Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa
File:                     3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa (raw, json)
Hash identifier:          dTVML3Vbzw4YnIZhgLmRkiNFb188p4H6d/auTvRDB4A=
Subject key identifier:   6A:9E:A3:DF:0F:84:43:F6:96:6A:3D:AD:0B:6A:97:2D:BF:9D:59:49
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       7C5CDAE4E7DD543D4F55AD1BF142769095CEE56A
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     266535
IP address blocks:        160.238.162.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:5c:da:e4:e7:dd:54:3d:4f:55:ad:1b:f1:42:76:90:95:ce:e5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ac:db:e6:a7:e6:ba:c5:bc:94:8a:fd:29:e2:
                    f2:e1:cb:c0:aa:6d:42:56:8e:db:e6:8d:a4:50:cc:
                    24:64:ef:3f:4c:d4:a0:20:ed:2f:30:7b:d6:e1:8f:
                    16:9b:7d:88:2b:12:1d:ca:f1:f1:d5:83:95:e4:c3:
                    7f:c0:91:66:26:24:66:8d:03:0e:5a:26:52:82:0b:
                    4d:e7:a9:e8:3c:1a:f4:2d:e8:7e:74:dd:f7:95:b0:
                    f0:69:e2:6a:4b:3e:31:9b:14:0e:e0:9d:cc:6d:c6:
                    d1:e2:bc:9c:24:20:cb:86:7f:61:64:77:4d:67:f0:
                    1d:fc:1f:f1:14:c0:c2:bd:ec:48:64:db:da:cc:e1:
                    fa:75:51:c4:c5:9c:8b:3e:84:0e:35:c1:ec:06:0b:
                    00:b8:e3:93:38:54:0e:f9:97:49:46:12:cb:94:bd:
                    4c:0a:84:e3:00:a6:ba:43:1a:f4:46:df:6d:95:62:
                    97:63:9f:39:eb:3f:41:99:6f:8e:d9:86:1c:f6:db:
                    3d:b2:97:e8:12:be:eb:cf:76:31:d0:1e:94:96:09:
                    5a:f8:19:4b:21:5a:38:75:b8:13:1c:9e:8d:18:fe:
                    dc:8b:ee:d7:6b:f7:8b:7f:35:7b:9b:4a:44:f5:3e:
                    8d:15:df:60:56:1f:22:75:68:f7:de:4a:46:e8:1a:
                    78:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9E:A3:DF:0F:84:43:F6:96:6A:3D:AD:0B:6A:97:2D:BF:9D:59:49
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136322e302f32332d3233203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:3f:d0:6d:39:97:14:62:55:ff:3d:4c:f2:0c:c7:9c:97:ec:
         e0:75:92:96:e1:c7:97:f1:bf:96:13:56:09:89:cd:8a:ef:fe:
         bb:66:c0:e3:78:29:7c:cd:31:5a:b7:5b:fe:5f:4e:14:c5:a9:
         9f:87:da:3e:0d:55:e7:df:78:7a:fd:61:8d:42:9d:70:67:1c:
         28:ae:2d:4e:f9:bf:f3:fa:4f:31:1f:6d:60:81:93:5a:41:45:
         e7:71:cb:3a:60:e4:55:fd:bc:53:e3:94:f6:95:3c:65:90:cb:
         cc:74:01:15:aa:5b:cd:d1:6c:46:97:99:16:67:7e:15:b8:35:
         1a:bc:20:b8:38:9b:d1:45:62:63:93:a6:82:66:7a:25:df:7e:
         2c:52:41:7e:bd:60:ab:7e:aa:75:aa:34:77:0d:3c:c0:a5:a2:
         8e:1b:bc:16:95:07:c0:fc:fb:13:6f:89:02:b8:f0:1e:8e:61:
         5e:bd:d5:ab:d8:07:a5:c4:78:d5:5c:ab:c3:de:16:00:ca:c9:
         52:f3:8c:35:01:b2:25:a3:08:86:a2:0f:f2:8a:a7:80:af:3a:
         2c:64:cb:c1:da:35:9f:7f:80:20:ca:77:ae:73:55:86:75:cc:
         4c:ae:f8:65:b0:fd:ff:28:29:9a:d1:1e:bd:5e:70:67:b7:d5:
         90:75:f9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:42:53 2025 by rpki-client