Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AgZ3hsXcRimgdxa4AYHgkUE8tW9cKrJAEb5Z5V27w1zG/0/3136302e3233382e3230382e302f32322d3332203d3e20323636353639.roa
File:                     3136302e3233382e3230382e302f32322d3332203d3e20323636353639.roa (raw, json)
Hash identifier:          FzUBvyZYuXjdWuav0K1y6f64mz1GOQ5y31RxDIBBVJc=
Subject key identifier:   6C:86:A9:58:68:E2:FE:CB:C1:30:A2:9B:8D:CB:6D:5B:2A:92:88:59
Certificate issuer:       /CN=C7BFADA3609A29270674EEB62E799A206B27C831
Certificate serial:       55C15CC0B591348AA41B919A548216C083EEFFA5
Authority key identifier: C7:BF:AD:A3:60:9A:29:27:06:74:EE:B6:2E:79:9A:20:6B:27:C8:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7BFADA3609A29270674EEB62E799A206B27C831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AgZ3hsXcRimgdxa4AYHgkUE8tW9cKrJAEb5Z5V27w1zG/0/3136302e3233382e3230382e302f32322d3332203d3e20323636353639.roa
Signing time:             Fri 12 May 2023 00:16:29 +0000
ROA not before:           Fri 12 May 2023 00:11:29 +0000
ROA not after:            Fri 10 May 2024 00:16:29 +0000
asID:                     266569
IP address blocks:        160.238.208.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c1:5c:c0:b5:91:34:8a:a4:1b:91:9a:54:82:16:c0:83:ee:ff:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7BFADA3609A29270674EEB62E799A206B27C831
        Validity
            Not Before: May 12 00:11:29 2023 GMT
            Not After : May 10 00:16:29 2024 GMT
        Subject: CN=6C86A95868E2FECBC130A29B8DCB6D5B2A928859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:85:7b:21:51:1d:c0:25:b2:0f:a8:94:34:58:
                    69:11:08:f2:5c:ac:a0:f7:be:b7:f3:44:93:a5:ae:
                    65:e4:b2:87:90:8d:c8:b3:70:2d:3b:24:d0:fa:d6:
                    91:15:70:77:72:dc:5a:8c:01:8e:87:46:ac:83:f6:
                    af:ae:6d:24:49:74:1a:16:55:4e:30:c0:66:b9:25:
                    45:d2:db:0d:97:c3:19:8b:77:31:39:ab:19:50:91:
                    13:f3:64:b1:3c:4f:3b:a3:b9:73:31:a9:5a:b4:5a:
                    0c:06:a5:0a:04:10:97:41:71:2f:96:da:34:0e:bb:
                    a9:65:3b:e8:8c:6b:28:75:c7:53:59:de:c5:0d:b4:
                    c6:45:d5:0a:75:ad:f5:f1:e6:74:62:0a:3d:bd:4e:
                    a2:bf:42:95:e8:7c:e2:19:c9:2b:a8:e1:eb:6e:d3:
                    03:a7:0c:d5:45:c5:2c:cc:d2:28:60:f4:89:56:bd:
                    0c:6d:d8:6b:02:1a:bd:73:c5:48:3d:ab:8d:6a:b5:
                    e7:cf:09:7f:56:21:7e:04:25:df:b6:69:0a:06:91:
                    04:9e:fc:7c:43:51:a8:2f:1c:75:68:2d:03:56:10:
                    75:fc:8c:d3:e1:f0:c6:73:09:d5:81:d0:a4:bb:f3:
                    df:46:35:63:74:cd:73:b6:c7:4d:12:93:77:92:be:
                    d2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:86:A9:58:68:E2:FE:CB:C1:30:A2:9B:8D:CB:6D:5B:2A:92:88:59
            X509v3 Authority Key Identifier:
                keyid:C7:BF:AD:A3:60:9A:29:27:06:74:EE:B6:2E:79:9A:20:6B:27:C8:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AgZ3hsXcRimgdxa4AYHgkUE8tW9cKrJAEb5Z5V27w1zG/0/C7BFADA3609A29270674EEB62E799A206B27C831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C7BFADA3609A29270674EEB62E799A206B27C831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AgZ3hsXcRimgdxa4AYHgkUE8tW9cKrJAEb5Z5V27w1zG/0/3136302e3233382e3230382e302f32322d3332203d3e20323636353639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:9e:5c:5f:bc:d9:24:f1:73:47:76:e7:c4:25:9b:c2:97:a6:
         3d:11:17:90:a1:1b:ff:04:ca:2b:86:4c:36:93:61:76:52:be:
         38:ab:28:52:2e:c9:2f:30:95:c5:7e:36:37:90:1a:f7:ba:a4:
         da:a9:bb:b1:4f:e7:46:c7:fe:99:03:da:07:ee:51:e6:bc:67:
         b9:ac:b0:04:0d:38:bb:14:96:ea:d8:bb:85:ba:07:26:30:12:
         b1:ce:fe:ff:2e:6d:ae:95:c8:08:a0:9b:e5:a5:f7:de:cc:a0:
         48:b7:33:32:b3:0e:88:64:d2:7c:5d:40:60:c0:3d:84:1d:a1:
         01:79:fd:d5:76:22:d5:24:41:d7:4a:89:d0:bf:c1:2a:ad:07:
         99:ce:97:26:d8:97:44:ee:a2:d9:45:73:a7:db:13:10:1d:07:
         34:1d:a4:a9:f8:a1:47:e0:f3:84:d5:01:16:42:2e:97:e9:bf:
         ae:b7:f0:1d:f9:0c:6b:6e:ba:48:a2:bb:ec:41:33:8d:dd:fe:
         21:db:05:90:0c:dd:ec:67:8c:ec:82:0a:32:27:3d:b3:3c:27:
         dd:f1:d2:65:82:d9:17:7a:d2:22:3a:b8:3e:ed:78:e8:01:f3:
         32:3f:d3:80:b1:74:41:09:80:19:a7:d0:b3:ad:a7:17:7a:c7:
         4d:28:42:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:59:37 2025 by rpki-client