Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/3136302e3233382e3136342e302f32322d3332203d3e203532363137.roa
File:                     3136302e3233382e3136342e302f32322d3332203d3e203532363137.roa (raw, json)
Hash identifier:          TmK0bczoE/Wdo1IjirDx2VYHjj0vpxZrb8H5PJOlvgk=
Subject key identifier:   FA:EC:2B:AA:44:65:EE:62:99:8A:FD:BB:1C:34:B2:4D:AC:F3:52:84
Certificate issuer:       /CN=CAE906BD747BC046D2684EAA26E0208AF0274CE2
Certificate serial:       42CB99B89CAB60FE5BBC20549D74EDE88A2B7CF4
Authority key identifier: CA:E9:06:BD:74:7B:C0:46:D2:68:4E:AA:26:E0:20:8A:F0:27:4C:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAE906BD747BC046D2684EAA26E0208AF0274CE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/3136302e3233382e3136342e302f32322d3332203d3e203532363137.roa
Signing time:             Thu 16 Nov 2023 19:57:59 +0000
ROA not before:           Thu 16 Nov 2023 19:52:59 +0000
ROA not after:            Thu 14 Nov 2024 19:57:59 +0000
asID:                     52617
IP address blocks:        160.238.164.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cb:99:b8:9c:ab:60:fe:5b:bc:20:54:9d:74:ed:e8:8a:2b:7c:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAE906BD747BC046D2684EAA26E0208AF0274CE2
        Validity
            Not Before: Nov 16 19:52:59 2023 GMT
            Not After : Nov 14 19:57:59 2024 GMT
        Subject: CN=FAEC2BAA4465EE62998AFDBB1C34B24DACF35284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:9e:3e:df:6e:d8:54:e0:78:01:9c:60:0a:
                    66:9d:1d:9c:62:c5:01:e9:a4:e9:20:e4:e4:de:4e:
                    8d:80:8a:55:b8:6b:86:19:72:a4:6b:ce:6b:36:50:
                    32:4b:27:28:5e:54:0b:ed:38:50:4d:83:62:74:82:
                    b4:a3:0c:6a:f5:86:92:78:35:af:3d:0a:7f:0f:68:
                    21:55:7c:39:97:c6:6f:28:1f:88:ed:93:e3:ae:a1:
                    bd:60:21:59:97:f0:0f:ea:07:9c:da:4a:17:40:de:
                    b2:38:14:74:6e:5e:a0:d4:3e:07:b3:8e:55:9f:f2:
                    32:e8:07:36:5c:04:cd:c0:89:19:26:b9:3e:57:80:
                    f1:c0:15:af:4a:4d:99:01:dd:d1:88:1d:e2:1d:ca:
                    d2:80:ab:0b:15:96:30:55:8f:16:1f:93:23:1c:d1:
                    e7:54:b7:94:fa:a2:b1:97:e9:94:fd:b9:c5:44:60:
                    30:8c:5a:19:cd:82:5f:30:50:89:cb:55:7f:f1:5f:
                    23:91:d8:36:a5:8c:de:c2:15:6b:52:e6:53:c0:c1:
                    b9:c6:e4:c6:55:95:59:95:71:6f:bf:f0:3d:ed:a6:
                    88:db:84:3d:14:d6:32:58:df:8b:ef:16:54:a3:7d:
                    56:bd:35:a1:31:c0:39:c3:a8:59:92:fb:70:e9:d3:
                    d6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:EC:2B:AA:44:65:EE:62:99:8A:FD:BB:1C:34:B2:4D:AC:F3:52:84
            X509v3 Authority Key Identifier:
                keyid:CA:E9:06:BD:74:7B:C0:46:D2:68:4E:AA:26:E0:20:8A:F0:27:4C:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/CAE906BD747BC046D2684EAA26E0208AF0274CE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CAE906BD747BC046D2684EAA26E0208AF0274CE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/3136302e3233382e3136342e302f32322d3332203d3e203532363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:48:3b:7e:e2:22:7f:55:57:c9:13:ec:0b:d5:5c:cc:5b:91:
         8a:30:d4:4d:71:a9:f6:03:70:9d:74:f5:0d:01:f6:1f:ef:29:
         72:e8:a7:89:68:68:2a:6b:c1:20:ce:70:a8:24:18:77:b3:4e:
         4b:9c:74:6c:67:3c:ca:2e:66:23:4c:e1:36:fa:f3:3a:29:54:
         9c:8e:17:59:3e:4b:3b:dd:1a:de:aa:2a:5e:c4:e1:65:c1:5c:
         97:4e:f1:5a:70:23:38:f9:99:43:8a:e1:a4:68:5c:73:fb:aa:
         86:25:6d:3f:a8:a4:12:c4:20:00:5d:02:66:70:8d:37:22:93:
         11:90:d4:f2:e3:f8:92:3d:ce:cf:40:55:a1:5d:f5:88:da:9e:
         f0:41:8e:d7:4b:e4:d1:39:4c:97:22:51:c5:72:29:1d:8f:a4:
         5a:1b:e9:bf:a4:0e:95:e4:18:ff:25:fe:2c:5b:2e:80:1e:89:
         3b:e5:e1:b2:d4:12:e7:18:1d:7d:b9:fd:9b:01:c5:77:5d:0d:
         a0:43:02:df:b7:6f:2f:d8:f6:e3:43:e6:4d:b8:a7:f3:dc:43:
         40:85:97:54:3f:f8:5a:e6:9d:f3:83:b7:3a:35:6b:1f:89:58:
         60:5d:f5:63:66:0d:fa:48:9c:31:a3:99:d1:88:66:32:46:9b:
         06:3f:74:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org