Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa
File:                     3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa (raw, json)
Hash identifier:          0S7QK9VZ6h/wKZg6nVHaeTeahoC02rxeGAp8j++iGrA=
Subject key identifier:   B7:A9:C1:56:E5:B8:C3:B0:20:F7:F5:2D:70:62:E8:F6:7D:63:D2:A3
Certificate issuer:       /CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
Certificate serial:       3EBE56D24360AFB5C7119DD032D2B0D8599B927B
Authority key identifier: 41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa
Signing time:             Fri 15 Sep 2023 08:00:00 +0000
ROA not before:           Fri 15 Sep 2023 07:55:00 +0000
ROA not after:            Fri 13 Sep 2024 08:00:00 +0000
asID:                     266535
IP address blocks:        160.238.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:be:56:d2:43:60:af:b5:c7:11:9d:d0:32:d2:b0:d8:59:9b:92:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
        Validity
            Not Before: Sep 15 07:55:00 2023 GMT
            Not After : Sep 13 08:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:b4:5b:1a:29:eb:f2:5c:60:e9:4e:d4:e8:
                    f5:44:63:6e:df:82:82:07:27:d2:02:ab:a2:e5:fd:
                    c5:1c:50:5a:79:05:02:5b:fe:30:ab:21:ca:9a:2f:
                    c1:49:15:69:d5:7e:40:c0:31:a5:92:ef:97:21:b6:
                    fa:31:fd:0d:b0:00:be:1c:5e:5c:7b:c3:ea:f1:d4:
                    aa:c6:f3:e8:6c:70:df:8a:4d:71:13:28:2a:aa:c3:
                    65:95:29:cb:a5:99:f0:1d:72:d2:6c:47:ee:83:e0:
                    98:eb:04:ff:8a:3f:d6:bc:e8:84:7f:04:a1:35:c9:
                    73:54:fb:ec:5f:04:4b:fc:0f:a3:87:ac:10:a0:9e:
                    79:a0:57:5c:6b:20:8f:0d:48:8f:3d:98:de:c7:03:
                    55:ca:57:3b:57:c7:54:f2:59:24:1f:67:1f:d2:0f:
                    92:d9:4f:99:86:18:4c:59:a2:9e:52:cb:0d:f5:ea:
                    50:37:0e:59:42:14:5b:37:d3:50:ca:68:39:b9:d6:
                    1b:f9:ac:1e:4e:bc:fe:0f:21:af:e0:aa:35:57:e4:
                    48:0a:a6:96:b7:6c:06:de:4b:21:68:40:57:b3:2f:
                    03:e6:65:7c:70:5a:5f:d0:bf:ea:14:14:29:b5:9e:
                    15:1a:30:ce:72:4c:02:43:27:f9:03:fc:16:4f:a7:
                    2e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A9:C1:56:E5:B8:C3:B0:20:F7:F5:2D:70:62:E8:F6:7D:63:D2:A3
            X509v3 Authority Key Identifier:
                keyid:41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136322e302f32342d3234203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:9a:ba:e5:bc:12:28:a2:51:fb:4a:ab:cb:9c:90:13:09:53:
         2a:e9:26:42:a4:7d:77:31:61:70:3a:18:04:98:13:a6:46:9e:
         b2:a0:a9:cb:b8:30:bf:a1:c8:d4:45:9e:d8:49:37:16:1c:10:
         91:03:66:7f:f0:d8:cb:b0:c4:63:e9:f7:8e:ca:c2:10:1d:ae:
         39:53:61:62:3e:4c:00:3b:bf:c3:2f:73:37:7f:3c:6d:da:1b:
         c0:a8:9a:51:7f:e6:28:19:6b:af:13:fa:0a:78:09:af:3f:40:
         b9:17:a1:4b:72:78:e4:01:78:09:9f:0d:f8:4c:38:78:33:97:
         67:f1:62:c0:16:52:74:6a:6e:2e:da:50:ae:94:58:a0:0a:96:
         94:9d:b1:b0:02:c1:20:d0:35:d0:54:33:31:60:8a:61:c1:99:
         4b:d9:c2:e6:5b:b0:86:17:46:ee:36:8b:f3:69:ff:a5:bb:58:
         2d:7f:66:d3:78:a7:ab:5c:45:48:fd:99:83:10:10:6a:37:4b:
         d5:66:74:f9:b8:83:81:ab:74:27:d2:f7:3b:a0:f7:e4:3d:59:
         41:96:51:4a:7a:d8:54:c5:a1:95:61:19:d5:92:a3:bf:3e:14:
         56:5a:a8:13:70:07:fb:73:7d:8b:a9:52:bb:9f:61:e6:e8:a3:
         1c:44:6d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org