Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa
File:                     3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (raw, json)
Hash identifier:          LHypTkdM0OzynE3ebJ+uw/Gxj+1h3v1KtrFMKjTk0rI=
Subject key identifier:   AA:FC:CE:58:15:69:A0:D2:86:82:4C:25:52:54:37:EE:AE:85:FF:EC
Certificate issuer:       /CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
Certificate serial:       06F2F461589471C630A5C9DE3F89FDF99AFCF89A
Authority key identifier: 41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa
Signing time:             Fri 15 Sep 2023 08:00:00 +0000
ROA not before:           Fri 15 Sep 2023 07:55:00 +0000
ROA not after:            Fri 13 Sep 2024 08:00:00 +0000
asID:                     266535
IP address blocks:        160.238.162.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f2:f4:61:58:94:71:c6:30:a5:c9:de:3f:89:fd:f9:9a:fc:f8:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
        Validity
            Not Before: Sep 15 07:55:00 2023 GMT
            Not After : Sep 13 08:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f2:20:c0:2c:55:a7:dc:d0:c1:25:ff:8f:11:
                    2f:27:28:9a:bb:15:2c:3e:5f:5a:1b:9d:26:61:58:
                    e8:07:19:46:b3:ec:2e:0f:e5:91:35:22:b2:8b:a6:
                    87:fb:5c:af:b8:52:43:c3:17:20:b5:67:31:fb:80:
                    76:20:71:f7:87:37:56:68:d9:8b:83:fb:71:87:58:
                    a4:1a:1e:85:f2:0d:af:47:85:87:63:33:4d:f5:78:
                    96:a7:af:ec:83:21:47:b7:3d:b7:82:cc:08:cd:f9:
                    ea:6e:92:7f:bf:97:f1:21:ae:df:3e:ae:66:93:92:
                    7b:44:0e:b4:87:94:6c:fc:7a:e4:ea:27:c7:8c:21:
                    03:75:6e:4f:e4:d9:ef:93:e9:7f:a7:71:30:ea:39:
                    58:93:dc:e8:17:bb:d4:68:0d:ee:3a:eb:5a:ae:96:
                    d0:43:c0:55:47:d7:54:87:82:35:95:3a:c4:7a:2c:
                    5b:10:68:96:00:98:c0:2c:2a:b4:0d:85:f3:f9:60:
                    72:3a:8a:a1:43:de:ab:51:76:ca:6a:ee:97:5f:d5:
                    4d:ce:65:71:18:a6:37:4b:37:5f:82:00:9c:75:16:
                    c4:b9:0a:c3:9e:f3:9f:fa:67:2f:0d:5c:ca:80:f0:
                    27:ab:58:8e:cf:be:1d:5d:5e:f9:76:05:43:34:8f:
                    54:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FC:CE:58:15:69:A0:D2:86:82:4C:25:52:54:37:EE:AE:85:FF:EC
            X509v3 Authority Key Identifier:
                keyid:41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:41:4b:a1:07:7b:3f:c5:ae:c7:72:4d:60:b8:e4:5a:fb:9c:
         08:67:65:93:00:ea:3e:a0:20:1b:19:57:ba:08:d3:51:86:8f:
         5c:85:f6:5f:48:cc:c9:af:ca:5c:38:33:b1:f7:0b:04:f6:46:
         a7:33:42:39:81:8a:c3:b3:6c:31:41:9a:77:a4:e5:19:7b:10:
         d8:fd:77:31:b2:d6:98:50:4f:c5:12:21:9a:a8:59:98:69:7b:
         d9:c3:a1:a4:da:e6:71:e3:0b:3f:d1:a8:04:77:52:0f:2e:22:
         99:92:da:28:6f:e0:8b:d1:aa:6e:1c:67:08:f6:ca:c4:fd:02:
