Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa
File:                     3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa (raw, json)
Hash identifier:          xQdhJzpQ46mfB5YB5j9tPo7tdLBuM8duqjz7uuYe4+c=
Subject key identifier:   BF:02:F2:F4:37:C5:17:CE:96:94:18:B6:F3:70:E8:CD:C1:91:44:CF
Certificate issuer:       /CN=9A87074F73DD530421306A811F62BA127C58A09C
Certificate serial:       1DCE8B5A90A1585C7A155F8BC0477D1B8AFB910D
Authority key identifier: 9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A87074F73DD530421306A811F62BA127C58A09C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa
Signing time:             Mon 18 Dec 2023 19:21:08 +0000
ROA not before:           Mon 18 Dec 2023 19:16:08 +0000
ROA not after:            Mon 16 Dec 2024 19:21:08 +0000
asID:                     270793
IP address blocks:        201.159.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ce:8b:5a:90:a1:58:5c:7a:15:5f:8b:c0:47:7d:1b:8a:fb:91:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A87074F73DD530421306A811F62BA127C58A09C
        Validity
            Not Before: Dec 18 19:16:08 2023 GMT
            Not After : Dec 16 19:21:08 2024 GMT
        Subject: CN=BF02F2F437C517CE969418B6F370E8CDC19144CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1c:7d:b5:cb:6d:35:52:fa:b4:1d:0b:a3:17:
                    35:2c:4f:5e:6b:75:d6:3c:65:15:3d:1d:a6:12:ce:
                    9d:be:ba:71:f4:b8:d8:22:d7:5c:fb:2d:87:5d:e8:
                    8a:6c:7f:59:f3:ad:64:7d:b2:25:f3:d8:41:77:86:
                    d7:ee:0f:f7:58:2a:f8:41:bf:0b:67:7f:4c:c0:07:
                    16:e5:c8:6f:31:9f:c2:6a:26:8b:f1:e0:54:77:55:
                    44:ea:23:ca:14:30:6d:da:da:02:4e:47:87:34:fc:
                    e4:cb:f4:a4:ff:63:89:6e:46:f9:cc:c8:d1:82:29:
                    95:86:80:58:cf:c7:fe:8d:e5:10:9f:89:71:e0:c9:
                    57:80:16:b9:5f:c0:62:2b:5e:06:85:e2:a0:39:ee:
                    cb:bd:bd:55:9e:a6:2f:09:21:50:ae:de:24:09:3f:
                    8e:9f:5d:94:82:b2:98:a6:c9:1c:2d:bf:0e:a3:e4:
                    01:c9:4e:ea:e9:76:c8:f8:7a:7b:82:b4:b5:2c:b2:
                    18:27:52:d2:cc:46:b0:b5:5c:a0:ad:56:7c:86:00:
                    dd:ef:b1:3d:80:49:13:df:21:84:91:b1:2e:0f:37:
                    cb:a8:44:87:07:60:76:dd:4f:63:f3:04:24:63:d0:
                    6c:40:48:d4:3b:11:03:64:1a:1e:75:df:98:27:b3:
                    c7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:02:F2:F4:37:C5:17:CE:96:94:18:B6:F3:70:E8:CD:C1:91:44:CF
            X509v3 Authority Key Identifier:
                keyid:9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/9A87074F73DD530421306A811F62BA127C58A09C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A87074F73DD530421306A811F62BA127C58A09C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:4a:ed:df:aa:95:88:e3:4f:4f:d7:02:9c:0d:ef:79:56:1d:
         11:94:e9:f9:3a:32:11:ec:f1:95:2f:3b:a9:9c:d1:d0:ea:5e:
         a5:dc:3a:eb:af:79:7a:e9:5b:45:fe:eb:d4:f3:1e:42:f7:be:
         24:f9:e0:3a:d2:07:47:bc:2d:66:b8:d3:65:ee:03:54:d3:16:
         d6:17:af:c6:68:46:4e:76:1b:22:70:9f:6f:a6:db:7f:fc:30:
         0f:15:73:26:e6:a7:31:77:3e:cf:1c:c0:8c:f7:7d:9d:48:43:
         10:6a:ba:c2:6b:9c:1c:61:cf:13:51:31:b4:11:72:85:a3:d1:
         fc:37:32:d6:d1:8f:09:45:84:fc:1e:3c:25:fc:3f:e8:5e:22:
         13:e8:13:f7:c9:07:c3:a4:bf:c3:4c:c1:09:75:74:19:52:7a:
         c6:66:dc:7c:7b:74:12:1f:67:5f:55:56:97:ed:53:21:16:49:
         e1:bc:12:5d:17:06:c7:20:c5:ef:a4:3e:6e:4b:c9:29:ec:aa:
         37:46:ed:40:38:f6:c0:2b:dd:0a:e4:3a:69:25:8a:8a:41:37:
         b1:7d:04:9f:69:f3:c4:b4:fc:26:ef:05:ea:ee:85:1d:70:0e:
         e2:66:d0:e9:38:3b:41:b1:87:24:6c:97:56:5c:dc:d3:39:bb:
         b3:3d:7c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org