Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/1/3136302e3233382e3232352e302f32342d3234203d3e20323636353531.roa
File:                     3136302e3233382e3232352e302f32342d3234203d3e20323636353531.roa (raw, json)
Hash identifier:          9dOHIjhbONQV0Ey0WEYnW+7zpgow7TkCIkqVF94x+mg=
Subject key identifier:   00:85:95:1D:13:9A:0D:C4:37:4D:33:53:BF:AE:0E:27:CA:5A:38:66
Certificate issuer:       /CN=31D33802A3979B16E83266873E3E843CFA44989A
Certificate serial:       2F01834DBDBD7C1AE96265AED0B4BD62E031F251
Authority key identifier: 31:D3:38:02:A3:97:9B:16:E8:32:66:87:3E:3E:84:3C:FA:44:98:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31D33802A3979B16E83266873E3E843CFA44989A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/1/3136302e3233382e3232352e302f32342d3234203d3e20323636353531.roa
Signing time:             Thu 09 Feb 2023 18:24:17 +0000
ROA not before:           Thu 09 Feb 2023 18:19:17 +0000
ROA not after:            Thu 08 Feb 2024 18:24:17 +0000
asID:                     266551
IP address blocks:        160.238.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:01:83:4d:bd:bd:7c:1a:e9:62:65:ae:d0:b4:bd:62:e0:31:f2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31D33802A3979B16E83266873E3E843CFA44989A
        Validity
            Not Before: Feb  9 18:19:17 2023 GMT
            Not After : Feb  8 18:24:17 2024 GMT
        Subject: CN=0085951D139A0DC4374D3353BFAE0E27CA5A3866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:cd:5c:41:30:55:e3:72:86:57:72:f6:b0:
                    7f:c9:7a:47:45:82:9d:1c:12:4a:cc:63:db:76:b0:
                    1e:77:80:5b:5e:a9:c8:b0:04:c0:dd:99:5d:f3:43:
                    15:55:5e:79:4f:27:ed:b3:63:58:68:aa:ff:a6:1a:
                    00:94:05:30:1f:21:e8:3d:5f:a7:ba:52:2f:72:ce:
                    0a:40:3c:1f:ec:f9:5f:20:f9:88:e8:57:36:b1:49:
                    5f:c2:aa:a8:fe:e8:5a:5f:1b:c2:38:ed:ae:e7:e9:
                    86:05:f9:e9:48:fe:52:7c:df:0c:37:cb:ca:14:bf:
                    ef:e1:f5:ef:99:82:4a:89:f4:15:00:83:af:a7:46:
                    d3:fa:49:d1:db:9b:60:22:08:86:7d:e5:39:6f:55:
                    70:95:f3:77:61:72:cf:74:43:b3:b4:bd:c6:a2:f6:
                    4a:5e:10:4b:54:5c:b9:00:68:03:4c:03:6b:c1:81:
                    57:d7:47:69:99:6f:9e:23:51:92:51:66:8d:02:5b:
                    96:48:6e:41:c5:2a:69:65:75:ec:dc:16:8d:65:f6:
                    2a:ba:c3:42:6a:5b:da:e1:39:c3:74:48:82:c4:0b:
                    15:f2:68:da:44:90:70:4d:e0:69:09:4a:61:9c:21:
                    a5:02:f7:1a:47:d4:47:94:dd:e8:b3:d1:43:af:a8:
                    1d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:85:95:1D:13:9A:0D:C4:37:4D:33:53:BF:AE:0E:27:CA:5A:38:66
            X509v3 Authority Key Identifier:
                keyid:31:D3:38:02:A3:97:9B:16:E8:32:66:87:3E:3E:84:3C:FA:44:98:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/1/31D33802A3979B16E83266873E3E843CFA44989A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31D33802A3979B16E83266873E3E843CFA44989A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/1/3136302e3233382e3232352e302f32342d3234203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:40:b6:c0:a3:ac:ad:ec:eb:95:b5:12:05:79:62:c9:6e:64:
         72:06:b2:82:14:54:37:22:52:42:94:cc:0a:ad:11:7a:9f:7e:
         97:99:88:e3:6e:b0:83:f3:e0:01:16:9a:d3:c8:a2:a1:64:ba:
         98:af:71:25:bd:a5:55:20:b6:ac:21:70:14:d0:1a:6e:c3:5a:
         c0:0f:70:33:30:e1:94:e2:be:61:ab:4b:dd:ac:97:01:81:c9:
         16:a6:3b:a3:a7:91:ad:d0:7b:ef:35:b2:68:da:df:fb:38:cb:
         38:1b:4d:52:12:ef:1b:bf:08:95:65:74:5e:67:a7:27:f6:72:
         da:d8:cf:0c:2e:9b:77:a9:8a:46:90:42:7a:cf:ac:88:18:6b:
         cb:0a:8d:eb:07:ac:33:64:ef:2d:68:df:ab:8e:56:2d:77:48:
         f7:54:c5:c3:a5:d1:22:2e:01:62:c5:66:f8:23:1a:ed:8e:ab:
         15:51:99:e2:93:e6:27:01:ed:66:e3:d0:79:b3:b0:ce:31:8b:
         e2:91:a2:66:48:e5:7a:65:ab:c4:0c:52:01:f6:2a:c7:2e:cd:
         57:d5:3d:4d:e1:45:cd:76:4f:6f:86:42:79:37:3e:79:86:09:
         bb:37:11:30:6a:de:ab:a5:8b:3e:7d:ea:00:c6:dc:b1:d5:b1:
         eb:39:87:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:17:08 2025 by rpki-client