Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa
File:                     3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa (raw, json)
Hash identifier:          i1OtHdt8oLHZOwjDBCcyurmnSOMYi8XYZkzTSlWgAXc=
Subject key identifier:   79:4F:E2:BF:A1:3A:B8:0A:11:B4:53:D3:B2:69:38:54:A5:97:AB:C1
Certificate issuer:       /CN=9A87074F73DD530421306A811F62BA127C58A09C
Certificate serial:       7406AE33ADACCC43061FBC4FF0A0A937AAE6965D
Authority key identifier: 9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A87074F73DD530421306A811F62BA127C58A09C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa
Signing time:             Mon 18 Dec 2023 19:21:08 +0000
ROA not before:           Mon 18 Dec 2023 19:16:08 +0000
ROA not after:            Mon 16 Dec 2024 19:21:08 +0000
asID:                     270793
IP address blocks:        201.159.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:06:ae:33:ad:ac:cc:43:06:1f:bc:4f:f0:a0:a9:37:aa:e6:96:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A87074F73DD530421306A811F62BA127C58A09C
        Validity
            Not Before: Dec 18 19:16:08 2023 GMT
            Not After : Dec 16 19:21:08 2024 GMT
        Subject: CN=794FE2BFA13AB80A11B453D3B2693854A597ABC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:7a:65:9e:3a:5b:5c:c6:3d:7c:82:db:de:
                    e9:e9:26:63:c2:ff:46:5c:58:77:9d:03:48:c6:79:
                    0e:23:03:c3:28:7d:75:4e:eb:ed:4f:1f:d7:68:29:
                    02:d8:ad:8b:2c:e2:37:cb:31:f5:78:4b:ac:5c:b8:
                    22:b9:6c:b3:fa:c9:7b:37:dc:61:4a:fc:b3:ed:0d:
                    48:1c:b0:4a:0f:39:b8:28:89:e2:cc:fc:b9:d9:da:
                    d8:c2:e8:44:fc:58:fe:60:ed:ff:c1:14:0e:1e:90:
                    0c:66:0d:17:e5:df:9d:4e:ee:7e:cc:05:55:fe:45:
                    9a:dc:34:33:ca:18:5d:f9:e6:dc:b4:3a:32:92:57:
                    21:a9:98:61:77:eb:36:e4:fb:07:b8:30:0a:2b:15:
                    80:13:13:86:e4:44:78:9e:5b:ab:8e:37:b1:c8:0c:
                    20:92:c8:c5:7b:ea:fc:5a:f2:da:9f:09:19:0d:aa:
                    d9:dc:02:bf:ee:2c:4b:49:e3:f5:6a:2c:a1:77:ba:
                    09:83:26:8e:f9:97:0f:22:64:c6:97:74:8b:e6:c5:
                    8c:4b:83:c5:ac:ad:f0:bf:d4:dc:d9:e2:d1:c1:e5:
                    35:8c:c1:ec:c6:36:da:a9:c3:eb:9d:3f:94:ce:a4:
                    1f:a3:71:2b:7d:ee:ca:0e:36:38:91:43:d5:4d:19:
                    d9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4F:E2:BF:A1:3A:B8:0A:11:B4:53:D3:B2:69:38:54:A5:97:AB:C1
            X509v3 Authority Key Identifier:
                keyid:9A:87:07:4F:73:DD:53:04:21:30:6A:81:1F:62:BA:12:7C:58:A0:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/9A87074F73DD530421306A811F62BA127C58A09C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A87074F73DD530421306A811F62BA127C58A09C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136312e302f32342d3234203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:d5:7f:f0:99:02:20:f4:83:54:2f:21:63:51:1f:b0:9a:58:
         7d:72:41:8f:37:e7:6f:21:be:6a:93:40:c1:38:6c:10:76:a5:
         cd:1c:99:26:d7:32:70:ce:0e:27:db:e7:ed:71:5a:bf:b6:e6:
         76:36:00:2b:5f:2d:cd:1c:88:2d:71:07:61:4f:49:b7:44:82:
         a4:75:84:5e:e1:9e:71:12:10:46:71:3e:fc:31:04:e4:79:f2:
         01:bf:33:c0:80:a0:b3:e1:df:97:4d:0d:c7:06:1d:4b:c5:8b:
         b7:52:ba:3b:8f:e2:4e:92:c0:c5:fe:b1:98:d5:4f:37:5d:02:
         eb:ef:2a:2e:dc:c2:71:a7:5e:49:10:a3:bf:98:f6:84:bb:53:
         b1:7a:1d:3b:60:75:a4:e7:e5:3c:a2:1b:7a:9f:db:cd:67:c5:
         b4:26:f8:ac:4b:29:f0:a0:e4:04:44:95:5c:ad:2a:9b:e5:13:
         97:c4:84:4b:a9:5b:79:78:f2:7f:ef:6a:b3:55:66:bc:b1:10:
         6c:b2:27:1b:87:6c:ff:99:58:42:b6:7c:f6:ea:60:1a:9a:cd:
         ec:95:a4:46:62:d1:2f:1d:08:8c:7b:b5:93:ce:85:27:b9:a0:
         7b:e0:29:9d:8a:68:f6:05:12:0f:70:b2:07:e7:e5:a5:71:4c:
         ce:69:20:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:13 2024 by rpki-client on console-ams.rpki-client.org