Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/3136302e32302e3136302e302f32332d3233203d3e20323636313937.roa
File:                     3136302e32302e3136302e302f32332d3233203d3e20323636313937.roa (raw, json)
Hash identifier:          wQ69ucH/9C5Mx3LFwtjWUB5pr//dftRbOaww1mgx9qA=
Subject key identifier:   7B:4C:50:BC:CC:F9:8F:37:56:39:B0:EC:31:7F:42:B1:83:C9:62:73
Certificate issuer:       /CN=20462542E7D750389A93D0ECB9BA39FEB7970339
Certificate serial:       35079488695BCC87D1EEBF4460EC2E7ABCB6DC59
Authority key identifier: 20:46:25:42:E7:D7:50:38:9A:93:D0:EC:B9:BA:39:FE:B7:97:03:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20462542E7D750389A93D0ECB9BA39FEB7970339.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/3136302e32302e3136302e302f32332d3233203d3e20323636313937.roa
Signing time:             Fri 08 Sep 2023 18:42:56 +0000
ROA not before:           Fri 08 Sep 2023 18:37:56 +0000
ROA not after:            Fri 06 Sep 2024 18:42:56 +0000
asID:                     266197
IP address blocks:        160.20.160.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:07:94:88:69:5b:cc:87:d1:ee:bf:44:60:ec:2e:7a:bc:b6:dc:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20462542E7D750389A93D0ECB9BA39FEB7970339
        Validity
            Not Before: Sep  8 18:37:56 2023 GMT
            Not After : Sep  6 18:42:56 2024 GMT
        Subject: CN=7B4C50BCCCF98F375639B0EC317F42B183C96273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:40:2c:6d:bc:cb:e0:6e:66:5c:b3:9f:90:
                    7f:b5:7c:1c:2d:24:23:e3:03:6e:2a:48:df:15:bc:
                    53:11:59:01:2c:e4:27:02:18:32:69:72:7b:eb:3b:
                    b2:d4:ad:4f:28:15:51:d4:7b:57:51:ce:0e:8c:53:
                    22:e2:a7:70:f2:68:89:19:64:ea:9c:ec:8e:9f:87:
                    be:95:5f:30:64:c8:19:cd:a4:d2:b9:08:e4:5c:fe:
                    98:8f:94:3b:9e:d1:da:06:00:30:ad:f0:1f:0c:16:
                    83:76:4f:f7:29:d9:f8:3b:cf:46:67:6b:00:7a:1b:
                    7d:3f:41:d3:73:ff:7c:fb:62:5e:9f:c5:c5:18:26:
                    c4:08:3d:77:d6:96:6f:ac:6d:f6:3c:4e:fa:ba:e1:
                    1b:23:da:a6:14:62:f1:20:96:b7:df:37:81:b0:31:
                    d9:29:d6:6c:6d:ae:a1:0c:74:fa:4c:55:59:12:54:
                    85:a7:4e:42:6d:c9:c7:06:7a:2d:bd:1c:ba:4c:05:
                    63:0f:9a:2b:c4:6c:2c:8a:f4:b7:37:4b:8c:10:3b:
                    ca:28:6e:14:7c:d0:d8:c3:5a:19:81:a7:2c:2c:08:
                    fa:03:6b:30:90:3c:c5:32:92:35:1a:45:eb:14:dc:
                    be:84:8c:ad:17:ce:70:6a:ca:ce:d5:00:b3:5b:48:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4C:50:BC:CC:F9:8F:37:56:39:B0:EC:31:7F:42:B1:83:C9:62:73
            X509v3 Authority Key Identifier:
                keyid:20:46:25:42:E7:D7:50:38:9A:93:D0:EC:B9:BA:39:FE:B7:97:03:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/20462542E7D750389A93D0ECB9BA39FEB7970339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20462542E7D750389A93D0ECB9BA39FEB7970339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/3136302e32302e3136302e302f32332d3233203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:72:54:99:f1:94:1d:da:c0:3e:09:8f:e1:79:ae:85:a4:1c:
         bc:2e:e1:12:61:df:6c:ec:76:48:1c:5f:4a:a6:ed:b5:5d:50:
         f2:53:fe:4d:2e:72:63:ed:90:19:3b:e3:08:73:0e:3e:09:3f:
         35:1a:3a:86:23:0c:ac:30:4c:32:49:15:fe:26:59:14:f2:d8:
         de:c9:dd:b5:d2:1d:8b:e8:46:49:13:c4:d9:23:a7:c3:ee:70:
         68:68:d9:89:18:3f:5e:b5:7a:09:8a:9d:60:a9:9e:02:a0:03:
         57:f0:ea:a7:ab:9a:33:e4:d5:97:24:e8:40:9e:78:05:0b:3f:
         88:25:63:85:b2:6e:1d:99:e1:31:6d:83:5e:c6:04:90:8d:93:
         d1:4c:30:2c:12:2c:13:f7:a6:ca:6e:a0:04:fc:d3:c5:6f:1b:
         47:5c:6b:f3:d1:de:4c:23:c9:d1:43:85:9d:c7:cd:42:71:fc:
         a7:e1:a0:6d:75:31:75:ac:9f:35:e3:b6:09:a9:cf:35:02:a4:
         8c:bd:13:51:e4:74:8d:6a:1d:11:f4:0c:66:bf:f6:9d:89:55:
         12:4b:27:0e:19:5d:13:fe:40:0d:c0:f9:0f:18:8f:4c:8b:4b:
         b3:bb:68:0d:83:70:96:20:04:f1:cc:35:1c:01:cf:42:25:91:
         0e:2e:4e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org