08:73:5a:3b:c9:ca:7e:ef:d5:a4:64:89:f8:36:7a:53:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A87074F73DD530421306A811F62BA127C58A09C
        Validity
            Not Before: Dec 18 19:16:08 2023 GMT
            Not After : Dec 16 19:21:08 2024 GMT
        Subject: CN=4BFF49C29D97AE3BB3E0BB2474E0054218083859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:57:2d:07:f4:db:c3:fc:40:2f:6d:8c:02:4b:
                    9c:47:6d:38:5b:16:31:be:a4:0e:3e:06:31:eb:58:
                    4a:e8:3f:7c:2d:b5:51:c3:7a:4e:86:d6:78:f1:00:
                    fb:4a:f4:27:5d:de:67:ad:a0:d5:f3:18:61:cc:fe:
                    1d:5c:17:52:ce:ec:9a:a2:68:cc:1b:a7:fa:de:18:
                    76:5e:ad:ab:05:aa:54:ed:64:7c:1a:4a:a3:37:95:
                    e4:79:c1:2d:92:76:f9:de:7c:2b:63:93:d4:90:80:
                    11:8e:3e:ee:73:f0:b4:16:71:64:28:c9:0b:44:47:
                    f6:73:05:ba:12:71:2e:d7:95:2c:12:08:e7:d4:53:
                    eb:74:2a:f9:91:e3:ef:8b:aa:0a:36:ab:94:0a:27:
                    c9:23:c7:25:a8:b8:bb:b1:1a:8d:fd:db:c3:35:62:
                    42:9f:50:27:15:74:21:c0:5c:86:ee:0d:06:79:6d:
                    0f:d6:e8:ee:d4:f5:68:da:dc:df:8b:28:10:7e:d1:
                    2e:f2:91:77:6b:66:73:58:0c:3f:14:30:12:38:9a:
                    6d:25:b0:22:55:fc:a4:29:ef:7d:21:b2:41:03:8f:
                    c0:fc:a6:2c:bc:18:f7:8b:c5:1c:3a:a6:c8:7e:84:
                    3d:1b:7d:58:ff:7b:65:5e:b1:30:84:17:b0:35:cf:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FF:49:C2:9D:97:AE:3B:B3:E0:BB:24:74:E0:05:42:18:08:38:59
            X509v3 Authority Key Identifier:
                keyid:9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/9A87074F73DD530421306A811F62BA127C58A09C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A87074F73DD530421306A811F62BA127C58A09C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32332d3233203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:c9:8a:20:fe:43:54:71:fd:9a:77:10:f0:af:da:91:f3:26:
         cd:0b:22:e8:96:19:96:c9:41:8a:5e:59:99:9f:d0:e2:79:6f:
         75:40:48:1e:e7:40:76:20:32:aa:d0:c8:da:20:a7:ab:6a:77:
         24:23:c8:ce:50:41:ad:13:f6:8d:d6:85:4a:85:79:eb:87:e9:
         7a:53:8a:22:3d:2f:f0:a1:d9:8a:16:ed:76:01:a3:7c:de:cc:
         13:06:31:60:1d:ab:9c:71:fd:c8:22:1d:fb:d9:1e:6b:bd:7b:
         18:19:c5:9c:49:a2:0c:e3:c2:d6:c3:f7:ad:3c:37:5a:e2:69:
         29:a2:85:d6:ca:77:06:3d:d3:66:38:83:cd:55:ff:f5:8f:ab:
         59:5c:b5:29:fd:24:94:48:2c:3a:96:9d:a0:cd:65:b3:72:2f:
         62:49:6d:31:2f:ac:95:cc:bb:ca:6e:d9:04:52:39:dd:c9:08:
         cb:f9:58:d5:b9:05:89:f5:87:d4:90:a1:73:a8:ef:19:43:a3:
         61:8b:35:43:3d:0e:25:90:23:39:da:49:cb:26:9c:90:79:fb:
         6b:a0:eb:18:df:93:0f:9f:13:d4:13:77:21:64:11:60:02:2a:
         14:1d:3c:96:09:c6:91:b3:fe:57:33:2a:6e:ee:9d:e8:1a:03:
         82:92:81:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org