Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/3230312e33332e3136302e302f32302d3234203d3e203533313831.roa
File:                     3230312e33332e3136302e302f32302d3234203d3e203533313831.roa (raw, json)
Hash identifier:          0nMAMnM+PpfLm9sr32tPc/6XEdC6XsLaksV91ttOZ8Y=
Subject key identifier:   7B:8A:2E:77:0E:BD:28:65:D1:8E:3E:40:A4:9A:C8:AB:6F:F2:80:89
Certificate issuer:       /CN=E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB
Certificate serial:       093C993DEB3557639561AB5D507FD3F3BE0DBDBD
Authority key identifier: E3:87:5F:4F:49:41:71:D8:D4:FF:E7:94:B4:2A:8B:5C:ED:1A:6D:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/3230312e33332e3136302e302f32302d3234203d3e203533313831.roa
Signing time:             Thu 06 Mar 2025 10:38:53 +0000
ROA not before:           Thu 06 Mar 2025 10:33:53 +0000
ROA not after:            Thu 05 Mar 2026 10:38:53 +0000
asID:                     53181
IP address blocks:        201.33.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3c:99:3d:eb:35:57:63:95:61:ab:5d:50:7f:d3:f3:be:0d:bd:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB
        Validity
            Not Before: Mar  6 10:33:53 2025 GMT
            Not After : Mar  5 10:38:53 2026 GMT
        Subject: CN=7B8A2E770EBD2865D18E3E40A49AC8AB6FF28089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:90:a7:a4:86:92:da:f2:16:d3:26:cc:a6:c7:
                    b3:6a:6d:ec:04:4f:a7:75:94:75:da:6a:39:1e:cd:
                    59:11:60:a3:1b:ac:62:b1:03:df:c0:03:a1:d6:b4:
                    f4:e2:b4:3d:53:7d:e8:15:2e:10:5b:96:14:f2:3f:
                    a6:06:de:1a:ed:36:b0:d2:f7:2a:cc:f8:9e:13:1b:
                    f2:c5:9f:9c:2e:0e:11:db:dc:1c:ba:c8:a4:07:a9:
                    46:77:bb:a1:5c:1b:c4:38:de:1e:c3:d7:c7:53:1d:
                    d0:2e:c0:5d:8a:3f:05:66:8c:bb:43:0c:8d:60:16:
                    df:bf:a1:09:db:ee:13:25:87:b0:2e:e7:93:04:1b:
                    1d:65:ec:54:82:d5:d8:e2:0d:83:67:1b:8a:26:24:
                    cf:9f:c7:86:7a:78:d7:b2:81:26:1b:8e:85:a1:42:
                    3d:5e:28:96:bb:d1:f9:a6:1f:27:43:b9:7d:21:45:
                    89:9c:76:dd:44:70:5c:ba:e8:41:4b:b6:80:a2:ce:
                    c0:0b:4c:86:60:d3:9b:9e:26:7f:23:d5:2c:c9:9c:
                    6d:d2:4c:fa:56:c2:45:12:97:36:4d:1c:dd:d2:58:
                    a8:a1:7b:f0:51:99:09:b0:f9:8f:27:39:16:b7:16:
                    9d:64:ba:2a:52:e8:56:00:76:77:01:87:bd:32:4d:
                    6f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8A:2E:77:0E:BD:28:65:D1:8E:3E:40:A4:9A:C8:AB:6F:F2:80:89
            X509v3 Authority Key Identifier:
                keyid:E3:87:5F:4F:49:41:71:D8:D4:FF:E7:94:B4:2A:8B:5C:ED:1A:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3875F4F494171D8D4FFE794B42A8B5CED1A6DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EUy4awCm6AHARMdbYE1Z7hsSiyQ6qzQNNCiKs6xDpNd8/2/3230312e33332e3136302e302f32302d3234203d3e203533313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:d5:7f:b7:d7:77:20:a8:10:9c:55:0b:35:94:f3:bc:7d:f0:
         b2:f5:0e:b6:44:2e:40:d1:44:02:bd:d3:fb:73:79:db:ca:92:
         07:99:5e:37:64:a7:13:bb:44:9a:09:ce:39:f5:0e:c2:85:e3:
         78:75:39:1f:09:49:8c:dc:c2:c8:8a:4d:56:81:62:ed:46:4a:
         fd:97:76:6e:43:ac:5b:31:c6:19:cb:3c:53:5b:df:c0:e8:bd:
         bc:c6:78:d8:c5:c6:5d:ad:4b:1f:00:54:93:28:d5:5e:c3:46:
         ea:33:8d:1c:7a:b0:13:9e:20:f4:14:4a:61:84:34:76:c4:30:
         7d:49:8c:bb:b8:09:f2:56:61:3f:0f:1d:93:e7:7d:e7:ab:9a:
         42:5b:26:98:cf:9f:67:00:c4:5b:4e:a5:e5:b2:1d:ee:1f:51:
         c3:09:d3:ba:bc:90:88:b3:a1:b7:71:a7:66:f4:7e:b5:97:19:
         34:2d:6a:ae:f6:40:40:35:ff:ec:c1:80:8b:60:44:5d:28:40:
         e7:73:75:1d:b2:d0:9e:97:c8:32:5b:7c:c5:31:19:a0:06:36:
         19:8d:ef:c6:12:02:0c:c7:21:36:51:25:0c:ef:cf:eb:88:dc:
         c2:f1:84:e6:e1:3c:63:d4:a9:25:9c:01:84:78:53:6d:10:cf:
         66:f6:38:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:17:19 2025 by rpki-client