Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa
File:                     3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa (raw, json)
Hash identifier:          rStpDynGRR2uvmjQkNNftRfa83aI9CFXepHd5ccjIOo=
Subject key identifier:   3F:46:2F:C8:72:92:2D:69:BE:ED:F3:1E:31:67:20:50:4E:95:6B:AE
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       6AA8BED37C33114CDB8F5FFF73F862164F4A0077
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     266535
IP address blocks:        160.238.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a8:be:d3:7c:33:11:4c:db:8f:5f:ff:73:f8:62:16:4f:4a:00:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=3082010A0282010100B2520C0B1375A6A6124CD18152A9B807558C5140746338B16EBB5F066858D0E4F048AFD5DACE012CEE639FFD48E854678349C2F08EADAACC09200963818C64B5B78E5689FDD395728948E04502A2B079AD430572D427DB156180F89DA2960AA359B43F9D101859254CA0C13321CC3285BB8EA5E583BA544BF0FB0FA2BB4A56DAB6C89DDC49FD5907CC1D91079A8536C401C5AD56E01567E800EBEFC2F98C113CB45F78D2583A480C29E8125CFEEA0B03A5C253B12D57DC9273D2A108C273CD872A571C6053C314965063B249AD01D201EDB72305CDCA172666EBBCBC0163447CAE0428C29412A1D95499ADFB0F8E5D31F9950EA00CAEE07DC09B9E38933D15F30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:0c:0b:13:75:a6:a6:12:4c:d1:81:52:a9:
                    b8:07:55:8c:51:40:74:63:38:b1:6e:bb:5f:06:68:
                    58:d0:e4:f0:48:af:d5:da:ce:01:2c:ee:63:9f:fd:
                    48:e8:54:67:83:49:c2:f0:8e:ad:aa:cc:09:20:09:
                    63:81:8c:64:b5:b7:8e:56:89:fd:d3:95:72:89:48:
                    e0:45:02:a2:b0:79:ad:43:05:72:d4:27:db:15:61:
                    80:f8:9d:a2:96:0a:a3:59:b4:3f:9d:10:18:59:25:
                    4c:a0:c1:33:21:cc:32:85:bb:8e:a5:e5:83:ba:54:
                    4b:f0:fb:0f:a2:bb:4a:56:da:b6:c8:9d:dc:49:fd:
                    59:07:cc:1d:91:07:9a:85:36:c4:01:c5:ad:56:e0:
                    15:67:e8:00:eb:ef:c2:f9:8c:11:3c:b4:5f:78:d2:
                    58:3a:48:0c:29:e8:12:5c:fe:ea:0b:03:a5:c2:53:
                    b1:2d:57:dc:92:73:d2:a1:08:c2:73:cd:87:2a:57:
                    1c:60:53:c3:14:96:50:63:b2:49:ad:01:d2:01:ed:
                    b7:23:05:cd:ca:17:26:66:eb:bc:bc:01:63:44:7c:
                    ae:04:28:c2:94:12:a1:d9:54:99:ad:fb:0f:8e:5d:
                    31:f9:95:0e:a0:0c:ae:e0:7d:c0:9b:9e:38:93:3d:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:46:2F:C8:72:92:2D:69:BE:ED:F3:1E:31:67:20:50:4E:95:6B:AE
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136312e302f32342d3234203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:2b:a9:a0:f8:db:7b:f9:15:4c:de:a7:90:bd:9c:dc:7e:0e:
         72:f0:1b:45:61:8f:bf:0c:1b:1e:3b:9e:13:26:f2:18:99:36:
         9d:6c:2e:e1:1f:63:5a:b9:1d:4b:17:62:1c:40:ac:b6:87:3a:
         7e:c0:29:db:11:62:e1:e8:04:15:ac:9e:23:ce:be:61:e2:dc:
         2b:3b:6d:76:88:23:a0:1c:8c:66:a8:4e:0f:d2:9f:52:ba:2c:
         21:a4:e5:73:f8:ce:da:40:4f:6c:62:a3:36:9e:3b:0d:eb:3c:
         5c:ad:22:4e:e2:96:66:4a:68:1b:17:9d:fa:98:9f:3e:b3:5a:
         b7:f7:b8:a3:9d:48:20:d8:d2:c6:63:b0:d7:05:03:27:a3:50:
         58:a5:66:1f:78:97:80:cc:d7:4b:73:97:2a:4d:4c:23:28:b8:
         f3:b7:d3:d3:47:df:67:d9:46:64:82:9b:7c:d0:f1:52:b5:bd:
         c9:01:dd:c3:60:9d:87:38:fd:0e:6f:0e:8d:0b:23:fc:a0:e8:
         1d:8d:0b:c7:96:c6:f0:aa:ec:f8:f2:62:da:f3:b0:02:1a:3f:
         5c:38:71:5e:c3:f6:99:0c:28:e5:a7:de:3f:a2:c4:d2:f3:b5:
         74:17:02:46:5e:34:81:03:52:b4:77:67:8c:89:d9:a0:f3:02:
         89:d3:2e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:19:58 2025 by rpki-client