Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/3136302e32302e36382e302f32322d3234203d3e20323636313436.roa
File:                     3136302e32302e36382e302f32322d3234203d3e20323636313436.roa (raw, json)
Hash identifier:          9nyqheaW3djVfwKq66xjWvOoFygPzvf+xQ5HGx+PE/I=
Subject key identifier:   D7:34:8D:72:F4:55:81:5C:B7:35:C2:9E:5B:D0:E9:FD:B8:A5:F9:CA
Certificate issuer:       /CN=D013D6CAFF551C6AF6F856674C682771D78090E1
Certificate serial:       718E02FB219E7CDF9ED0D10499DDC1D4C7D61BD0
Authority key identifier: D0:13:D6:CA:FF:55:1C:6A:F6:F8:56:67:4C:68:27:71:D7:80:90:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D013D6CAFF551C6AF6F856674C682771D78090E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/3136302e32302e36382e302f32322d3234203d3e20323636313436.roa
Signing time:             Fri 17 Nov 2023 18:15:02 +0000
ROA not before:           Fri 17 Nov 2023 18:10:02 +0000
ROA not after:            Fri 15 Nov 2024 18:15:02 +0000
asID:                     266146
IP address blocks:        160.20.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8e:02:fb:21:9e:7c:df:9e:d0:d1:04:99:dd:c1:d4:c7:d6:1b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D013D6CAFF551C6AF6F856674C682771D78090E1
        Validity
            Not Before: Nov 17 18:10:02 2023 GMT
            Not After : Nov 15 18:15:02 2024 GMT
        Subject: CN=D7348D72F455815CB735C29E5BD0E9FDB8A5F9CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:73:39:a6:0a:92:62:83:85:9b:ce:be:73:86:
                    5c:20:58:da:55:e7:60:26:f6:0c:f7:72:c7:e7:b5:
                    92:ce:45:59:fe:cf:6f:90:1f:19:04:9a:73:fa:64:
                    01:29:32:40:35:47:46:0f:f3:63:f1:ca:66:03:cd:
                    f6:de:81:3c:4f:b9:8f:04:8e:00:ce:86:d3:81:58:
                    68:98:19:f0:04:09:9b:c5:52:9d:ac:74:79:d8:e5:
                    0c:58:9b:67:38:7f:9a:d1:b9:fe:fd:ec:ac:4e:da:
                    b3:20:8b:f1:17:ec:43:ef:4f:c3:21:24:0f:1c:4f:
                    b0:df:73:b9:f6:ba:76:e2:87:6d:78:2b:8a:b0:71:
                    98:66:c5:ed:ae:e5:76:cc:22:80:e1:8f:67:4f:3d:
                    01:89:a6:da:df:f1:2a:42:30:a8:e7:1e:43:7e:d3:
                    39:fc:1c:ca:96:99:f3:d4:38:53:f2:f6:86:f2:af:
                    ad:92:4b:1b:0a:2f:85:12:94:4b:ad:c7:a5:92:ef:
                    41:f0:98:fc:e6:51:44:9b:56:2b:2b:5e:27:c6:27:
                    46:e3:f2:ff:4b:8d:d8:55:27:1b:c5:5b:2f:7d:90:
                    de:22:7b:cf:0e:7b:d6:3f:42:cd:7d:87:26:22:2a:
                    b9:ea:c5:eb:f9:43:1a:c4:8f:da:32:1f:90:aa:6b:
                    7a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:34:8D:72:F4:55:81:5C:B7:35:C2:9E:5B:D0:E9:FD:B8:A5:F9:CA
            X509v3 Authority Key Identifier:
                keyid:D0:13:D6:CA:FF:55:1C:6A:F6:F8:56:67:4C:68:27:71:D7:80:90:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/D013D6CAFF551C6AF6F856674C682771D78090E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D013D6CAFF551C6AF6F856674C682771D78090E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeQnzyFPMq47kw49F9EnB2DTAhT21AgcVgKkjCqCNLkH/0/3136302e32302e36382e302f32322d3234203d3e20323636313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:0c:6f:0c:bd:5e:7e:de:e5:76:a8:8b:f1:d4:ce:4a:3b:31:
         68:39:b1:9e:a5:e9:e8:b8:01:2b:69:2c:50:17:10:2e:1b:8c:
         58:b1:f8:81:00:79:f1:3d:d2:b8:00:ab:04:bc:bf:19:43:85:
         85:5f:f0:9f:d7:65:ef:f3:c5:69:60:99:76:17:9f:3b:71:e9:
         de:86:1c:26:db:aa:ac:66:ef:cb:93:80:16:00:24:69:4d:f8:
         38:6d:cc:6a:b9:3d:b6:90:4b:a0:19:24:69:af:6a:0e:0f:d4:
         a1:c5:44:ed:2a:fd:35:86:75:71:6a:3c:88:ca:70:af:92:c0:
         1f:8c:b8:d5:ee:a2:09:2e:20:22:b7:e7:62:cc:db:35:2d:1b:
         93:b4:ad:79:da:22:17:39:3e:ab:c2:97:ac:89:76:e1:43:28:
         48:d8:08:ee:af:b0:31:14:ec:4b:de:68:9f:0e:c0:4a:71:3e:
         89:41:2e:1f:02:78:b2:e7:0c:01:ab:ce:ec:25:cd:ce:a3:e0:
         f4:fc:0b:62:eb:29:a6:c9:ef:b9:e5:d4:78:d3:50:a1:4d:e9:
         60:bb:db:82:1e:96:7e:28:85:8c:2c:10:83:06:b0:83:45:e4:
         21:f7:34:e5:7d:d7:ae:3c:75:02:ea:41:ba:4a:cf:d1:77:64:
         fb:55:bd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org