Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa
File:                     3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa (raw, json)
Hash identifier:          fblCV4ao/ZrLOW0GpV3cENzKajMa2jPDcstRDovYo3I=
Subject key identifier:   7C:F6:F6:BF:F2:E6:F2:67:43:1F:EE:1F:C2:6A:94:27:4A:89:81:F7
Certificate issuer:       /CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
Certificate serial:       146F48EC0257BC403D26A26FA97DE09F1607C39C
Authority key identifier: 41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa
Signing time:             Fri 15 Sep 2023 08:00:01 +0000
ROA not before:           Fri 15 Sep 2023 07:55:01 +0000
ROA not after:            Fri 13 Sep 2024 08:00:01 +0000
asID:                     266535
IP address blocks:        160.238.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6f:48:ec:02:57:bc:40:3d:26:a2:6f:a9:7d:e0:9f:16:07:c3:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
        Validity
            Not Before: Sep 15 07:55:01 2023 GMT
            Not After : Sep 13 08:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:64:a4:1e:f9:47:c6:c9:83:3e:13:e7:ea:
                    14:d0:13:3f:92:e4:39:7b:8d:d1:09:12:c7:36:ad:
                    35:e3:4a:fc:a5:97:80:4a:12:75:16:63:56:bd:17:
                    fe:ce:0d:62:e1:59:e1:91:b3:66:2a:d3:e9:f3:c7:
                    61:d1:ea:ba:09:eb:5f:39:a3:76:67:f3:65:a8:3a:
                    ed:c1:b9:c9:a1:42:be:6f:e7:18:7e:c7:4f:79:f1:
                    eb:8d:7a:19:9e:f5:c5:4e:01:3e:ab:d3:1e:e9:7f:
                    60:31:a2:be:26:66:4c:15:42:56:4d:ed:86:95:05:
                    b9:99:c2:18:cb:ae:c5:ce:c6:75:fa:70:a5:01:11:
                    b4:38:35:ca:84:e3:94:32:32:c5:fc:e2:22:c5:37:
                    8a:44:2c:1f:da:a6:23:d4:da:8d:55:7b:6f:b3:fd:
                    9d:73:41:10:bb:a7:74:38:0a:55:a5:66:5d:e6:54:
                    d9:1b:f6:4c:9c:bf:0b:9e:c2:8d:b2:04:f0:34:39:
                    2e:01:7e:57:ef:55:c1:af:18:16:08:27:6b:30:e4:
                    17:f3:4a:79:b5:51:0f:be:19:56:2b:04:65:58:d5:
                    d7:4e:c0:a3:bb:f0:51:9b:ea:f1:41:20:88:76:b2:
                    93:6c:c4:b1:88:9f:ca:30:25:39:9a:0e:ee:ca:28:
                    3b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F6:F6:BF:F2:E6:F2:67:43:1F:EE:1F:C2:6A:94:27:4A:89:81:F7
            X509v3 Authority Key Identifier:
                keyid:41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136302e302f32322d3232203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:54:ef:30:0c:db:bc:14:c4:37:70:19:71:c5:a3:a8:89:76:
         5a:ea:95:16:bf:21:d2:f1:4a:fe:3e:f0:a5:48:a5:e5:05:e5:
         38:5b:c1:a0:50:74:52:6d:ce:fe:a1:95:5f:46:cf:7f:bf:78:
         b8:cb:72:a4:29:2e:01:52:93:2f:87:4f:d0:d2:2b:63:28:ec:
         8c:be:9b:ae:30:8e:9a:cb:02:52:45:f4:36:74:02:64:65:8a:
         15:c1:aa:27:3d:04:11:4a:36:99:03:c4:d2:ea:fa:e7:1c:4a:
         c9:92:d2:56:e0:a1:d6:a1:f5:51:77:3f:8f:87:52:d8:12:9c:
         f3:39:7d:d9:15:b2:f6:88:fd:e0:0c:a2:56:80:b0:74:97:17:
         15:ec:ff:0b:2c:eb:66:84:79:1e:a1:60:7c:a1:be:de:1e:e9:
         4a:43:9a:c7:cd:40:ce:ee:03:4a:35:bb:45:83:4f:cf:65:6f:
         7b:a2:37:01:d8:ce:a6:46:94:b5:b1:d5:aa:33:e9:e5:64:6a:
         cc:bd:83:08:99:21:c4:6b:d3:5b:b5:6f:a4:d1:79:70:db:45:
         54:52:a7:73:0c:19:53:bf:ca:50:a4:44:c4:b2:7c:88:50:c3:
         34:54:5c:13:35:dd:4b:38:71:f5:4b:0b:7a:dc:d3:88:98:0b:
         89:57:88:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org