Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/0/3137302e3234352e3136302e302f32322d3234203d3e20323635303433.roa
File:                     3137302e3234352e3136302e302f32322d3234203d3e20323635303433.roa (raw, json)
Hash identifier:          7zyFMTFRvYXW9QO47L4qVK/pG6m2fhjVaD57knDL+JU=
Subject key identifier:   B1:49:11:F7:03:CD:62:87:1F:55:E8:BC:F6:F4:59:96:C1:22:CA:32
Certificate issuer:       /CN=98855966534C807FD11EAA2E5EEE4143F5637538
Certificate serial:       65C8F12EB8E7CBBB425530C2B3AEA3F49432D439
Authority key identifier: 98:85:59:66:53:4C:80:7F:D1:1E:AA:2E:5E:EE:41:43:F5:63:75:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98855966534C807FD11EAA2E5EEE4143F5637538.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/0/3137302e3234352e3136302e302f32322d3234203d3e20323635303433.roa
Signing time:             Mon 18 Dec 2023 11:35:20 +0000
ROA not before:           Mon 18 Dec 2023 11:30:20 +0000
ROA not after:            Mon 16 Dec 2024 11:35:20 +0000
asID:                     265043
IP address blocks:        170.245.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c8:f1:2e:b8:e7:cb:bb:42:55:30:c2:b3:ae:a3:f4:94:32:d4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98855966534C807FD11EAA2E5EEE4143F5637538
        Validity
            Not Before: Dec 18 11:30:20 2023 GMT
            Not After : Dec 16 11:35:20 2024 GMT
        Subject: CN=B14911F703CD62871F55E8BCF6F45996C122CA32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e4:61:af:6a:42:ca:37:22:4a:9a:6d:57:04:
                    1d:d3:c8:cc:ed:ef:a0:55:e3:24:9b:0f:1f:c8:fa:
                    d7:d3:98:89:ab:20:78:be:64:ed:be:a5:a7:88:d2:
                    87:ce:67:0c:fe:3a:7c:dd:2f:6f:2e:a1:73:4d:aa:
                    82:15:d5:78:3c:2c:5e:25:0f:a4:9d:55:f8:34:08:
                    4e:88:eb:b2:c4:ef:7e:28:3f:0a:78:d5:dc:47:d8:
                    74:34:00:de:f1:32:33:30:f8:81:49:19:ea:d8:4e:
                    c7:be:02:5a:15:ff:68:60:75:18:5c:8a:9d:bc:3c:
                    bc:8f:6a:35:9a:2d:9c:4d:19:b8:07:67:c1:96:8e:
                    f0:62:3b:bb:d2:f9:c0:e2:c2:a2:50:5d:a6:2e:a8:
                    ee:fd:80:19:5c:dc:2b:7b:10:cc:55:7d:53:63:43:
                    1c:ae:47:ed:11:b7:11:f3:47:ba:59:fe:4f:24:50:
                    f6:bf:0b:8f:b2:2e:9d:4b:a3:3a:cf:b6:08:06:e1:
                    07:b8:5d:21:5d:cf:f9:a3:46:cf:56:c1:7a:8b:72:
                    24:d7:f3:ea:7d:7d:27:5d:86:eb:d5:cf:a0:d3:8e:
                    75:bc:44:49:cc:22:f4:7d:61:c7:fe:9c:87:ce:1e:
                    c6:88:60:bf:dc:37:3c:bf:15:ae:81:3a:9b:80:41:
                    35:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:49:11:F7:03:CD:62:87:1F:55:E8:BC:F6:F4:59:96:C1:22:CA:32
            X509v3 Authority Key Identifier:
                keyid:98:85:59:66:53:4C:80:7F:D1:1E:AA:2E:5E:EE:41:43:F5:63:75:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/0/98855966534C807FD11EAA2E5EEE4143F5637538.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98855966534C807FD11EAA2E5EEE4143F5637538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PrF8WEgUmzu5e63DZTcTWnxGjDmbe8HXTBrorxuK7ff/0/3137302e3234352e3136302e302f32322d3234203d3e20323635303433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:a1:2a:d1:d6:51:24:6b:f5:b2:b3:ca:05:5e:8c:97:1e:47:
         34:9a:c8:1e:bd:b4:4e:0d:a5:fe:bd:4a:3a:0c:9b:02:db:b4:
         15:08:a6:76:3b:e2:5b:6a:c6:e9:45:b2:59:52:5a:77:28:bd:
         e6:b6:f2:54:b3:ee:c7:96:09:06:fb:f0:e9:19:8d:f6:e9:17:
         0b:12:a4:c1:18:e3:a3:a6:4c:7d:55:fe:f1:20:48:d3:7a:c2:
         59:0d:0d:7c:6c:3d:8e:58:7e:c8:1f:dc:22:39:7e:d0:d7:3b:
         66:aa:9a:a1:e6:6f:6f:55:6b:fe:21:86:52:23:02:1f:86:71:
         cf:10:e0:f4:87:c0:9b:65:79:17:9b:58:e0:f8:ae:03:39:61:
         34:83:de:8c:77:af:af:03:64:fb:f4:75:86:a4:92:85:fb:d3:
         9a:2e:ae:eb:72:08:c3:62:47:56:06:99:30:15:2e:5d:47:ca:
         a1:76:13:89:9f:ba:58:e5:49:c8:37:55:4d:f2:3c:cb:28:ee:
         16:24:88:11:ea:21:77:94:e0:8d:9d:8e:a4:46:c8:83:af:5a:
         ea:c6:4e:67:76:61:a3:db:8e:f0:94:a8:b7:6d:d1:60:83:99:
         ee:53:e4:c3:55:e6:67:dc:72:72:23:a1:9d:e9:36:ba:d0:2b:
         c0:99:65:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:33 2024 by rpki-client on console.sobornost.net