Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa
File:                     3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa (raw, json)
Hash identifier:          7bqvlyOhvE4RMUAzcG4zepgV4abItzKE1hC1C9Pv7IY=
Subject key identifier:   EE:8E:55:6D:37:99:5D:49:1C:71:F4:E0:A6:79:41:DE:E1:84:BF:55
Certificate issuer:       /CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
Certificate serial:       0FC4039462E6EDD6CAAAB0FC82AFC5AB31827950
Authority key identifier: 41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa
Signing time:             Fri 15 Sep 2023 08:00:01 +0000
ROA not before:           Fri 15 Sep 2023 07:55:01 +0000
ROA not after:            Fri 13 Sep 2024 08:00:01 +0000
asID:                     266535
IP address blocks:        160.238.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c4:03:94:62:e6:ed:d6:ca:aa:b0:fc:82:af:c5:ab:31:82:79:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
        Validity
            Not Before: Sep 15 07:55:01 2023 GMT
            Not After : Sep 13 08:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:49:06:6e:7e:99:a2:0d:0e:2a:2a:a2:78:
                    81:62:59:b4:3e:13:8f:c1:af:5c:0a:58:3b:05:e6:
                    01:63:67:03:15:aa:4a:c2:3b:72:92:c0:e2:1a:c8:
                    6a:10:16:5b:92:85:44:d3:b5:57:01:45:1c:cc:25:
                    51:11:f6:12:53:14:6c:16:44:3f:39:e4:02:d2:c7:
                    0e:40:f1:df:f6:de:41:f7:a4:c0:78:c4:bf:ee:ad:
                    4d:54:5a:b5:71:12:22:54:aa:07:cf:85:ce:c3:a7:
                    1d:52:3f:c4:d6:81:19:8a:0a:85:db:2f:f3:46:88:
                    8d:c6:98:91:72:2f:98:48:3a:df:34:28:f6:62:9f:
                    a3:a4:c1:e5:ae:62:88:2b:30:ec:f3:ff:2a:d1:ce:
                    5d:85:60:66:44:14:ae:e4:79:f1:eb:7d:a3:8f:15:
                    e7:fe:ec:6f:80:ec:10:28:00:43:ae:e4:0f:32:24:
                    01:f2:22:e2:fa:c6:84:8c:7e:ed:84:98:12:c1:d0:
                    7e:11:cc:12:61:db:98:2c:3a:a0:e8:3d:f7:5f:94:
                    4c:a8:80:ab:7d:27:14:07:80:8e:d6:52:34:5d:52:
                    7c:dd:d6:96:01:c8:ab:ec:9c:ea:50:e8:65:c5:0c:
                    89:6c:9d:f5:5f:42:3b:03:84:4d:32:8c:f2:3c:10:
                    0f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8E:55:6D:37:99:5D:49:1C:71:F4:E0:A6:79:41:DE:E1:84:BF:55
            X509v3 Authority Key Identifier:
                keyid:41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136302e302f32342d3234203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:f8:66:35:9c:33:d7:7d:59:0e:b2:6a:73:fb:1c:51:7a:f7:
         5c:99:30:37:69:c4:ca:f5:ee:44:f0:3f:54:36:ec:d7:0b:b2:
         e4:a5:0d:33:51:b7:0a:1a:aa:a5:d8:f0:af:69:eb:5d:66:8e:
         44:3a:d7:b7:f0:b5:d9:50:4d:a5:76:81:3f:57:eb:ca:9d:8a:
         18:03:d9:09:46:20:4a:28:b0:3b:3b:83:e5:75:72:fb:36:b4:
         b6:3c:06:3e:36:57:ae:20:4d:87:11:0d:c0:5f:7a:0e:93:3a:
         5a:cb:1e:34:9d:20:f5:93:cf:11:9a:4f:63:d5:f5:a9:70:0a:
         59:17:77:8e:8e:23:e4:d8:e3:39:c3:6c:16:c8:4b:58:3d:90:
         04:20:d0:5e:9d:c3:d9:66:13:1a:f8:c7:c3:66:9f:b8:30:ec:
         0e:9b:03:4a:4a:0d:c3:51:7d:94:11:f6:3c:7f:0e:6b:c8:0a:
         d4:91:ff:76:12:04:00:2c:88:26:8f:92:1b:27:d3:8d:d6:bc:
         f8:f5:63:42:33:21:db:08:84:ba:b6:ec:54:b2:39:75:b0:ca:
         84:bd:13:a7:ad:c3:a7:c5:e9:cf:8a:b8:5f:a0:9e:7e:83:14:
         d3:65:d0:4e:62:3f:3b:43:76:ba:a5:df:5d:07:ef:bc:cd:55:
         a7:0c:83:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org