Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/3136302e32302e3136312e302f32342d3234203d3e20323636313937.roa
File:                     3136302e32302e3136312e302f32342d3234203d3e20323636313937.roa (raw, json)
Hash identifier:          AwXLmpTFlU/qF2fuJ6rwTJyauPY6t4EGZBKy6T2TFyc=
Subject key identifier:   F1:4B:6C:3C:D9:E8:C2:43:6F:88:AD:88:46:BE:A1:CD:5A:00:88:ED
Certificate issuer:       /CN=20462542E7D750389A93D0ECB9BA39FEB7970339
Certificate serial:       495EAD9ECC76B40463405DD7005824D2EFCD09C3
Authority key identifier: 20:46:25:42:E7:D7:50:38:9A:93:D0:EC:B9:BA:39:FE:B7:97:03:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20462542E7D750389A93D0ECB9BA39FEB7970339.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/3136302e32302e3136312e302f32342d3234203d3e20323636313937.roa
Signing time:             Fri 08 Sep 2023 18:42:56 +0000
ROA not before:           Fri 08 Sep 2023 18:37:56 +0000
ROA not after:            Fri 06 Sep 2024 18:42:56 +0000
asID:                     266197
IP address blocks:        160.20.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5e:ad:9e:cc:76:b4:04:63:40:5d:d7:00:58:24:d2:ef:cd:09:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20462542E7D750389A93D0ECB9BA39FEB7970339
        Validity
            Not Before: Sep  8 18:37:56 2023 GMT
            Not After : Sep  6 18:42:56 2024 GMT
        Subject: CN=F14B6C3CD9E8C2436F88AD8846BEA1CD5A0088ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:7b:8f:22:75:79:df:bc:e7:61:ee:10:5d:
                    cf:93:2d:af:f4:9e:b5:a3:9c:78:0a:98:2b:5f:09:
                    31:a1:53:db:55:21:fc:5d:82:9d:d7:ce:39:44:33:
                    a8:49:69:78:cb:e3:5d:87:94:e4:e2:5e:94:e3:84:
                    ba:a1:29:51:cb:0d:d5:17:00:6c:e1:1c:ee:f9:30:
                    6e:65:c4:e0:8a:bc:2e:96:cb:22:ba:34:b5:31:e9:
                    9f:f2:e9:7b:f2:83:5f:91:9a:c5:df:0c:d2:d6:26:
                    c3:10:8a:f8:aa:e5:51:b0:90:97:4b:44:19:5d:1a:
                    3c:5f:a4:33:e8:76:b6:7c:7e:d5:2d:bb:82:9c:ec:
                    aa:67:b2:6c:46:c9:84:31:33:13:6a:35:fc:04:6f:
                    c8:50:ba:88:77:8e:f7:7a:67:e7:a4:9c:6a:90:ec:
                    84:2d:6c:02:2a:97:b6:82:36:78:8f:13:1c:92:c0:
                    38:e7:aa:4a:d4:9a:fb:c7:5b:ff:07:36:df:f5:ed:
                    b3:28:b6:91:d3:78:5d:15:ee:e8:70:ed:7a:1f:9c:
                    16:32:92:38:0a:c0:9c:fa:15:08:e7:fb:c0:7c:92:
                    1a:d4:2f:b2:70:aa:ca:eb:4b:6b:65:3a:2d:32:46:
                    e5:f2:62:7a:58:2f:7c:d9:fc:d4:02:ff:2e:a1:6a:
                    d0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4B:6C:3C:D9:E8:C2:43:6F:88:AD:88:46:BE:A1:CD:5A:00:88:ED
            X509v3 Authority Key Identifier:
                keyid:20:46:25:42:E7:D7:50:38:9A:93:D0:EC:B9:BA:39:FE:B7:97:03:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/20462542E7D750389A93D0ECB9BA39FEB7970339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20462542E7D750389A93D0ECB9BA39FEB7970339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BuaojkNS5LbZnwnzXR9Ms5XARbH7hUFv11jD2DJG97hN/1/3136302e32302e3136312e302f32342d3234203d3e20323636313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:07:3d:00:72:f0:6a:db:7a:bc:d4:37:cc:a3:f0:b2:57:19:
         8c:3a:24:83:38:cc:9b:d8:b2:5f:29:14:c4:cc:3c:62:2e:4b:
         d9:db:66:71:4c:39:7e:c6:2a:4d:7f:5e:ae:cb:ba:81:1b:40:
         99:af:86:51:13:48:01:30:5f:82:bb:ae:9f:dd:f2:61:57:d0:
         38:6d:90:21:cb:60:2b:b0:90:67:be:da:7f:d3:cb:2d:73:40:
         15:ba:e1:71:e4:f2:d7:e9:e1:6e:3c:32:c5:06:91:b1:97:ef:
         ac:1a:37:1f:34:be:54:bb:4c:e9:ba:68:e1:52:f2:cf:2a:72:
         22:52:f7:99:77:f9:e7:fc:b1:e7:ad:ff:01:0e:5d:ea:9e:2a:
         30:4e:0b:1a:b1:0e:ef:f1:7c:41:c2:ad:0f:f4:1b:c9:fe:9a:
         8e:28:41:e0:13:1f:bd:c8:ef:96:3a:5d:f3:7c:de:88:c8:bf:
         8e:b4:b3:f6:07:df:4d:a4:33:c6:d7:24:a4:a2:47:5e:a2:67:
         c5:63:5d:21:ce:2e:d6:8b:eb:4a:77:4f:89:9a:c4:31:7d:58:
         4d:a9:d4:de:dd:6f:42:31:5a:ed:96:36:16:f1:de:57:98:08:
         88:82:07:31:f9:35:e1:67:c7:8f:61:c4:d1:4f:4e:f5:35:70:
         c2:00:99:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:39:04 2025 by rpki-client