Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136302e302f32322d3232203d3e20323636313937.roa
File:                     3136302e32302e3136302e302f32322d3232203d3e20323636313937.roa (raw, json)
Hash identifier:          vWw9GrPOmN9S4bPEoRrXd0YMWnq5oS+dL5nbYYqFZc4=
Subject key identifier:   E9:B0:D0:45:CA:D5:BC:A2:FA:DD:DB:88:70:D7:B3:3B:76:4B:D7:9E
Certificate issuer:       /CN=7E640FB6C977B53848A89FF04F8A357EA401F471
Certificate serial:       1DFF1D57513C899236D0B72BF2B8563D5FFD490C
Authority key identifier: 7E:64:0F:B6:C9:77:B5:38:48:A8:9F:F0:4F:8A:35:7E:A4:01:F4:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E640FB6C977B53848A89FF04F8A357EA401F471.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136302e302f32322d3232203d3e20323636313937.roa
Signing time:             Tue 18 Jan 2022 17:09:55 +0000
ROA not before:           Tue 18 Jan 2022 17:04:55 +0000
ROA not after:            Tue 17 Jan 2023 17:09:55 +0000
asID:                     266197
IP address blocks:        160.20.160.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ff:1d:57:51:3c:89:92:36:d0:b7:2b:f2:b8:56:3d:5f:fd:49:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E640FB6C977B53848A89FF04F8A357EA401F471
        Validity
            Not Before: Jan 18 17:04:55 2022 GMT
            Not After : Jan 17 17:09:55 2023 GMT
        Subject: CN=E9B0D045CAD5BCA2FADDDB8870D7B33B764BD79E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:a4:3f:3c:8b:26:1b:90:f0:16:51:63:13:
                    ad:99:12:66:ac:2f:83:a2:0a:c9:9e:d7:94:f7:22:
                    f5:80:60:be:4e:3f:94:96:d2:92:5b:4f:b5:08:08:
                    b1:64:61:b3:4e:a0:1e:6a:92:05:05:df:54:93:2d:
                    b1:4d:1b:14:02:0f:9d:fe:75:62:f5:ee:41:3e:8a:
                    54:0e:24:05:67:7f:23:dd:8c:1a:12:e8:67:1f:d4:
                    72:79:a0:a6:a4:01:b9:25:0c:d8:52:94:96:b7:3d:
                    54:fe:91:54:04:90:24:fc:42:a4:31:ba:a4:1b:ba:
                    7d:6a:7a:42:59:7f:ba:37:68:42:29:ab:e3:5a:e8:
                    0f:c6:3f:0a:14:87:69:8b:93:10:f3:bc:bd:75:de:
                    97:05:88:4e:0a:a8:e9:55:ae:93:f1:58:41:1e:6b:
                    c0:4b:43:4b:9e:9e:80:34:65:c6:ab:d6:ba:46:91:
                    b4:dd:85:22:c8:ff:c2:e6:0c:b4:82:b3:10:f3:e9:
                    36:2a:83:27:d9:31:01:2a:c8:2e:1c:c0:67:7d:a4:
                    b5:6e:99:1c:a6:e1:da:4f:95:7d:6c:1f:f3:64:3e:
                    5b:19:87:b4:da:04:a7:a4:28:47:b4:5c:81:62:65:
                    9d:14:18:f6:f1:a3:e3:56:42:e8:d1:8f:ca:39:d6:
                    0c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B0:D0:45:CA:D5:BC:A2:FA:DD:DB:88:70:D7:B3:3B:76:4B:D7:9E
            X509v3 Authority Key Identifier:
