Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa
File:                     3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa (raw, json)
Hash identifier:          sO7MEJlGB6pFI9GgCJO1ad1AiR2BYKnqR+MmViFBV+8=
Subject key identifier:   E3:55:8C:21:73:7C:BD:B7:4A:9D:65:02:3B:2F:F5:2E:C8:7D:68:BC
Certificate issuer:       /CN=7953D59AEF2A6773CA8535EBECC18720D7980989
Certificate serial:       788E9083AE27F95571D72532FD98E000AEEB1506
Authority key identifier: 79:53:D5:9A:EF:2A:67:73:CA:85:35:EB:EC:C1:87:20:D7:98:09:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7953D59AEF2A6773CA8535EBECC18720D7980989.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa
Signing time:             Thu 06 Mar 2025 19:25:24 +0000
ROA not before:           Thu 06 Mar 2025 19:20:24 +0000
ROA not after:            Thu 05 Mar 2026 19:25:24 +0000
asID:                     266198
IP address blocks:        160.20.168.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8e:90:83:ae:27:f9:55:71:d7:25:32:fd:98:e0:00:ae:eb:15:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7953D59AEF2A6773CA8535EBECC18720D7980989
        Validity
            Not Before: Mar  6 19:20:24 2025 GMT
            Not After : Mar  5 19:25:24 2026 GMT
        Subject: CN=E3558C21737CBDB74A9D65023B2FF52EC87D68BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d6:17:0a:fa:fe:45:71:f8:fd:d2:21:f5:8b:
                    7a:ac:4c:c3:73:e5:4e:e7:4f:22:60:7a:2f:c0:54:
                    7e:c9:f5:35:ed:11:33:83:3c:a5:5d:1a:0d:ba:76:
                    ec:83:40:2c:6c:2d:b3:09:84:e1:72:a7:5f:89:14:
                    fe:aa:c7:c5:c6:31:13:55:fb:95:82:6f:ba:13:3f:
                    0f:0c:40:87:10:96:fb:07:a0:ee:91:e9:80:56:a6:
                    ca:a3:e7:92:ac:e2:36:b0:ec:26:34:a7:31:54:6b:
                    1b:07:48:c7:aa:a6:df:b0:1a:d5:fd:ca:0a:e6:00:
                    86:4c:52:ae:31:18:70:7a:f4:48:13:34:ee:82:05:
                    eb:73:30:9d:59:8e:70:e5:c9:f5:5f:97:5e:80:5d:
                    46:08:0b:c7:af:24:3f:3d:58:10:0e:3a:65:29:24:
                    bf:22:63:76:9a:40:a4:6b:37:ae:bf:89:f3:05:e0:
                    61:7c:c9:ce:ac:97:db:b8:ac:93:8d:fa:54:c3:ac:
                    31:c7:20:50:71:7a:03:b8:21:d0:34:76:35:95:85:
                    fa:88:4d:ed:16:3e:36:d9:69:fe:32:2c:b1:ed:51:
                    bd:29:9c:7f:dc:29:30:7f:19:25:40:d5:fd:06:eb:
                    3f:e2:11:20:5f:54:d4:e2:3b:8f:55:db:8a:ee:01:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:55:8C:21:73:7C:BD:B7:4A:9D:65:02:3B:2F:F5:2E:C8:7D:68:BC
            X509v3 Authority Key Identifier:
                keyid:79:53:D5:9A:EF:2A:67:73:CA:85:35:EB:EC:C1:87:20:D7:98:09:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/7953D59AEF2A6773CA8535EBECC18720D7980989.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7953D59AEF2A6773CA8535EBECC18720D7980989.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ti4v2Z8Hg1nytyb4AnmRhDqT1P5czV88JvBaxGamMjR/1/3136302e32302e3136382e302f32322d3234203d3e20323636313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:23:70:0c:50:47:3c:18:69:44:50:ab:bb:fe:08:c3:2c:70:
         2a:27:0a:cb:89:fb:55:0e:67:db:84:0f:66:9f:0c:44:b1:a8:
         a0:37:75:7e:2c:9f:52:9e:a3:54:df:14:83:2a:65:2f:f2:23:
         5b:37:8f:0c:f4:7a:14:21:13:78:10:04:97:18:6f:fa:33:8a:
         00:73:03:55:4b:e5:49:27:a0:58:4b:a0:74:1d:1a:d1:5d:09:
         49:61:57:de:f7:0c:5c:e2:a5:14:94:56:8f:40:b7:6c:a4:af:
         50:32:4d:af:e2:7b:1d:35:41:42:e5:72:9e:80:80:b9:e0:f3:
         2e:eb:1d:c9:ba:b4:b4:50:61:4e:a9:b0:0e:94:e3:16:86:89:
         4a:22:e0:6b:02:95:a0:56:77:5e:c8:fd:f1:7e:37:ba:35:4f:
         ef:4c:ae:c5:48:74:45:90:95:05:e2:02:48:14:51:af:2d:6e:
         02:6b:e6:53:0f:c5:f3:b8:81:eb:8f:47:fb:dc:1e:ae:f2:e9:
         a4:84:33:05:77:5c:7a:a2:aa:b8:48:c7:af:03:ee:28:04:53:
         c0:a9:58:4e:c9:c8:78:92:1c:97:86:f9:19:73:0c:48:4d:8b:
         57:d4:84:7c:7e:75:8d:f2:01:59:a8:e4:b8:e4:ab:9d:9f:1c:
         14:a8:13:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:35:44 2025 by rpki-client