Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/1/3136302e3233382e3232362e302f32342d3234203d3e20323636353531.roa
File:                     3136302e3233382e3232362e302f32342d3234203d3e20323636353531.roa (raw, json)
Hash identifier:          BSVgNFnT3PN5cff5Gp6IYMGUHR3mHr8ifj39Tp4KdEg=
Subject key identifier:   EF:03:C3:50:B2:C9:66:30:39:48:0E:3E:14:F6:60:BB:C8:0C:77:94
Certificate issuer:       /CN=31D33802A3979B16E83266873E3E843CFA44989A
Certificate serial:       3B85C28B60560971A880B29C4C83C6B9529D9D1A
Authority key identifier: 31:D3:38:02:A3:97:9B:16:E8:32:66:87:3E:3E:84:3C:FA:44:98:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31D33802A3979B16E83266873E3E843CFA44989A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/1/3136302e3233382e3232362e302f32342d3234203d3e20323636353531.roa
Signing time:             Mon 05 Dec 2022 12:24:25 +0000
ROA not before:           Mon 05 Dec 2022 12:19:25 +0000
ROA not after:            Mon 04 Dec 2023 12:24:25 +0000
asID:                     266551
IP address blocks:        160.238.226.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:85:c2:8b:60:56:09:71:a8:80:b2:9c:4c:83:c6:b9:52:9d:9d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31D33802A3979B16E83266873E3E843CFA44989A
        Validity
            Not Before: Dec  5 12:19:25 2022 GMT
            Not After : Dec  4 12:24:25 2023 GMT
        Subject: CN=EF03C350B2C9663039480E3E14F660BBC80C7794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:29:d7:98:bd:b5:37:b7:ad:29:d2:11:fa:56:
                    bb:b0:74:a8:74:dd:0a:c8:56:0d:75:8f:5c:34:7a:
                    0b:de:b9:ca:01:ff:d4:45:2e:9d:17:af:81:94:11:
                    70:b2:2f:3f:b6:82:52:2c:a5:d8:3a:19:93:18:e5:
                    f6:aa:07:17:6d:84:0f:17:62:73:4a:ba:89:e6:d4:
                    e2:56:34:42:0c:08:81:8e:8a:aa:65:59:8e:32:31:
                    a9:b9:74:ef:18:78:35:af:05:fe:c5:42:4d:9b:2f:
                    ec:b7:5f:de:61:76:99:d4:f0:52:73:52:bc:42:0d:
                    06:81:05:72:51:28:b8:8d:73:fb:4c:dd:a7:fb:88:
                    87:28:a8:4d:44:f6:40:0d:a0:e3:6f:10:e1:4e:76:
                    9d:23:7d:f6:eb:ae:18:f0:98:b6:3b:eb:ec:2c:cf:
                    9b:93:44:c4:d0:f7:17:ec:dc:06:ea:9c:f4:11:01:
                    0c:30:98:eb:f4:e3:d2:9c:46:af:65:74:99:f4:f3:
                    45:74:c8:e5:0b:af:4c:bd:92:0e:1a:6f:2d:6d:04:
                    82:b7:13:2d:e4:5f:cb:3f:9c:36:3b:44:2d:55:b9:
                    1e:58:d4:94:2e:17:24:9e:9a:17:6d:de:c8:ee:86:
                    76:cd:41:0f:81:51:cc:a2:43:85:6d:6e:c9:8c:35:
                    30:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:03:C3:50:B2:C9:66:30:39:48:0E:3E:14:F6:60:BB:C8:0C:77:94
            X509v3 Authority Key Identifier:
                keyid:31:D3:38:02:A3:97:9B:16:E8:32:66:87:3E:3E:84:3C:FA:44:98:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/1/31D33802A3979B16E83266873E3E843CFA44989A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31D33802A3979B16E83266873E3E843CFA44989A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WasHZ9MmMGw4dYcqHGhNWFHam8UWQe5BufnG4LJDp2j/1/3136302e3233382e3232362e302f32342d3234203d3e20323636353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:3d:00:c9:01:cc:47:de:7e:21:fb:60:91:6b:72:df:2c:8f:
         d4:e8:66:16:58:97:08:af:bf:b5:1b:02:c8:b5:59:db:f4:15:
         4e:81:47:d8:e1:50:9b:25:e9:09:d7:ec:1a:00:93:01:67:eb:
         8a:16:22:cd:54:2e:35:da:a5:bc:7b:eb:c5:c8:91:72:c2:42:
         8c:b8:8e:be:f3:68:a6:08:b0:4d:7c:23:fe:65:ee:09:ab:6e:
         75:eb:5b:1b:ad:88:28:0c:43:77:12:6b:90:74:90:db:01:38:
         3d:c5:66:9d:cb:cd:c5:de:44:15:43:25:83:bd:cb:90:f5:91:
         b0:9f:c7:64:bb:60:ef:8a:d3:09:fe:b4:0b:ec:7d:c9:14:19:
         a9:83:8a:fc:70:5c:92:05:f8:08:f8:2a:4b:3a:42:18:bc:f8:
         7e:59:65:47:8f:43:a9:8d:19:fa:5a:92:be:a5:39:e3:25:cf:
         1b:77:07:9f:59:3f:2e:df:37:c6:be:cf:7d:6d:e2:06:38:fa:
         2c:a3:5b:f9:92:6d:48:2b:49:45:70:b0:5c:90:b3:1e:37:98:
         c2:46:68:0d:d7:f1:a4:44:92:45:87:b5:cc:58:22:05:80:c8:
         13:a0:d4:6a:a2:db:c5:8c:52:67:10:e6:35:3b:64:c5:e9:e1:
         f2:c5:4a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:07 2025 by rpki-client