         5a:27:2d:e5:1f:29:46:f1:a2:74:23:9e:1b:f8:21:37:9f:53:
         2b:34:d2:89:78:74:78:2f:a3:d4:97:02:ec:94:e2:a1:64:da:
         2d:8e:ef:bb:ae:1a:c1:f7:99:2e:5e:80:65:16:d0:46:11:da:
         dc:9c:6d:98:c5:21:6d:50:61:65:7c:96:66:24:94:54:a4:dc:
         66:9e:83:10:70:6a:10:02:ff:ac:ef:c9:9b:81:c1:bf:94:8e:
         72:70:b2:b8:c5:c2:25:55:8d:ee:4f:5b:7d:48:21:2b:60:7f:
         5f:4f:71:cc:c2:bd:c9:4a:9a:6a:cc:bd:56:8c:07:28:78:ee:
         05:09:82:59
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUBvL0YViUccYwpcneP4n9+Zr8+JowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE0RkE3NDhEQTg0RDQyMUI3MURDMzc2NURCRERERjcw
MzlDQTY4NjAeFw0yMzA5MTUwNzU1MDBaFw0yNDA5MTMwODAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjBGMjIwQzAyQzU1QTdEQ0Qw
QzEyNUZGOEYxMTJGMjcyODlBQkIxNTJDM0U1RjVBMUI5RDI2NjE1OEU4MDcxOTQ2
QjNFQzJFMEZFNTkxMzUyMkIyOEJBNjg3RkI1Q0FGQjg1MjQzQzMxNzIwQjU2NzMx
RkI4MDc2MjA3MUY3ODczNzU2NjhEOThCODNGQjcxODc1OEE0MUExRTg1RjIwREFG
NDc4NTg3NjMzMzRERjU3ODk2QTdBRkVDODMyMTQ3QjczREI3ODJDQzA4Q0RGOUVB
NkU5MjdGQkY5N0YxMjFBRURGM0VBRTY2OTM5MjdCNDQwRUI0ODc5NDZDRkM3QUU0
RUEyN0M3OEMyMTAzNzU2RTRGRTREOUVGOTNFOTdGQTc3MTMwRUEzOTU4OTNEQ0U4
MTdCQkQ0NjgwREVFM0FFQjVBQUU5NkQwNDNDMDU1NDdENzU0ODc4MjM1OTUzQUM0
N0EyQzVCMTA2ODk2MDA5OEMwMkMyQUI0MEQ4NUYzRjk2MDcyM0E4QUExNDNERUFC
NTE3NkNBNkFFRTk3NUZENTREQ0U2NTcxMThBNjM3NEIzNzVGODIwMDlDNzUxNkM0
QjkwQUMzOUVGMzlGRkE2NzJGMEQ1Q0NBODBGMDI3QUI1ODhFQ0ZCRTFENUQ1RUY5
NzYwNTQzMzQ4RjU0RDUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8PIgwCxVp9zQwSX/jxEvJyiauxUsPl9aG50mYVjoBxlGs+wuD+WR
NSKyi6aH+1yvuFJDwxcgtWcx+4B2IHH3hzdWaNmLg/txh1ikGh6F8g2vR4WHYzNN
9XiWp6/sgyFHtz23gswIzfnqbpJ/v5fxIa7fPq5mk5J7RA60h5Rs/Hrk6ifHjCED
dW5P5Nnvk+l/p3Ew6jlYk9zoF7vUaA3uOutarpbQQ8BVR9dUh4I1lTrEeixbEGiW
AJjALCq0DYXz+WByOoqhQ96rUXbKau6XX9VNzmVxGKY3SzdfggCcdRbEuQrDnvOf
+mcvDVzKgPAnq1iOz74dXV75dgVDNI9U1QIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FKr8zlgVaaDShoJMJVJUN+6uhf/sMB8GA1UdIwQYMBaAFEFPp0jahNQhtx3Ddl29
3fcDnKaGMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4
RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzAvNDE0RkE3NDhEQTg0RDQy
MUI3MURDMzc2NURCRERERjcwMzlDQTY4Ni5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80MTRGQTc0OERBODRENDIxQjcxREMzNzY1REJERERGNzAzOUNB
Njg2LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FUm16RXZ6YnUxZU1pOEV2SFRI
V2lra0F4UEFUOEpaQWpjb2NjMmRMalJMeS8wLzMxMzYzMDJlMzIzMzM4MmUzMTM2
MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2MzYzNTMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGg7qIwDQYJKoZIhvcNAQELBQADggEBABxBS6EHez/FrsdyTWC45Fr7nAhnZZMA
6j6gIBsZV7oI01GGj1yF9l9IzMmvylw4M7H3CwT2RqczQjmBisOzbDFBmnek5Rl7
ENj9dzGy1phQT8USIZqoWZhpe9nDoaTa5nHjCz/RqAR3Ug8uIpmS2ihv4IvRqm4c
Zwj2ysT9AlonLeUfKUbxonQjnhv4ITefUys00ol4dHgvo9SXAuyU4qFk2i2O77uu
GsH3mS5egGUW0EYR2tycbZjFIW1QYWV8lmYklFSk3GaegxBwahAC/6zvyZuBwb+U
jnJwsrjFwiVVje5PW31IIStgf19PcczCvclKmmrMvVaMByh47gUJglk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org