Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32302d3332203d3e20323632353835.roa
File:                     3230312e35352e3136302e302f32302d3332203d3e20323632353835.roa (raw, json)
Hash identifier:          Lig/o25qifjHXqJbcLJyA/BBq+zUfP623epqHxOUU04=
Subject key identifier:   8E:93:77:8D:27:41:61:99:C1:C8:A3:53:2E:4C:2C:38:65:32:BE:F0
Certificate issuer:       /CN=2A371CF8C86799E154504B6C023890DAD3CAF1BB
Certificate serial:       7A6645D163B0982F1722934B91462B3A4DEA4E52
Authority key identifier: 2A:37:1C:F8:C8:67:99:E1:54:50:4B:6C:02:38:90:DA:D3:CA:F1:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A371CF8C86799E154504B6C023890DAD3CAF1BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32302d3332203d3e20323632353835.roa
Signing time:             Tue 07 May 2024 17:24:46 +0000
ROA not before:           Tue 07 May 2024 17:19:46 +0000
ROA not after:            Tue 06 May 2025 17:24:46 +0000
asID:                     262585
IP address blocks:        201.55.160.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:66:45:d1:63:b0:98:2f:17:22:93:4b:91:46:2b:3a:4d:ea:4e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A371CF8C86799E154504B6C023890DAD3CAF1BB
        Validity
            Not Before: May  7 17:19:46 2024 GMT
            Not After : May  6 17:24:46 2025 GMT
        Subject: CN=8E93778D27416199C1C8A3532E4C2C386532BEF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7e:07:5d:f5:03:35:b5:15:9d:59:81:d4:e7:
                    79:de:af:35:6b:8e:85:a1:23:7d:cc:32:f1:29:bd:
                    df:13:fc:53:c2:00:96:2a:98:cc:8c:f3:fd:bc:0d:
                    4d:31:99:d5:98:c8:1b:ab:26:d9:57:8e:66:8e:e3:
                    01:da:f2:12:f1:c3:65:4d:bb:51:92:c7:96:88:85:
                    fd:4a:f2:6b:75:2c:eb:26:4a:f7:7a:3d:93:fc:aa:
                    7e:6e:cb:84:61:f3:e9:19:21:56:de:68:1d:c7:80:
                    fe:56:a5:1d:11:04:30:ab:a0:f9:07:e7:6b:cb:8c:
                    0d:33:38:b8:ee:d2:89:8f:3d:40:49:38:95:16:9d:
                    d5:9c:8d:77:39:05:18:b8:df:1f:3d:5d:6c:8d:92:
                    3b:88:63:9d:02:13:cb:4a:84:c3:55:f9:58:f6:f4:
                    de:19:03:f1:ce:16:f9:2b:3a:2e:7d:3d:5c:87:f9:
                    a9:19:7b:c8:2a:a0:62:1c:30:38:e9:ea:de:c6:29:
                    a7:3b:34:c0:ee:de:ff:49:02:ac:e5:c4:7d:d4:4b:
                    61:4b:e2:4c:43:be:87:aa:c4:4f:6e:af:9d:eb:0e:
                    67:41:a6:24:30:7d:e9:21:1e:0d:5f:61:5b:ef:7f:
                    8e:62:9f:b1:aa:f5:bd:e4:ca:7d:25:05:db:5c:23:
                    21:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:93:77:8D:27:41:61:99:C1:C8:A3:53:2E:4C:2C:38:65:32:BE:F0
            X509v3 Authority Key Identifier:
                keyid:2A:37:1C:F8:C8:67:99:E1:54:50:4B:6C:02:38:90:DA:D3:CA:F1:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/2A371CF8C86799E154504B6C023890DAD3CAF1BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A371CF8C86799E154504B6C023890DAD3CAF1BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3136302e302f32302d3332203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:c8:9d:0e:86:82:3a:ca:81:5b:ba:05:c4:2c:ca:c2:ce:87:
         53:d8:61:9f:c5:b3:79:c3:1d:b6:e9:6d:bc:b4:22:ef:fa:84:
         f1:34:19:f1:1d:f3:27:7a:14:72:b8:11:07:2d:b3:55:94:43:
         82:06:46:a3:66:f9:e7:ef:72:31:77:aa:56:cc:5f:7b:ab:ad:
         01:26:90:ea:7f:e6:da:2a:5b:89:f0:6f:55:d4:ef:30:58:0e:
         ef:41:79:db:8a:d3:09:c0:90:a8:d6:b5:71:d7:3c:7c:6d:59:
         82:30:c3:f2:cc:b9:4b:55:b7:2d:40:e0:eb:b5:d0:10:ca:ac:
         f0:f7:bf:a3:44:98:95:90:ae:bf:5b:71:14:a2:6c:63:bd:63:
         f6:43:e0:12:3d:eb:75:cc:24:ef:7d:98:43:71:96:51:25:bd:
         39:36:84:a2:91:bb:d5:e4:02:de:cf:96:a7:4f:67:fe:a3:0e:
         d0:c1:71:54:f2:bb:d0:80:71:b6:eb:8f:47:f6:86:e6:e2:5c:
         6f:3f:eb:fe:db:04:ac:ef:90:6d:51:c5:31:f8:71:87:56:36:
         4e:59:76:f5:b9:bb:d3:55:35:4d:c5:5b:03:90:3a:68:59:a2:
         f1:0d:53:dd:2b:59:7a:86:cc:f9:e2:0b:9f:85:1e:bc:49:79:
         07:4b:19:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:38:57 2025 by rpki-client