Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32342e302f32332d3233203d3e20323637323633.roa
File:                     3136302e3233382e32342e302f32332d3233203d3e20323637323633.roa (raw, json)
Hash identifier:          EBPPHZJNHWqT/bF0uFaUFFl8LWkxtvHj38ZZO17Bwnc=
Subject key identifier:   0D:0D:98:5F:FF:97:86:38:06:25:AF:69:83:B8:0A:51:9D:78:77:3C
Certificate issuer:       /CN=A0BF85CC725AB0146D68A5F44D34D10750540EF3
Certificate serial:       3ECDC8105E373671B944204CE7555D3C2BED5E87
Authority key identifier: A0:BF:85:CC:72:5A:B0:14:6D:68:A5:F4:4D:34:D1:07:50:54:0E:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32342e302f32332d3233203d3e20323637323633.roa
Signing time:             Thu 25 Jan 2024 20:04:27 +0000
ROA not before:           Thu 25 Jan 2024 19:59:27 +0000
ROA not after:            Thu 23 Jan 2025 20:04:27 +0000
asID:                     267263
IP address blocks:        160.238.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:cd:c8:10:5e:37:36:71:b9:44:20:4c:e7:55:5d:3c:2b:ed:5e:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BF85CC725AB0146D68A5F44D34D10750540EF3
        Validity
            Not Before: Jan 25 19:59:27 2024 GMT
            Not After : Jan 23 20:04:27 2025 GMT
        Subject: CN=0D0D985FFF9786380625AF6983B80A519D78773C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:2b:70:40:e7:df:4e:d0:d4:1e:4c:00:0a:
                    2c:47:bd:c9:0d:01:fb:b2:99:22:42:08:86:d5:03:
                    c2:99:a6:aa:e6:80:48:8a:5c:82:5b:a2:9c:f0:a3:
                    bd:60:a3:45:22:ea:e1:ca:ff:12:1a:b4:36:a2:4a:
                    34:9b:a8:f1:2e:ed:a6:35:fd:98:7a:4c:d8:63:c0:
                    89:b2:22:df:f5:bd:55:6a:c0:4e:02:14:1e:e0:a1:
                    a7:81:9b:63:e4:34:31:93:55:9e:6d:6c:5c:fb:3b:
                    f6:04:d3:69:18:7e:69:d7:49:89:8c:09:0a:ec:f9:
                    96:5d:bd:a7:ad:cb:d7:a7:f9:7b:fc:28:d4:7b:ca:
                    b1:1b:e3:ae:a4:e7:e6:44:80:25:0e:f7:eb:e4:20:
                    ff:6f:0e:02:96:ac:92:8c:99:00:78:82:b6:1d:2a:
                    ef:52:35:51:a4:d4:a8:51:8a:92:d8:61:bd:60:9d:
                    63:71:f6:53:f7:ba:95:2e:cd:bc:50:3e:6c:e9:95:
                    17:0d:0d:36:b2:b9:48:e3:d6:fe:f8:b8:3d:c9:a4:
                    33:24:7c:c0:ff:e3:ac:f4:8f:5a:5a:78:aa:b9:a3:
                    1c:b4:90:1f:7f:16:80:62:96:79:31:6d:72:b8:e2:
                    28:7d:c3:d5:9f:e2:aa:f3:3a:17:04:2d:73:e5:3c:
                    73:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0D:98:5F:FF:97:86:38:06:25:AF:69:83:B8:0A:51:9D:78:77:3C
            X509v3 Authority Key Identifier:
                keyid:A0:BF:85:CC:72:5A:B0:14:6D:68:A5:F4:4D:34:D1:07:50:54:0E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32342e302f32332d3233203d3e20323637323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:b3:ab:63:97:ac:99:6d:3f:32:de:eb:51:4c:e7:4c:19:c7:
         f3:ca:75:34:9a:9a:6d:9b:3b:39:99:d9:36:25:ae:1d:68:6a:
         f4:2b:f9:e6:02:21:a9:5f:fb:03:98:c0:fe:64:68:0b:b3:1d:
         08:42:9f:c4:04:de:fd:92:df:10:3a:a7:d2:a9:89:0c:b7:74:
         15:d4:14:9b:a2:50:bc:1a:84:b6:11:a5:5f:47:50:8e:7d:47:
         80:e5:69:9f:92:e9:94:e5:4c:a6:76:ce:9b:cc:92:99:78:f2:
         7f:ce:61:81:04:67:4c:53:85:86:fc:7c:67:f5:09:1c:85:43:
         cb:c6:b7:f0:9d:9d:52:da:6d:ee:ac:f1:52:f2:be:73:1f:71:
         be:86:2e:6a:91:8a:69:60:5e:d8:0b:80:f1:f9:72:ad:0c:85:
         07:91:85:7f:1c:f3:f3:15:de:f6:1a:fc:98:7a:4c:60:9d:95:
         7c:29:4a:9b:08:02:1e:39:a5:d3:66:b8:8c:4f:67:45:d5:f2:
         65:cd:d2:85:f8:d6:7b:ac:41:f9:7a:0c:f9:84:9a:1a:fd:fb:
         65:f0:e3:1e:56:d0:6f:c7:cc:e1:5a:bb:39:8f:71:25:42:d0:
         c5:e6:49:ce:a9:bf:08:1c:86:f8:f3:44:18:f3:7d:4e:7b:e8:
         5f:4b:06:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org