Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa
File:                     3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa (raw, json)
Hash identifier:          5e4gcNEn5VL2vN7iW7nA5Df4Xfu26IOs2pc5B0p4lXc=
Subject key identifier:   07:57:BA:72:79:BF:1B:19:8D:B3:3C:12:F0:D3:6A:F1:60:C5:19:4C
Certificate issuer:       /CN=CA2ED340034D0368230850867C30E245990118A2
Certificate serial:       6EA28AB1D94F6D9E1EF8C5EA20D88AC5CFD3B183
Authority key identifier: CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     266535
IP address blocks:        160.238.163.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a2:8a:b1:d9:4f:6d:9e:1e:f8:c5:ea:20:d8:8a:c5:cf:d3:b1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2ED340034D0368230850867C30E245990118A2
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:98:b6:c6:ab:78:a0:e4:7c:4c:ce:5a:6c:
                    da:93:8b:90:b3:fa:7d:cc:eb:05:ad:ca:46:1d:96:
                    ab:48:31:32:5a:37:48:fe:e8:97:fc:4d:97:23:bd:
                    e1:d8:6b:ae:21:c3:9b:f4:bc:86:a7:0c:7c:b2:e1:
                    41:05:68:39:4e:3e:36:72:5b:a8:d5:1f:5b:ed:46:
                    ad:e2:5c:37:e4:39:05:d1:e6:23:15:85:e7:31:4e:
                    de:26:13:6b:74:ad:99:99:a3:3f:51:07:95:61:74:
                    8d:72:1c:b5:fe:e8:0a:33:94:59:78:12:46:ef:27:
                    01:09:a7:6e:c0:bb:e6:de:d1:da:03:65:13:01:cf:
                    b5:b9:78:fb:46:3a:89:af:c7:3d:f7:6a:d4:a0:94:
                    77:11:97:17:e6:b9:eb:a2:a6:2a:8b:37:3e:ec:f8:
                    da:b5:03:31:40:1e:99:6c:45:7c:17:d1:58:d9:72:
                    86:2e:f6:8a:ec:ac:e4:87:0c:cb:cc:bd:60:bd:a2:
                    a0:20:88:63:84:99:5f:9d:46:93:69:72:75:98:1c:
                    f2:6f:fb:33:9d:18:25:0b:fa:e6:55:78:09:28:47:
                    1b:5b:d5:93:1c:03:ba:4f:a8:b2:22:a0:c0:df:60:
                    de:b5:7e:50:51:07:c5:5a:77:75:d7:3e:03:8e:92:
                    b9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:57:BA:72:79:BF:1B:19:8D:B3:3C:12:F0:D3:6A:F1:60:C5:19:4C
            X509v3 Authority Key Identifier:
                keyid:CA:2E:D3:40:03:4D:03:68:23:08:50:86:7C:30:E2:45:99:01:18:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/CA2ED340034D0368230850867C30E245990118A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA2ED340034D0368230850867C30E245990118A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/1/3136302e3233382e3136332e302f32342d3234203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:dd:54:9f:ae:27:c8:b8:fb:fb:9b:ef:2c:74:54:78:7d:0d:
         b7:a6:82:e0:8b:f9:2a:d9:2b:6e:45:65:7c:0b:d1:d4:f5:28:
         46:e3:07:65:44:fa:03:02:44:a3:f9:b6:60:a2:1b:50:2b:e3:
         ee:e0:d5:e7:f4:05:e2:8c:84:be:b3:82:f5:d1:24:4c:0c:ae:
         3d:ea:d4:0e:67:d9:34:05:fc:a6:59:fa:eb:c7:6a:4d:6b:bd:
         5f:0a:e4:7b:8d:93:e8:75:8a:5d:73:be:28:15:de:5e:be:27:
         c0:7a:39:6a:be:81:eb:33:f1:58:84:71:97:75:15:b5:b7:13:
         81:03:6c:b5:3b:f8:55:88:59:5e:7f:bc:56:3a:66:86:75:b9:
         50:a3:e2:06:8f:f7:37:ad:04:0d:65:8c:42:0f:75:ce:d9:a7:
         36:30:18:5b:49:e3:52:19:8e:91:af:5e:14:ba:77:65:db:ee:
         79:20:ad:8d:c6:e2:58:19:09:f0:fe:14:05:84:45:27:b9:67:
         88:1a:ad:be:38:31:c9:9c:66:23:58:cc:eb:73:5e:a0:92:db:
         fb:0f:bf:b6:86:6d:5a:12:73:bf:bd:88:1d:7f:23:f4:4b:16:
         18:a3:d0:7d:ef:ef:9c:47:64:26:cc:10:fd:56:79:c7:ef:9f:
         25:76:0b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:31:45 2025 by rpki-client