Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32342e302f32322d3232203d3e20323637323633.roa
File:                     3136302e3233382e32342e302f32322d3232203d3e20323637323633.roa (raw, json)
Hash identifier:          OYsUnRBPHd57R8gnFhv2h1kUd1E5iULG+naO5Y/ALvE=
Subject key identifier:   99:0C:B7:8F:5F:E3:92:A0:29:54:5D:61:70:F2:DC:F5:7A:A8:B9:85
Certificate issuer:       /CN=A0BF85CC725AB0146D68A5F44D34D10750540EF3
Certificate serial:       44A379141A09D2B9E37B4B095CB071060F6DA749
Authority key identifier: A0:BF:85:CC:72:5A:B0:14:6D:68:A5:F4:4D:34:D1:07:50:54:0E:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32342e302f32322d3232203d3e20323637323633.roa
Signing time:             Thu 25 Jan 2024 20:04:26 +0000
ROA not before:           Thu 25 Jan 2024 19:59:26 +0000
ROA not after:            Thu 23 Jan 2025 20:04:26 +0000
asID:                     267263
IP address blocks:        160.238.24.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a3:79:14:1a:09:d2:b9:e3:7b:4b:09:5c:b0:71:06:0f:6d:a7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BF85CC725AB0146D68A5F44D34D10750540EF3
        Validity
            Not Before: Jan 25 19:59:26 2024 GMT
            Not After : Jan 23 20:04:26 2025 GMT
        Subject: CN=990CB78F5FE392A029545D6170F2DCF57AA8B985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:26:eb:0f:d7:7c:41:27:b8:2b:10:2e:39:0a:
                    9d:28:f9:9e:b4:07:9e:ce:64:ca:10:37:5c:7e:61:
                    9b:9f:60:59:b7:d9:71:7c:a6:9a:99:61:f2:44:55:
                    2b:c5:d2:e0:08:cd:1f:49:d7:9b:1a:73:f3:44:b6:
                    8d:7f:da:f0:75:6e:41:e0:8a:4c:c7:f7:4d:43:c7:
                    5b:fc:58:5e:20:90:49:55:01:bf:34:84:df:75:e0:
                    a3:32:5c:c7:81:09:60:7d:a5:a1:30:e7:33:f5:07:
                    79:2e:80:44:e9:7b:e7:9d:03:19:df:a5:e3:87:53:
                    d7:ac:13:dd:8e:4d:88:a7:0a:3d:e0:1c:6b:f1:3c:
                    77:11:34:16:7e:2b:91:15:52:81:b5:7d:a2:dd:8b:
                    7b:00:15:dd:8e:98:ee:5d:42:79:51:40:ba:c6:56:
                    38:49:69:52:74:45:54:a9:89:86:a5:0e:e8:38:0d:
                    ac:e4:b4:0d:df:92:94:1c:d4:72:15:94:ad:05:3b:
                    a9:17:80:20:ad:8a:1f:db:79:09:74:2b:55:22:94:
                    6a:0e:ee:38:57:b5:6b:7d:d6:a1:88:1b:23:e7:16:
                    79:47:d3:e4:5d:fb:99:f7:24:81:d5:36:a7:99:da:
                    69:7b:ea:94:f0:df:da:87:19:78:c3:22:a2:a8:2f:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0C:B7:8F:5F:E3:92:A0:29:54:5D:61:70:F2:DC:F5:7A:A8:B9:85
            X509v3 Authority Key Identifier:
                keyid:A0:BF:85:CC:72:5A:B0:14:6D:68:A5:F4:4D:34:D1:07:50:54:0E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32342e302f32322d3232203d3e20323637323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:fd:3c:c3:05:ba:52:67:0f:ee:75:0b:41:33:29:00:ab:b5:
         67:ac:1c:6d:a8:6d:85:af:9c:2e:a5:0e:c4:70:eb:f4:33:56:
         f9:d5:f0:92:a0:b4:71:9d:21:68:de:7d:fb:61:64:fc:7f:4a:
         68:73:34:2b:ff:e5:d1:5b:04:51:95:39:2e:8a:35:61:56:72:
         79:20:cc:95:bc:f5:a4:06:2b:92:d7:8b:aa:70:cb:41:0f:84:
         56:5c:5d:5c:cb:ab:e8:fc:ac:cc:2f:4d:2b:6c:41:37:a3:18:
         6d:72:aa:09:50:a4:72:5a:37:a4:00:5f:68:ea:d4:b8:05:71:
         0e:03:d2:c0:56:51:e8:bc:a2:7a:5e:eb:bc:47:67:85:2c:91:
         76:14:8c:22:ba:bf:98:f8:fc:cc:78:4d:53:e2:bc:2c:f8:6c:
         7d:69:09:fa:df:5f:27:bb:6a:b6:e1:c7:0a:7d:45:5d:25:7e:
         db:c8:7d:5a:06:73:cb:65:54:f6:6a:7c:55:39:4e:07:51:b0:
         db:57:4d:a7:be:7c:9d:b4:4a:f2:60:73:e8:2f:2c:3f:ff:20:
         13:5f:0f:cb:e2:f8:53:4c:7c:44:7e:7d:12:2c:86:aa:1c:a5:
         ae:12:33:9c:8f:c5:25:c6:52:b2:c0:9c:88:2f:35:09:04:69:
         0e:0d:ba:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org