Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136322e302f32332d3233203d3e20323636313937.roa
File:                     3136302e32302e3136322e302f32332d3233203d3e20323636313937.roa (raw, json)
Hash identifier:          l3zxRnj3dBX/m3dPzOZE8HDgaMbrksHn6IfNFDbIdPE=
Subject key identifier:   E3:E2:77:5A:1D:B3:51:C2:61:DA:5E:E3:6D:31:A0:CF:BD:FB:E5:E6
Certificate issuer:       /CN=7E640FB6C977B53848A89FF04F8A357EA401F471
Certificate serial:       39FE7FD41CF081AC7D044DE027E3A1DE238918E9
Authority key identifier: 7E:64:0F:B6:C9:77:B5:38:48:A8:9F:F0:4F:8A:35:7E:A4:01:F4:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E640FB6C977B53848A89FF04F8A357EA401F471.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136322e302f32332d3233203d3e20323636313937.roa
Signing time:             Tue 18 Jan 2022 17:09:54 +0000
ROA not before:           Tue 18 Jan 2022 17:04:54 +0000
ROA not after:            Tue 17 Jan 2023 17:09:54 +0000
asID:                     266197
IP address blocks:        160.20.162.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fe:7f:d4:1c:f0:81:ac:7d:04:4d:e0:27:e3:a1:de:23:89:18:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E640FB6C977B53848A89FF04F8A357EA401F471
        Validity
            Not Before: Jan 18 17:04:54 2022 GMT
            Not After : Jan 17 17:09:54 2023 GMT
        Subject: CN=E3E2775A1DB351C261DA5EE36D31A0CFBDFBE5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7e:7e:b4:76:a8:13:d2:98:94:f0:e3:e5:27:
                    37:cb:87:a5:5a:73:6c:02:c3:36:17:3b:38:81:25:
                    a3:9c:db:c5:d7:14:f5:98:ff:a7:2d:0a:71:3c:81:
                    5a:ab:b6:39:4e:ec:2c:92:dd:47:83:8d:02:bd:e6:
                    77:41:17:cc:62:06:b1:ff:e5:1c:16:5a:d2:0f:7e:
                    31:d0:c0:4b:72:af:65:64:a4:70:24:fe:bb:ab:ba:
                    ee:83:c1:b6:79:2e:02:05:f1:ce:ae:91:6c:95:e7:
                    53:1f:cd:4e:57:71:a7:65:73:4e:2e:f7:8c:ba:ff:
                    80:86:d2:96:b8:04:85:2f:c9:c3:d0:ad:cc:55:12:
                    6e:d7:8c:e2:ca:5b:9f:41:55:9d:af:e3:82:f7:c0:
                    a7:16:40:29:03:80:71:e2:6c:44:99:61:f8:bc:85:
                    64:e5:a9:63:55:a3:f7:81:48:c8:a7:22:97:04:90:
                    c2:f2:4d:60:5d:18:fb:72:3c:af:8c:f3:6b:73:31:
                    e5:2c:d5:bc:6e:9e:c4:53:f6:3a:3c:13:cd:3c:bc:
                    e5:23:62:69:d0:54:39:8d:13:79:5d:ab:8d:13:66:
                    a2:3e:32:b7:60:28:f4:4d:c9:5c:24:3c:69:ad:1b:
                    7f:22:5f:4e:27:b6:81:ef:fa:15:86:f3:94:70:ab:
                    e6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E2:77:5A:1D:B3:51:C2:61:DA:5E:E3:6D:31:A0:CF:BD:FB:E5:E6
            X509v3 Authority Key Identifier:
                keyid:7E:64:0F:B6:C9:77:B5:38:48:A8:9F:F0:4F:8A:35:7E:A4:01:F4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/7E640FB6C977B53848A89FF04F8A357EA401F471.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E640FB6C977B53848A89FF04F8A357EA401F471.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/0/3136302e32302e3136322e302f32332d3233203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:1a:3a:dd:38:8c:9a:5b:a5:7f:5b:e9:2f:c5:50:9b:c6:29:
         53:47:3b:4b:0e:ef:af:73:d0:68:7b:b4:e8:f5:f3:80:82:75:
         49:88:42:89:b7:6b:89:1d:70:e1:88:b2:e8:34:cb:d4:ab:da:
         60:e2:74:9b:c3:22:48:a1:55:ec:bb:e3:f8:f7:cf:9f:22:2c:
         50:5d:a6:0c:d1:72:29:81:a3:55:2a:15:fa:2c:50:5f:bc:3f:
         07:f4:d0:1f:34:dc:41:75:9d:4d:f0:a2:68:a0:6a:97:1a:cb:
         5e:7d:fe:1e:86:d6:44:31:9e:b9:79:06:18:ce:ed:b1:31:c4:
         e2:55:ea:9e:d5:4c:66:c8:f4:04:90:fc:cb:ae:0d:f1:b2:93:
         e2:d5:a7:29:7a:f3:e8:56:a1:9e:47:59:e9:40:00:1a:ee:71:
         07:8f:3d:37:fa:de:42:80:fa:f2:d3:6b:42:39:d1:cc:d8:52:
         9d:51:45:d4:75:24:1a:2f:39:c8:40:ba:a3:a6:71:f1:48:23:
         2e:2b:f2:e3:77:e3:f2:30:fc:5e:06:f3:4b:56:02:4c:11:e2:
         31:4f:8f:1d:42:5a:99:17:5b:69:2d:70:43:02:8c:ad:cd:66:
         11:16:16:38:24:13:91:ed:cf:33:bc:5e:6c:61:de:11:f2:05:
         c9:21:42:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:50 2025 by rpki-client