Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/3136302e32302e3136302e302f32322d3232203d3e20323636313937.roa
File:                     3136302e32302e3136302e302f32322d3232203d3e20323636313937.roa (raw, json)
Hash identifier:          3tAfuSplFGy2UseF4ZBoN/rZ86JodX22hElDVY4M/c8=
Subject key identifier:   BF:9B:EC:09:77:B4:0D:A9:DD:48:59:39:58:F6:76:31:65:4E:15:E1
Certificate issuer:       /CN=20462542E7D750389A93D0ECB9BA39FEB7970339
Certificate serial:       6365BC2849011AE2854C8C2A48B63BB1B0EAA0FA
Authority key identifier: 20:46:25:42:E7:D7:50:38:9A:93:D0:EC:B9:BA:39:FE:B7:97:03:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20462542E7D750389A93D0ECB9BA39FEB7970339.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/3136302e32302e3136302e302f32322d3232203d3e20323636313937.roa
Signing time:             Mon 04 Dec 2023 22:46:47 +0000
ROA not before:           Mon 04 Dec 2023 22:41:47 +0000
ROA not after:            Mon 02 Dec 2024 22:46:47 +0000
asID:                     266197
IP address blocks:        160.20.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:65:bc:28:49:01:1a:e2:85:4c:8c:2a:48:b6:3b:b1:b0:ea:a0:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20462542E7D750389A93D0ECB9BA39FEB7970339
        Validity
            Not Before: Dec  4 22:41:47 2023 GMT
            Not After : Dec  2 22:46:47 2024 GMT
        Subject: CN=BF9BEC0977B40DA9DD48593958F67631654E15E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:0f:a0:e3:ec:87:d6:be:92:03:4a:80:39:
                    b1:0d:35:3a:f8:a2:e0:ea:69:1d:3a:68:05:ac:4c:
                    a6:df:87:25:08:b0:5d:dc:b6:d3:37:2a:50:5a:26:
                    58:cd:33:23:60:3e:c4:a4:65:99:88:e1:94:81:e2:
                    f4:0f:24:1c:a5:a4:a5:af:b2:86:41:7e:1e:28:a0:
                    bb:f2:b0:cb:bb:61:15:58:fb:06:2b:3c:83:c5:9b:
                    c1:d0:e1:a8:66:30:c3:ab:54:4a:ab:d8:1d:3c:19:
                    a4:57:b9:69:50:1d:43:81:9f:04:cb:ae:65:49:1b:
                    90:16:0c:70:59:65:6d:f2:52:f5:c1:fc:be:f4:a9:
                    8a:02:12:cd:10:ae:4c:c3:89:d4:17:ab:dd:30:38:
                    bb:92:7f:be:62:3a:13:e8:c7:9d:15:64:ad:3c:3c:
                    a1:e5:a7:eb:12:40:be:a9:a4:c2:85:00:24:58:9a:
                    c3:6a:60:44:6e:78:e6:61:bb:22:b9:39:e7:ca:a9:
                    06:64:80:7e:8f:28:bc:1c:59:ad:1b:d7:9a:b0:3c:
                    61:75:f8:c3:f6:a1:52:99:13:de:ae:bc:93:10:a4:
                    ec:52:64:0c:f7:62:02:a4:c7:38:9d:53:12:d5:54:
                    4f:32:12:d6:c2:ae:56:0b:ff:5c:63:d8:a1:05:60:
                    8e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9B:EC:09:77:B4:0D:A9:DD:48:59:39:58:F6:76:31:65:4E:15:E1
            X509v3 Authority Key Identifier:
                keyid:20:46:25:42:E7:D7:50:38:9A:93:D0:EC:B9:BA:39:FE:B7:97:03:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/20462542E7D750389A93D0ECB9BA39FEB7970339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20462542E7D750389A93D0ECB9BA39FEB7970339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/3136302e32302e3136302e302f32322d3232203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e1:5e:0a:33:29:ad:bc:d6:0d:75:04:8d:99:26:88:5c:75:24:
         80:ea:62:d4:b5:6f:2c:04:db:62:7c:73:aa:92:17:31:41:6d:
         58:be:5d:fd:84:09:18:a3:ff:39:e6:18:6f:1c:49:06:de:e3:
         dd:86:ec:a4:61:c3:77:96:76:9d:36:98:c0:f1:ee:88:f3:f4:
         03:66:16:16:b4:ff:18:33:22:b7:05:6c:48:bc:a9:cb:7d:05:
         4e:0b:b5:a2:ee:f0:7b:e1:d2:4d:b2:a0:c2:d8:59:d6:5d:1c:
         84:50:d2:55:65:b8:05:2d:b2:fd:82:1e:7e:1c:98:99:4c:8f:
         7c:21:9d:c3:94:16:18:b7:93:86:31:73:df:9e:aa:85:90:73:
         f1:db:7d:01:5c:08:c9:6e:6e:42:76:9c:78:b2:f6:a8:67:c5:
         46:ac:1f:92:89:77:ee:55:90:16:f4:ef:e3:1f:8e:3a:d7:03:
         93:15:68:6a:f3:cc:24:c3:22:7a:4b:26:18:af:87:13:ec:f7:
         99:93:38:c8:75:70:b9:cd:c5:a4:bf:f5:c3:af:2b:73:8c:a6:
         b9:5f:80:b1:15:8f:ed:0c:92:bf:85:11:62:03:1f:ee:32:43:
         9e:e3:ff:fb:d0:ef:5a:f6:99:91:62:66:f2:57:6a:a0:ef:7c:
         3c:8e:9f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org