Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa
File:                     3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa (raw, json)
Hash identifier:          RcgaEXAMEL+cMKnWWVik/S30RpT5V0N8ZOe39KfJvGA=
Subject key identifier:   B7:64:BC:CE:CA:94:56:C1:C7:B9:99:4B:C3:2D:9D:33:73:2A:27:23
Certificate issuer:       /CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
Certificate serial:       34AFB942F837EFA6B3818CCBF954401B949D4A8F
Authority key identifier: 41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa
Signing time:             Fri 15 Sep 2023 08:00:00 +0000
ROA not before:           Fri 15 Sep 2023 07:55:00 +0000
ROA not after:            Fri 13 Sep 2024 08:00:00 +0000
asID:                     266535
IP address blocks:        160.238.160.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:af:b9:42:f8:37:ef:a6:b3:81:8c:cb:f9:54:40:1b:94:9d:4a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
        Validity
            Not Before: Sep 15 07:55:00 2023 GMT
            Not After : Sep 13 08:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:49:f7:ea:f7:f8:65:88:1e:c8:66:18:f6:d0:
                    58:bc:ef:2f:6b:ac:73:d6:76:94:71:f0:88:a0:52:
                    95:b8:ca:2b:23:a7:1b:ca:99:d2:06:51:54:20:34:
                    47:db:6f:86:07:68:af:d2:33:60:50:59:8b:ce:bf:
                    e7:1b:5c:b3:97:86:5c:f2:2a:68:6a:eb:f4:1b:2e:
                    73:0c:fb:83:ea:9d:43:ff:80:23:af:90:a2:cd:f0:
                    85:48:98:77:6b:d9:32:cc:21:62:71:81:d1:8f:ef:
                    d8:e9:00:32:7b:a9:3d:eb:e2:6c:7a:cf:ce:90:c4:
                    92:a8:0b:fe:d9:60:de:34:b7:8e:69:19:67:bd:fa:
                    bc:63:fc:e5:ad:b4:1b:71:79:68:49:73:10:08:4e:
                    1b:bb:5b:7a:85:47:fb:58:9a:b5:2a:d1:5a:9d:e0:
                    a4:20:b6:f8:91:87:bd:5c:f5:a2:52:3d:f3:47:96:
                    e2:63:4b:18:0a:3b:1e:ca:8b:8c:a0:ec:2f:f7:11:
                    48:0a:24:92:f4:05:d4:fe:14:7c:22:46:3a:15:5f:
                    0a:f2:e6:77:e9:ca:ba:e2:37:f5:be:b0:d9:54:f6:
                    1c:0d:0c:ac:c7:c3:02:47:75:c7:09:dd:21:7f:08:
                    9b:6e:3c:3e:72:06:6d:f1:4a:5c:b4:0a:87:76:af:
                    5b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:64:BC:CE:CA:94:56:C1:C7:B9:99:4B:C3:2D:9D:33:73:2A:27:23
            X509v3 Authority Key Identifier:
                keyid:41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136302e302f32332d3233203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:31:3d:7d:f6:6c:ee:d5:88:eb:80:c8:48:50:e5:8c:20:6f:
         aa:e7:06:75:58:02:4a:27:bb:dc:43:bb:04:1c:6b:cc:df:bc:
         05:83:a7:26:51:7c:bd:19:d6:b2:35:1b:5b:0b:87:2d:c8:f0:
         1e:de:93:fb:ce:f1:67:81:21:8e:9a:34:89:72:23:24:ec:99:
         66:33:cf:70:43:4b:15:58:69:d0:f7:6f:f2:c6:db:15:e3:4f:
         a8:ca:51:74:cd:c6:ec:5c:55:b3:af:47:93:62:9b:e9:fd:25:
         28:f5:be:f6:48:a1:f2:1b:94:20:27:18:82:71:70:24:eb:59:
         34:fa:a5:7b:ab:e4:e8:ba:ca:83:95:d6:ee:dc:48:32:0e:86:
         75:a2:21:6e:87:01:89:e8:76:13:67:bf:31:e3:4b:b7:ff:63:
         42:d9:83:73:ea:71:02:fe:ac:4d:74:0d:91:42:45:a9:e6:93:
         bf:0a:a1:53:d3:25:a7:2d:24:3b:2f:46:fd:3d:60:5e:a3:ce:
         79:ad:c7:b9:74:97:bb:a2:2c:70:d9:a4:2d:ae:38:79:9b:bc:
         76:be:c3:bf:df:db:f1:d1:9d:4e:49:af:87:43:b5:ae:45:d1:
         72:1a:97:6e:3d:8e:3d:de:d0:89:49:88:29:e8:d2:d8:6f:db:
         13:4b:66:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org