Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa
File:                     3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa (raw, json)
Hash identifier:          vVf9xgto8XqfYergF1IU6rSRA3sQ5sZYrkRghkenW58=
Subject key identifier:   6F:17:60:52:47:33:1C:2B:1B:DA:39:59:B8:DA:49:02:76:6A:1E:13
Certificate issuer:       /CN=AAC19A004E25530B8859C605F2862F7AB78E6003
Certificate serial:       2D32CB82A370EC7E68EE1464379E31F4F7DF9DD6
Authority key identifier: AA:C1:9A:00:4E:25:53:0B:88:59:C6:05:F2:86:2F:7A:B7:8E:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa
Signing time:             Wed 30 Apr 2025 18:25:18 +0000
ROA not before:           Wed 30 Apr 2025 18:20:18 +0000
ROA not after:            Wed 29 Apr 2026 18:25:18 +0000
asID:                     270793
IP address blocks:        201.159.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:32:cb:82:a3:70:ec:7e:68:ee:14:64:37:9e:31:f4:f7:df:9d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC19A004E25530B8859C605F2862F7AB78E6003
        Validity
            Not Before: Apr 30 18:20:18 2025 GMT
            Not After : Apr 29 18:25:18 2026 GMT
        Subject: CN=6F17605247331C2B1BDA3959B8DA4902766A1E13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:76:86:db:46:1c:ea:c2:f6:b7:d6:bb:c6:30:
                    cd:6b:d2:58:27:3e:37:5b:b8:9c:94:d6:14:dc:08:
                    c7:b6:c4:6a:ce:7a:05:92:85:7e:5e:d2:ea:89:16:
                    d3:83:3a:69:09:40:31:95:73:1e:99:77:01:3e:81:
                    cc:9c:21:ad:06:7a:24:54:a4:ff:2f:5b:8b:98:fe:
                    dc:a2:a9:d7:ee:c7:e6:59:d7:04:2c:0b:2f:d9:07:
                    75:04:e5:be:8e:7d:ac:35:26:80:38:c9:d2:f8:af:
                    ae:71:1a:a8:34:4b:0a:eb:6e:6b:ee:40:a5:c4:c3:
                    af:69:fb:8c:56:be:d1:8f:9b:76:bb:86:58:3a:a8:
                    32:7b:23:10:7b:a0:4f:72:a0:e3:1d:83:44:6c:e2:
                    ec:ee:ea:b9:7d:82:89:17:28:9b:55:82:15:d7:17:
                    d1:e8:7f:8e:77:20:c4:b2:15:f1:01:f6:6a:c5:37:
                    15:8f:4f:e4:fd:36:3a:a4:89:dc:b6:2b:a2:46:6a:
                    e5:f0:f3:a4:aa:fe:46:1f:f9:04:b0:93:b7:f5:7a:
                    b2:97:92:59:4b:6e:22:0b:5f:5b:3f:c1:de:93:a0:
                    51:9e:6e:07:ef:9f:e9:ed:8f:cd:e7:c6:85:e3:dc:
                    c0:81:12:c5:d8:4c:23:57:90:4f:46:b9:32:eb:c1:
                    87:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:17:60:52:47:33:1C:2B:1B:DA:39:59:B8:DA:49:02:76:6A:1E:13
            X509v3 Authority Key Identifier:
                keyid:AA:C1:9A:00:4E:25:53:0B:88:59:C6:05:F2:86:2F:7A:B7:8E:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/3230312e3135392e3136302e302f32342d3234203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:5f:a7:b8:d2:31:67:46:32:7f:78:01:06:cc:d4:c2:58:82:
         e7:e1:8c:f1:8a:b6:e6:19:99:57:d0:35:7f:df:46:75:14:e1:
         e3:4e:e8:4f:bb:79:82:6d:fa:f1:15:10:a7:06:ac:c6:3b:d5:
         aa:4f:c0:6a:53:c9:5f:8c:dc:62:b2:3e:0d:15:c4:d6:e7:7c:
         af:31:74:a5:b9:0b:4f:b3:92:61:23:e7:37:ed:39:b5:e2:9e:
         2d:c1:08:78:45:13:b6:51:4c:19:fa:6e:a4:1b:ff:85:2e:38:
         f5:2d:20:2d:07:e9:96:2c:e6:31:f2:38:8e:ff:50:9b:9d:be:
         3f:93:46:5d:ee:6e:29:df:dc:28:66:c1:49:a8:50:46:4e:1f:
         82:57:99:5a:9e:e0:99:d0:fc:70:03:a8:49:32:59:fb:15:4c:
         5f:98:48:25:03:3d:7b:56:76:cd:21:d9:ef:5a:73:c8:7f:97:
         c0:bb:51:96:2a:5c:b5:44:f7:65:71:7e:af:22:17:1a:cc:0c:
         84:11:6b:47:3a:98:c2:8e:91:1f:06:0b:4f:9b:69:b9:d7:0e:
         4a:31:42:9e:df:a8:28:d8:c2:fc:6c:46:09:5d:ff:ce:89:eb:
         75:2e:f8:26:a1:4c:51:15:d1:04:83:5b:79:70:84:5e:9a:f0:
         f0:72:7a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:42:40 2025 by rpki-client