                keyid:7E:64:0F:B6:C9:77:B5:38:48:A8:9F:F0:4F:8A:35:7E:A4:01:F4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/7E640FB6C977B53848A89FF04F8A357EA401F471.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E640FB6C977B53848A89FF04F8A357EA401F471.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136302e302f32322d3232203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:58:50:e7:0b:bf:57:47:ea:0f:2d:0a:08:18:9f:2f:1f:93:
         33:7d:9e:4f:ce:97:9d:5e:40:90:7b:69:e2:23:23:e9:77:9b:
         9a:a3:2f:70:55:dc:07:ad:08:b7:da:fc:55:6e:6b:aa:9b:75:
         b6:75:c1:c8:7b:fa:47:56:c0:0d:8a:19:3c:25:c9:0c:bc:e1:
         7a:97:14:12:af:d3:17:fb:49:5c:ca:77:6c:6d:23:42:d6:7a:
         90:ba:ce:ad:93:54:fa:71:f4:b9:da:a3:1e:13:29:9d:1b:27:
         93:c0:a4:ae:ba:6d:ea:54:d8:a0:d3:67:0d:13:70:9b:03:d7:
         e9:0d:0a:6a:3d:d8:c1:dc:21:85:70:bd:f3:ad:a7:cb:4c:78:
         a0:65:71:dc:39:ba:95:99:91:2c:0e:f1:77:7e:4d:57:90:4a:
         1b:9a:c7:78:fd:b5:cc:c5:4b:39:45:7d:e7:a6:d5:05:e0:25:
         82:98:2c:35:8b:16:ab:aa:05:25:11:f3:6f:7f:b1:96:6a:b6:
         4a:d5:87:6e:03:55:4d:be:d4:1f:03:75:33:fe:a3:be:9a:e0:
         d5:79:30:56:a1:de:d3:4d:73:47:a3:e9:b1:8c:c8:86:27:bd:
         dc:dd:38:1a:ca:67:60:d6:30:f9:51:f6:b0:16:c7:36:aa:28:
         a5:da:e2:62
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHf8dV1E8iZI20Lcr8rhWPV/9SQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U2NDBGQjZDOTc3QjUzODQ4QTg5RkYwNEY4QTM1N0VB
NDAxRjQ3MTAeFw0yMjAxMTgxNzA0NTVaFw0yMzAxMTcxNzA5NTVaMDMxMTAvBgNV
BAMTKEU5QjBEMDQ1Q0FENUJDQTJGQUREREI4ODcwRDdCMzNCNzY0QkQ3OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55qQ/PIsmG5DwFlFjE62ZEmas
L4OiCsme15T3IvWAYL5OP5SW0pJbT7UICLFkYbNOoB5qkgUF31STLbFNGxQCD53+
dWL17kE+ilQOJAVnfyPdjBoS6Gcf1HJ5oKakAbklDNhSlJa3PVT+kVQEkCT8QqQx
uqQbun1qekJZf7o3aEIpq+Na6A/GPwoUh2mLkxDzvL113pcFiE4KqOlVrpPxWEEe
a8BLQ0uenoA0Zcar1rpGkbTdhSLI/8LmDLSCsxDz6TYqgyfZMQEqyC4cwGd9pLVu
mRym4dpPlX1sH/NkPlsZh7TaBKekKEe0XIFiZZ0UGPbxo+NWQujRj8o51gyDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6bDQRcrVvKL63duIcNezO3ZL154wHwYDVR0j
BBgwFoAUfmQPtsl3tThIqJ/wT4o1fqQB9HEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnVhb2prTlM1TGJabnduelhSOU1zNVhBUmJIN2hVRnYxMWpEMkRKRzk3
aE4vMC83RTY0MEZCNkM5NzdCNTM4NDhBODlGRjA0RjhBMzU3RUE0MDFGNDcxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFNjQwRkI2Qzk3N0I1Mzg0
OEE4OUZGMDRGOEEzNTdFQTQwMUY0NzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J1YW9qa05TNUxiWm53bnpYUjlNczVYQVJiSDdoVUZ2MTFqRDJESkc5N2hOLzAv
MzEzNjMwMmUzMjMwMmUzMTM2MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzYzMTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKgFKAwDQYJKoZIhvcNAQELBQADggEBAD9YUOcL
v1dH6g8tCggYny8fkzN9nk/Ol51eQJB7aeIjI+l3m5qjL3BV3AetCLfa/FVua6qb
dbZ1wch7+kdWwA2KGTwlyQy84XqXFBKv0xf7SVzKd2xtI0LWepC6zq2TVPpx9Lna
ox4TKZ0bJ5PApK66bepU2KDTZw0TcJsD1+kNCmo92MHcIYVwvfOtp8tMeKBlcdw5
upWZkSwO8Xd+TVeQShuax3j9tczFSzlFfeem1QXgJYKYLDWLFquqBSUR829/sZZq
tkrVh24DVU2+1B8DdTP+o76a4NV5MFah3tNNc0ej6bGMyIYnvdzdOBrKZ2DWMPlR
9rAWxzaqKKXa4mI=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:57 2025 by rpki-client