Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa
File:                     3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (raw, json)
Hash identifier:          iOfkJ32JxNkNXgkRnlqPWM5DcpvLYjXinGhcxlB80tY=
Subject key identifier:   1C:EC:91:C6:EB:18:8E:D4:1E:F8:69:BD:79:AD:D4:21:CC:2E:B1:96
Certificate issuer:       /CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
Certificate serial:       0892C63825205E74928C4042E4C0627D93CD8D53
Authority key identifier: 41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa
Signing time:             Fri 15 Sep 2023 08:00:01 +0000
ROA not before:           Fri 15 Sep 2023 07:55:01 +0000
ROA not after:            Fri 13 Sep 2024 08:00:01 +0000
asID:                     266535
IP address blocks:        160.238.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:92:c6:38:25:20:5e:74:92:8c:40:42:e4:c0:62:7d:93:cd:8d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
        Validity
            Not Before: Sep 15 07:55:01 2023 GMT
            Not After : Sep 13 08:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6f:d4:0c:22:8a:86:88:7f:4a:be:6a:b5:21:
                    6f:df:df:01:6d:1c:43:6b:8e:e9:ce:29:be:bc:6c:
                    f3:9b:b5:1b:1c:c5:81:b8:ef:4f:68:84:99:4f:47:
                    37:c0:2a:2c:42:8c:18:46:77:a1:78:b6:13:85:56:
                    91:b4:01:ca:ec:5e:8d:24:14:c6:3a:be:ab:7c:37:
                    cd:f0:6a:a2:d0:cc:dd:51:61:dc:27:dd:bd:92:fc:
                    20:82:ab:73:b5:c5:0b:5c:99:34:9e:b4:d2:43:e9:
                    90:b9:a5:03:21:38:2e:65:63:d7:d8:43:10:4e:7e:
                    50:ca:27:79:1e:2e:71:b4:94:1a:ac:f9:c3:6e:06:
                    1f:57:88:b7:3a:59:9e:28:88:17:33:69:7f:b5:a9:
                    ad:6f:a0:48:06:b8:b8:2e:3b:57:03:e1:04:24:7f:
                    8e:9a:33:b6:e2:77:72:95:c9:58:bc:e4:51:68:7b:
                    ac:e4:69:f0:a8:58:12:e1:9c:4a:e7:f8:91:88:4d:
                    36:81:c4:56:49:f4:75:18:a5:fd:2b:d5:94:ff:6f:
                    f1:88:20:e3:a9:1b:cf:b3:c5:0e:79:d8:b7:4d:c7:
                    1d:e5:42:3c:2f:a9:7d:da:96:3f:86:e8:4d:b5:99:
                    00:3e:b4:e8:df:15:08:25:68:d3:fc:81:c2:a5:25:
                    ed:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EC:91:C6:EB:18:8E:D4:1E:F8:69:BD:79:AD:D4:21:CC:2E:B1:96
            X509v3 Authority Key Identifier:
                keyid:41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:0f:39:01:66:49:e2:13:ca:bb:cf:ab:bb:6f:46:bd:d1:fe:
         1d:2f:86:e8:0c:9e:07:eb:8b:b2:fe:6a:ad:33:49:9d:8c:19:
         c7:0a:a9:6b:1b:ff:ef:9a:27:47:91:db:0c:7d:77:5c:fd:fd:
         53:1e:8f:ce:0d:e7:07:5d:01:ea:ed:d7:47:b4:98:9e:d1:3f:
         e4:b5:d7:48:25:14:bf:01:14:cc:2d:ea:85:86:eb:d3:c0:67:
         e1:b9:51:ce:03:21:a2:bb:0b:20:20:25:70:f9:6e:69:99:bd:
         a7:1a:84:16:22:0f:58:76:0c:09:56:39:39:67:fb:fc:87:23:
         ad:60:a8:c4:25:83:6e:a8:87:b3:cb:31:ca:36:1b:fa:c1:c5:
         0c:d9:7c:20:0c:d0:48:d3:a2:5f:de:2a:04:f4:66:cb:1c:25:
         a3:0f:af:30:a2:88:0c:33:65:8e:ff:5a:d1:0f:fd:97:85:8f:
         f8:ad:c8:cd:ec:bf:65:d9:43:4b:89:e7:59:5e:de:96:21:b2:
         bf:2a:9c:14:26:52:0d:62:90:a9:d2:bb:c7:0d:a2:1d:f1:f5:
         a0:d9:c1:98:18:3d:fb:be:44:7a:0e:61:12:33:d6:79:b8:c2:
         92:b6:51:0d:13:b3:d8:59:97:eb:64:cf:e2:71:47:f0:8a:0c:
         dc:1a:b4:c5
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUCJLGOCUgXnSSjEBC5MBifZPNjVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE0RkE3NDhEQTg0RDQyMUI3MURDMzc2NURCRERERjcw
MzlDQTY4NjAeFw0yMzA5MTUwNzU1MDFaFw0yNDA5MTMwODAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREI2RkQ0MEMyMjhBODY4ODdG
NEFCRTZBQjUyMTZGREZERjAxNkQxQzQzNkI4RUU5Q0UyOUJFQkM2Q0YzOUJCNTFC
MUNDNTgxQjhFRjRGNjg4NDk5NEY0NzM3QzAyQTJDNDI4QzE4NDY3N0ExNzhCNjEz
ODU1NjkxQjQwMUNBRUM1RThEMjQxNEM2M0FCRUFCN0MzN0NERjA2QUEyRDBDQ0RE
NTE2MURDMjdEREJEOTJGQzIwODJBQjczQjVDNTBCNUM5OTM0OUVCNEQyNDNFOTkw
QjlBNTAzMjEzODJFNjU2M0Q3RDg0MzEwNEU3RTUwQ0EyNzc5MUUyRTcxQjQ5NDFB
QUNGOUMzNkUwNjFGNTc4OEI3M0E1OTlFMjg4ODE3MzM2OTdGQjVBOUFENkZBMDQ4
MDZCOEI4MkUzQjU3MDNFMTA0MjQ3RjhFOUEzM0I2RTI3NzcyOTVDOTU4QkNFNDUx
Njg3QkFDRTQ2OUYwQTg1ODEyRTE5QzRBRTdGODkxODg0RDM2ODFDNDU2NDlGNDc1
MThBNUZEMkJENTk0RkY2RkYxODgyMEUzQTkxQkNGQjNDNTBFNzlEOEI3NERDNzFE
RTU0MjNDMkZBOTdEREE5NjNGODZFODREQjU5OTAwM0VCNEU4REYxNTA4MjU2OEQz
RkM4MUMyQTUyNUVEOTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA22/UDCKKhoh/Sr5qtSFv398BbRxDa47pzim+vGzzm7UbHMWBuO9P
aISZT0c3wCosQowYRneheLYThVaRtAHK7F6NJBTGOr6rfDfN8Gqi0MzdUWHcJ929
kvwggqtztcULXJk0nrTSQ+mQuaUDITguZWPX2EMQTn5Qyid5Hi5xtJQarPnDbgYf
V4i3OlmeKIgXM2l/tamtb6BIBri4LjtXA+EEJH+OmjO24ndylclYvORRaHus5Gnw
qFgS4ZxK5/iRiE02gcRWSfR1GKX9K9WU/2/xiCDjqRvPs8UOedi3Tccd5UI8L6l9
2pY/huhNtZkAPrTo3xUIJWjT/IHCpSXtlQIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FBzskcbrGI7UHvhpvXmt1CHMLrGWMB8GA1UdIwQYMBaAFEFPp0jahNQhtx3Ddl29
3fcDnKaGMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0VSbXpFdnpidTFlTWk4
RXZIVEhXaWtrQXhQQVQ4SlpBamNvY2MyZExqUkx5LzAvNDE0RkE3NDhEQTg0RDQy
MUI3MURDMzc2NURCRERERjcwMzlDQTY4Ni5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC80MTRGQTc0OERBODRENDIxQjcxREMzNzY1REJERERGNzAzOUNB
Njg2LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9FUm16RXZ6YnUxZU1pOEV2SFRI
V2lra0F4UEFUOEpaQWpjb2NjMmRMalJMeS8wLzMxMzYzMDJlMzIzMzM4MmUzMTM2
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzNTMzMzUucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACg7qMwDQYJKoZIhvcNAQELBQADggEBAIsPOQFmSeITyrvPq7tvRr3R/h0vhugM
ngfri7L+aq0zSZ2MGccKqWsb/++aJ0eR2wx9d1z9/VMej84N5wddAert10e0mJ7R
P+S110glFL8BFMwt6oWG69PAZ+G5Uc4DIaK7CyAgJXD5bmmZvacahBYiD1h2DAlW
OTln+/yHI61gqMQlg26oh7PLMco2G/rBxQzZfCAM0EjTol/eKgT0ZsscJaMPrzCi
iAwzZY7/WtEP/ZeFj/ityM3sv2XZQ0uJ51le3pYhsr8qnBQmUg1ikKnSu8cNoh3x
9aDZwZgYPfu+RHoOYRIz1nm4wpK2UQ0Ts9hZl+tkz+JxR/CKDNwatMU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org