Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136302e302f32342d3234203d3e20323636313937.roa
File:                     3136302e32302e3136302e302f32342d3234203d3e20323636313937.roa (raw, json)
Hash identifier:          EmCaEkbfcfKYIDckzgbpKVoZyVO3ARo2mvGbPLKvDa8=
Subject key identifier:   EA:99:D0:09:5A:2B:7F:BF:E3:25:45:B4:DE:DB:66:76:85:4D:68:BA
Certificate issuer:       /CN=7E640FB6C977B53848A89FF04F8A357EA401F471
Certificate serial:       4FB330822241669C4D095A78C297847FF09C10B9
Authority key identifier: 7E:64:0F:B6:C9:77:B5:38:48:A8:9F:F0:4F:8A:35:7E:A4:01:F4:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E640FB6C977B53848A89FF04F8A357EA401F471.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136302e302f32342d3234203d3e20323636313937.roa
Signing time:             Tue 18 Jan 2022 17:09:55 +0000
ROA not before:           Tue 18 Jan 2022 17:04:55 +0000
ROA not after:            Tue 17 Jan 2023 17:09:55 +0000
asID:                     266197
IP address blocks:        160.20.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b3:30:82:22:41:66:9c:4d:09:5a:78:c2:97:84:7f:f0:9c:10:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E640FB6C977B53848A89FF04F8A357EA401F471
        Validity
            Not Before: Jan 18 17:04:55 2022 GMT
            Not After : Jan 17 17:09:55 2023 GMT
        Subject: CN=EA99D0095A2B7FBFE32545B4DEDB6676854D68BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:fb:d8:8c:cd:0f:a0:50:2e:95:38:90:1c:
                    63:a2:b4:b2:78:ef:fd:1d:7d:e1:83:7e:b0:29:4b:
                    b9:35:b2:b4:6d:8c:d2:f9:59:ca:5a:82:a8:e0:1d:
                    7e:4a:e6:48:d2:b7:c2:4a:06:6c:98:1c:5e:95:81:
                    56:a8:87:a9:8a:92:c7:55:41:07:66:65:ca:c8:24:
                    8b:87:42:10:87:a8:17:39:ff:01:3b:e5:2a:23:a9:
                    bf:ab:bb:88:ec:20:90:21:c8:2c:f4:a2:84:74:02:
                    a1:86:9b:99:e6:02:5d:03:b6:df:ff:5a:f7:72:df:
                    f2:d9:1d:27:78:de:70:78:33:1f:12:e0:b6:af:8f:
                    89:48:14:cf:f1:33:b0:7b:78:bc:cb:88:a8:8b:08:
                    31:e5:fa:d2:7f:9b:ec:15:ee:47:04:0d:f8:cc:6a:
                    3c:d9:8e:6b:6e:69:d7:79:07:a5:7a:5e:ca:3e:57:
                    9e:9f:15:dd:e9:8d:82:f6:df:b5:c6:a9:93:d1:1e:
                    59:fe:ca:9e:05:62:02:73:56:95:9d:28:3d:d0:cc:
                    46:54:95:3b:b7:58:70:3f:17:15:de:d9:37:05:b3:
                    4d:14:16:31:06:c2:9d:c0:d0:9d:c3:8c:b4:1d:db:
                    d9:d6:9e:09:da:81:d8:de:c0:72:ed:8b:f8:86:cc:
                    e1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:99:D0:09:5A:2B:7F:BF:E3:25:45:B4:DE:DB:66:76:85:4D:68:BA
            X509v3 Authority Key Identifier:
                keyid:7E:64:0F:B6:C9:77:B5:38:48:A8:9F:F0:4F:8A:35:7E:A4:01:F4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/7E640FB6C977B53848A89FF04F8A357EA401F471.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E640FB6C977B53848A89FF04F8A357EA401F471.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136302e302f32342d3234203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:e2:2e:6e:ee:0a:19:e3:2b:bf:36:28:2d:71:d4:43:2e:0e:
         11:e4:f6:f4:4b:03:a3:b4:cf:72:29:5e:c7:fc:ae:1d:71:c6:
         19:9d:db:ff:05:2e:12:30:0e:47:59:bc:59:b9:9d:05:82:ac:
         90:0d:d0:d6:97:71:62:7f:dd:da:65:2c:52:08:0a:53:d8:09:
         bb:9b:96:c7:2f:08:63:ff:71:b1:08:2c:89:59:7e:83:62:39:
         46:68:7e:20:a7:8d:f8:43:8e:74:72:7f:2b:dc:78:f2:93:0c:
         d8:17:eb:e2:95:5b:5b:3f:20:b2:2e:37:9a:f7:ad:2e:d6:73:
         5a:3f:d0:38:44:6f:11:80:35:fa:dd:16:e2:f1:12:f9:12:29:
         5b:ae:3c:12:eb:39:fa:69:fb:23:10:70:f0:d4:32:3d:0f:63:
         85:e2:15:1d:d8:34:49:e5:25:79:c7:ab:1e:87:aa:bb:f3:09:
         97:97:05:b6:c6:aa:61:3a:b3:0e:6a:d4:6e:ee:6f:65:f0:5b:
         e0:e2:1f:a3:89:b0:88:46:c8:e1:70:b2:15:cc:96:03:c7:77:
         e9:b7:2f:20:eb:23:2f:b9:78:aa:61:25:e0:45:c7:6c:f7:64:
         24:36:06:cb:7b:04:c1:9f:03:91:94:96:aa:9c:4a:61:fd:62:
         95:16:db:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:33:19 2025 by rpki-client