Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32362e302f32342d3234203d3e20323637323633.roa
File:                     3136302e3233382e32362e302f32342d3234203d3e20323637323633.roa (raw, json)
Hash identifier:          RbXNiqlM8q5t0c881RbuhLzk1aumsJ9Cq3oCUk4s79w=
Subject key identifier:   0C:BF:71:F6:FF:C2:B4:11:40:97:0D:16:F3:21:CB:7E:AB:E0:32:A7
Certificate issuer:       /CN=A0BF85CC725AB0146D68A5F44D34D10750540EF3
Certificate serial:       2076ECEE7A821BADDCA350F9F9078E015DE04979
Authority key identifier: A0:BF:85:CC:72:5A:B0:14:6D:68:A5:F4:4D:34:D1:07:50:54:0E:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32362e302f32342d3234203d3e20323637323633.roa
Signing time:             Thu 25 Jan 2024 20:04:26 +0000
ROA not before:           Thu 25 Jan 2024 19:59:26 +0000
ROA not after:            Thu 23 Jan 2025 20:04:26 +0000
asID:                     267263
IP address blocks:        160.238.26.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:76:ec:ee:7a:82:1b:ad:dc:a3:50:f9:f9:07:8e:01:5d:e0:49:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BF85CC725AB0146D68A5F44D34D10750540EF3
        Validity
            Not Before: Jan 25 19:59:26 2024 GMT
            Not After : Jan 23 20:04:26 2025 GMT
        Subject: CN=0CBF71F6FFC2B41140970D16F321CB7EABE032A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:e1:01:fb:e1:bc:54:62:f0:50:23:e4:e7:
                    08:03:3d:f1:1a:1f:8c:7d:98:d7:ab:fa:39:37:b9:
                    ea:b5:53:61:e7:88:c4:f9:97:8b:bc:1c:30:57:54:
                    e8:b8:e0:2b:97:5f:10:f4:21:8e:a6:aa:e6:24:c2:
                    08:8f:bb:ef:c6:83:eb:5a:de:90:89:9f:3e:d4:fe:
                    6c:07:d0:ba:94:28:66:52:0f:ed:cb:38:c3:40:97:
                    75:f4:82:13:46:20:76:86:cf:11:49:a5:90:69:73:
                    e9:91:db:b4:d6:bb:d7:89:b0:d1:e2:c7:e5:92:8c:
                    f8:db:ac:c9:0c:be:27:8a:82:a9:7c:73:fc:de:52:
                    89:69:79:75:ec:91:72:63:c6:b4:a7:d3:3b:37:e1:
                    72:42:de:74:bb:35:47:35:c2:3e:ee:a1:16:a0:06:
                    b9:f2:62:dd:40:7c:57:36:61:6b:af:42:10:79:97:
                    78:8b:d8:49:0f:53:c9:b1:6d:90:dc:77:c7:43:70:
                    07:e4:8f:d7:22:08:98:01:e9:c4:80:6b:dd:c0:62:
                    dc:83:b7:f4:65:a4:8f:13:d5:c9:14:76:10:23:21:
                    d5:94:e6:25:57:94:f6:28:85:7e:4f:db:a1:43:f4:
                    20:9d:80:db:6e:fc:0a:33:25:3d:3a:8d:6b:09:8f:
                    00:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BF:71:F6:FF:C2:B4:11:40:97:0D:16:F3:21:CB:7E:AB:E0:32:A7
            X509v3 Authority Key Identifier:
                keyid:A0:BF:85:CC:72:5A:B0:14:6D:68:A5:F4:4D:34:D1:07:50:54:0E:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0BF85CC725AB0146D68A5F44D34D10750540EF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HJjgHD7kHhP1UagfV1CnLYbJjURAiUcipr95QzhnnEyk/0/3136302e3233382e32362e302f32342d3234203d3e20323637323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:3c:71:23:98:49:ca:30:37:cc:5d:04:c9:c4:a4:d1:b9:f4:
         80:2a:7c:2c:73:88:56:46:4e:b7:45:f3:6c:9b:dc:66:a0:9e:
         74:79:6d:d7:a5:3f:a0:66:13:35:4d:ab:14:03:e6:ce:5f:96:
         7b:33:cf:35:92:9e:e5:02:6b:f0:2e:ae:b3:5c:06:da:73:05:
         c7:a0:1c:bb:08:b1:92:94:39:a8:95:15:d6:77:ac:d5:59:da:
         dd:50:0d:17:fd:34:b4:2a:4b:ef:ce:08:e9:d3:e0:f2:b4:7d:
         b6:ba:e2:e0:0e:c4:33:e6:8e:28:24:cd:d9:d3:b7:f3:02:b7:
         fe:f0:13:cf:be:c1:94:31:c6:c5:1a:03:7b:30:f8:b9:a9:30:
         9c:86:62:68:bb:f9:af:d7:e7:23:4f:f4:58:6e:5b:26:ad:27:
         24:9c:ea:d5:6b:9e:ff:10:60:1b:42:d0:a4:48:23:5a:3e:ed:
         23:7a:f9:ca:ea:02:2e:f0:e5:9a:da:87:df:bb:96:60:40:d0:
         2f:cb:39:43:1f:36:06:97:40:a5:62:e1:43:44:94:2a:7e:48:
         85:59:f6:e4:56:57:0e:7a:c3:26:43:c7:13:27:b1:2c:1a:03:
         47:c6:4e:e6:aa:0a:a2:a5:e8:d7:2c:74:4d:1e:ad:89:50:95:
         cc:46:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:37 2024 by rpki-client on console-ams.rpki-client.org