Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ExkTHHoibuMaUZHXoT2hDEdsa47LEcCB5j8XSYUNEZvc/0/3230302e3136322e3136302e302f32302d3234203d3e203232343331.roa
File:                     3230302e3136322e3136302e302f32302d3234203d3e203232343331.roa (raw, json)
Hash identifier:          COqC9jFSpf0bHcrTZU38kQCYVj18M77q4nwl4iBqgEo=
Subject key identifier:   B1:93:DA:D2:2E:52:2E:15:64:F8:D7:F5:60:73:94:94:0E:D8:03:8E
Certificate issuer:       /CN=3B37043581C63D12F9F834F7AAA8A5CCAB61A786
Certificate serial:       2879A3F06B1A52941ADE952E1CF54C8F950C621F
Authority key identifier: 3B:37:04:35:81:C6:3D:12:F9:F8:34:F7:AA:A8:A5:CC:AB:61:A7:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B37043581C63D12F9F834F7AAA8A5CCAB61A786.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ExkTHHoibuMaUZHXoT2hDEdsa47LEcCB5j8XSYUNEZvc/0/3230302e3136322e3136302e302f32302d3234203d3e203232343331.roa
Signing time:             Tue 26 Dec 2023 14:31:36 +0000
ROA not before:           Tue 26 Dec 2023 14:26:36 +0000
ROA not after:            Tue 24 Dec 2024 14:31:36 +0000
asID:                     22431
IP address blocks:        200.162.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:79:a3:f0:6b:1a:52:94:1a:de:95:2e:1c:f5:4c:8f:95:0c:62:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B37043581C63D12F9F834F7AAA8A5CCAB61A786
        Validity
            Not Before: Dec 26 14:26:36 2023 GMT
            Not After : Dec 24 14:31:36 2024 GMT
        Subject: CN=B193DAD22E522E1564F8D7F5607394940ED8038E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:5b:8d:ea:4a:7f:cc:ce:0e:4e:68:ad:38:
                    05:66:3b:3d:24:87:d7:14:c2:b1:b5:ff:c6:b7:b0:
                    9d:7c:35:d1:1b:b9:e3:22:5e:3e:51:2c:91:a2:39:
                    e6:2c:2b:84:08:b8:dd:10:43:04:57:f1:5c:30:6e:
                    da:52:7b:34:37:34:d0:46:34:3a:86:1e:3d:d0:f6:
                    cb:88:51:68:4f:01:50:17:9b:56:25:d6:57:0c:70:
                    a4:d1:80:e3:01:d5:82:dc:e2:dc:01:50:7c:ef:4a:
                    3c:df:05:07:54:39:c9:0e:fe:4c:b5:ab:50:b1:c9:
                    2e:3e:36:21:5c:52:15:75:b2:72:55:fc:75:73:9c:
                    36:b3:8f:0a:3b:b8:d4:49:78:9a:24:cb:1f:15:c1:
                    3e:14:1d:56:f3:6f:0c:22:f8:62:46:0f:44:18:94:
                    b9:9d:7e:5a:d3:65:60:3d:08:37:a1:da:91:48:60:
                    00:4b:90:6e:67:1c:57:81:58:8a:96:6a:bb:01:f9:
                    b0:a2:f9:bd:77:8f:63:4c:16:d0:40:37:0a:42:75:
                    bc:fe:52:84:a9:10:ce:d5:61:e7:8f:ec:6b:fb:66:
                    99:2d:e1:3d:09:01:64:f6:9f:65:4e:d3:e1:7d:94:
                    58:d5:26:bc:e8:38:f6:d3:2d:dc:27:2c:89:99:93:
                    de:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:93:DA:D2:2E:52:2E:15:64:F8:D7:F5:60:73:94:94:0E:D8:03:8E
            X509v3 Authority Key Identifier:
                keyid:3B:37:04:35:81:C6:3D:12:F9:F8:34:F7:AA:A8:A5:CC:AB:61:A7:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ExkTHHoibuMaUZHXoT2hDEdsa47LEcCB5j8XSYUNEZvc/0/3B37043581C63D12F9F834F7AAA8A5CCAB61A786.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B37043581C63D12F9F834F7AAA8A5CCAB61A786.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExkTHHoibuMaUZHXoT2hDEdsa47LEcCB5j8XSYUNEZvc/0/3230302e3136322e3136302e302f32302d3234203d3e203232343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:1e:6a:e3:b5:e7:c6:57:fc:3e:85:07:cb:a7:47:c6:9b:19:
         c6:92:b3:6f:f7:a1:cd:c5:cf:37:45:71:e7:c6:65:2b:04:ea:
         34:04:50:57:e7:0c:fc:77:4b:eb:e5:92:cc:bc:6d:cb:83:ef:
         49:b2:8f:1a:2d:94:48:62:0b:e5:05:9f:1b:71:33:d1:95:16:
         5b:11:72:9d:52:00:5a:82:51:6d:10:8d:da:82:97:d6:25:a9:
         3c:a9:9b:d4:94:77:ec:c3:61:51:b1:72:d3:2a:65:56:37:21:
         c8:67:03:9d:e7:b7:a6:05:75:f5:e9:38:24:23:56:24:36:fc:
         d6:cf:83:d4:e8:18:c7:4d:de:23:d6:1f:4e:35:b8:20:a9:31:
         8b:b4:80:6a:0c:b2:6b:6c:ed:f6:4d:ad:8d:33:85:8d:a1:83:
         ef:99:a4:2d:30:fa:1a:e8:b2:f4:19:c6:55:31:95:9e:25:32:
         cf:ad:82:9f:a3:0c:27:4e:64:2e:3d:e2:0d:56:2b:62:a6:86:
         c1:5b:34:76:62:9f:35:a9:11:0d:15:c7:09:a7:98:82:53:cf:
         fe:8a:3e:9e:0c:39:1e:f8:59:ad:08:1d:86:f5:22:a0:56:c0:
         73:78:e2:be:ed:b0:8a:54:3f:1e:e7:ef:2a:26:01:60:5b:26:
         30:a1:d6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org