Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa
File:                     3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa (raw, json)
Hash identifier:          mccwa13qD2cQ4I+y33b9Fso5dHmE4UyvaKkC4ksv2uU=
Subject key identifier:   24:44:B0:79:84:DF:02:1D:43:F3:0E:62:AA:0E:E3:50:9A:49:32:DD
Certificate issuer:       /CN=A47C07A716BE0D71F42FD55CB8408FD9B63F8CAF
Certificate serial:       3894988686577538C2AEA06BCB2139E02BD13795
Authority key identifier: A4:7C:07:A7:16:BE:0D:71:F4:2F:D5:5C:B8:40:8F:D9:B6:3F:8C:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47C07A716BE0D71F42FD55CB8408FD9B63F8CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa
Signing time:             Thu 14 Sep 2023 20:34:09 +0000
ROA not before:           Thu 14 Sep 2023 20:29:09 +0000
ROA not after:            Thu 12 Sep 2024 20:34:09 +0000
asID:                     266534
IP address blocks:        160.238.144.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:94:98:86:86:57:75:38:c2:ae:a0:6b:cb:21:39:e0:2b:d1:37:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47C07A716BE0D71F42FD55CB8408FD9B63F8CAF
        Validity
            Not Before: Sep 14 20:29:09 2023 GMT
            Not After : Sep 12 20:34:09 2024 GMT
        Subject: CN=2444B07984DF021D43F30E62AA0EE3509A4932DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:00:89:6c:ec:f1:2b:b3:0f:a4:ef:1b:20:65:
                    14:57:30:21:4a:5b:e5:b2:b5:0f:32:0e:08:fa:0e:
                    da:24:0d:6b:bc:5e:be:88:91:e2:9f:d0:31:c0:5d:
                    45:81:61:4a:1d:e4:0d:56:0f:0d:b4:73:a2:4f:be:
                    97:b2:fe:3b:0a:45:b6:af:2b:d0:f2:54:fa:8b:bf:
                    51:2e:3d:59:d1:0d:3a:b9:63:47:81:b9:89:34:22:
                    8d:6a:0b:b1:ca:2d:94:77:a5:85:20:be:d8:9e:73:
                    05:27:2a:9d:05:e5:73:b6:5e:92:2a:19:82:8a:02:
                    24:89:a1:0b:4a:3d:b3:f9:16:e8:c0:94:be:d0:65:
                    73:38:63:32:4f:89:11:2c:a2:0b:12:54:28:1d:7a:
                    b8:2a:d2:78:51:f5:d3:5e:e6:a8:62:5d:b4:c8:c6:
                    34:5b:6c:a7:e1:a7:07:52:36:ba:65:58:f2:13:15:
                    d5:d9:5a:6c:f6:68:df:ee:b5:6e:08:20:47:04:e9:
                    1f:4c:03:ad:62:fc:44:28:e1:62:ad:c3:75:90:e5:
                    6d:72:04:d1:a6:14:3b:e5:fc:15:22:10:e0:6b:36:
                    a4:ba:42:5e:4b:cd:6b:eb:ec:6a:22:32:69:0d:1c:
                    f4:d0:4c:4c:5c:ab:a8:12:79:36:f7:c9:33:ae:0e:
                    81:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:44:B0:79:84:DF:02:1D:43:F3:0E:62:AA:0E:E3:50:9A:49:32:DD
            X509v3 Authority Key Identifier:
                keyid:A4:7C:07:A7:16:BE:0D:71:F4:2F:D5:5C:B8:40:8F:D9:B6:3F:8C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/A47C07A716BE0D71F42FD55CB8408FD9B63F8CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A47C07A716BE0D71F42FD55CB8408FD9B63F8CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FjoLCecD8RXR8Tnw4YhpG1hGhXskfwXerqnJwacgkR8a/0/3136302e3233382e3134342e302f32322d3234203d3e20323636353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:49:ce:a4:b9:27:9d:eb:eb:f9:0f:66:da:be:fa:03:f5:9b:
         bb:e8:10:9e:4a:7c:52:d3:e3:66:33:3b:a9:b2:22:61:e5:de:
         2d:1d:39:74:65:73:01:17:20:f3:69:2a:3c:9b:ff:4e:52:fb:
         9d:62:b8:a5:be:f6:c1:af:39:fa:c9:4e:d6:9f:64:e5:51:22:
         38:67:ef:ed:5b:22:3a:d1:b8:ac:ae:0a:e2:37:39:ed:70:ba:
         96:47:a9:bc:ed:28:c0:b9:b4:64:7f:96:0f:db:50:a9:1c:34:
         73:00:15:a3:a2:af:18:4d:7c:a0:47:d0:68:31:b5:65:52:33:
         de:f0:8e:ed:4d:a0:a6:65:b0:5d:e0:bf:1e:95:a3:96:da:d7:
         bc:9d:b2:8d:5d:09:48:2e:d7:16:db:c7:9e:51:79:bd:f1:5b:
         ce:e3:ec:26:c9:a1:38:a2:56:86:22:3b:35:84:98:99:83:5c:
         84:ba:1d:af:80:22:f7:c8:9d:65:1f:e4:06:1d:9b:60:33:08:
         e8:3a:0e:61:71:05:95:f4:4a:f2:d5:78:ae:1e:7b:a8:ea:44:
         49:d8:59:fb:65:d4:90:84:f2:ed:aa:1a:ca:57:e6:43:d5:15:
         83:98:2c:4c:01:6e:09:f9:ab:13:33:57:a6:76:54:d4:88:62:
         03:b6:a9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org