Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32352e302f32342d3234203d3e20323637323633.roa
File:                     3136302e3233382e32352e302f32342d3234203d3e20323637323633.roa (raw, json)
Hash identifier:          0toqvEepRLkWoZxH8tmjDAZS8AfX0zQewCNrh8TP6nQ=
Subject key identifier:   FE:28:D8:67:87:02:C7:ED:7A:70:FD:24:9D:65:02:FB:9C:92:E3:5B
Certificate issuer:       /CN=A0BF85CC725AB0146D68A5F44D34D10750540EF3
Certificate serial:       671D25C292C9B2660ECA0D0E1304444428A4CE66
Authority key identifier: A0:BF:85:CC:72:5A:B0:14:6D:68:A5:F4:4D:34:D1:07:50:54:0E:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32352e302f32342d3234203d3e20323637323633.roa
Signing time:             Thu 25 Jan 2024 20:04:28 +0000
ROA not before:           Thu 25 Jan 2024 19:59:28 +0000
ROA not after:            Thu 23 Jan 2025 20:04:28 +0000
asID:                     267263
IP address blocks:        160.238.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1d:25:c2:92:c9:b2:66:0e:ca:0d:0e:13:04:44:44:28:a4:ce:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BF85CC725AB0146D68A5F44D34D10750540EF3
        Validity
            Not Before: Jan 25 19:59:28 2024 GMT
            Not After : Jan 23 20:04:28 2025 GMT
        Subject: CN=FE28D8678702C7ED7A70FD249D6502FB9C92E35B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:ea:46:c3:a2:99:9b:f5:90:b8:49:15:42:
                    c9:4d:5e:01:3e:62:b7:3a:f8:35:c8:08:e9:fa:6d:
                    3b:fe:7d:4f:94:d0:a2:14:66:11:72:bf:89:72:6b:
                    b3:6d:13:9d:98:0f:5a:09:ed:3c:17:29:ed:5b:14:
                    f2:a7:82:ad:b7:a8:50:10:01:eb:dc:1f:da:17:94:
                    f0:2a:89:e4:e2:2b:ef:1f:ed:cd:51:68:41:02:03:
                    10:c0:d4:dd:04:dc:73:de:84:25:f4:40:1b:3d:c7:
                    81:4c:73:a9:c3:45:d0:1f:85:ac:bd:ca:0c:bc:c2:
                    84:8a:74:59:e0:e8:60:f5:60:8b:b4:ab:ff:c2:b4:
                    37:73:09:6f:e6:3a:0f:80:5f:76:2c:6d:85:d3:38:
                    d9:c8:25:81:d0:5e:59:04:c6:68:77:0a:15:c3:ee:
                    1a:b1:f6:80:f8:d0:f1:c3:45:31:e4:66:b1:84:c4:
                    b6:04:c5:db:f2:11:15:50:fd:a8:c7:57:57:6c:c4:
                    4c:d1:94:a0:5a:01:41:be:46:fa:0c:2d:98:6f:58:
                    ce:ec:c3:79:6c:9f:63:a2:c0:4e:9d:ce:a9:ad:44:
                    54:c3:9c:9f:e8:d0:ac:ab:b3:93:96:af:a0:e1:ac:
                    a2:37:57:eb:a1:79:69:02:d8:e2:f2:db:77:8e:9a:
                    cd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:28:D8:67:87:02:C7:ED:7A:70:FD:24:9D:65:02:FB:9C:92:E3:5B
            X509v3 Authority Key Identifier:
                keyid:A0:BF:85:CC:72:5A:B0:14:6D:68:A5:F4:4D:34:D1:07:50:54:0E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32352e302f32342d3234203d3e20323637323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:3b:c3:54:e8:c3:70:7e:29:e4:23:78:3f:30:92:cd:4f:15:
         96:a6:24:89:dc:0f:93:e8:a8:94:51:2f:21:2f:b5:bb:d7:25:
         52:d3:d1:3f:32:94:bd:73:b6:69:68:1b:d8:f0:c5:59:b8:17:
         ce:87:56:66:35:61:f3:83:31:b6:92:8b:3d:35:60:d9:1c:4a:
         69:03:ed:aa:14:4a:db:33:16:04:9a:21:9d:dc:7d:ad:9a:f3:
         1c:fa:23:e4:86:27:e5:74:5e:e5:b9:22:89:fd:bc:b3:aa:04:
         37:16:25:41:38:c9:a6:82:4c:18:53:24:2c:b6:67:60:b2:ed:
         32:98:42:47:c7:27:c0:50:67:63:73:cc:d2:3d:f5:07:07:63:
         40:47:0b:17:47:dc:6f:76:c3:31:45:bc:86:f5:d6:96:f0:b0:
         58:8b:ad:0a:f1:a7:df:3a:99:4e:d1:37:61:bf:87:0d:96:f4:
         b7:69:79:20:98:7c:11:e1:92:9e:a0:aa:1c:24:26:9d:24:fd:
         7d:5e:f5:a3:5f:76:e5:b5:8d:1e:ce:33:c1:f6:0d:d2:3a:db:
         5d:0d:9f:c6:ca:24:b3:48:0b:b5:68:f2:23:a9:d5:b7:d7:0e:
         98:15:2c:d1:1c:e0:2f:6d:33:6e:f3:e4:91:6c:91:66:95:79:
         a2:77:31:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org