Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/3136302e32302e3138302e302f32322d3234203d3e20323636323030.roa
File:                     3136302e32302e3138302e302f32322d3234203d3e20323636323030.roa (raw, json)
Hash identifier:          mJMpCBXV9y9kZYhHcsLGRwoLHPbjmHBLhgsZjMyBy9Q=
Subject key identifier:   CB:C4:EB:29:7B:76:73:36:8F:0A:6A:A2:73:6F:F7:9B:79:84:DD:5B
Certificate issuer:       /CN=2001EDAB33F718E926EE051A5D4EEFC09551D26A
Certificate serial:       0215308F90D5EB5E21310B067A7EDF525E02A564
Authority key identifier: 20:01:ED:AB:33:F7:18:E9:26:EE:05:1A:5D:4E:EF:C0:95:51:D2:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2001EDAB33F718E926EE051A5D4EEFC09551D26A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/3136302e32302e3138302e302f32322d3234203d3e20323636323030.roa
Signing time:             Tue 18 Mar 2025 17:04:48 +0000
ROA not before:           Tue 18 Mar 2025 16:59:48 +0000
ROA not after:            Tue 17 Mar 2026 17:04:48 +0000
asID:                     266200
IP address blocks:        160.20.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:15:30:8f:90:d5:eb:5e:21:31:0b:06:7a:7e:df:52:5e:02:a5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2001EDAB33F718E926EE051A5D4EEFC09551D26A
        Validity
            Not Before: Mar 18 16:59:48 2025 GMT
            Not After : Mar 17 17:04:48 2026 GMT
        Subject: CN=CBC4EB297B7673368F0A6AA2736FF79B7984DD5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4a:a6:c9:0a:11:76:c4:58:68:42:09:e0:56:
                    45:70:67:46:30:42:fe:67:18:34:cc:ea:ed:56:af:
                    41:72:9e:70:ef:fb:53:73:80:14:68:dc:cd:85:c5:
                    9c:25:1b:b4:81:40:22:52:25:ff:f6:c7:4a:8c:0c:
                    ce:f2:b1:ef:8b:fe:32:72:f3:c4:7b:0e:04:a8:75:
                    68:94:96:8d:46:66:e5:d4:b0:51:dd:ba:a7:be:3f:
                    32:4e:c7:e9:97:d1:45:a0:4f:29:9a:cf:45:2e:f7:
                    4d:b0:39:37:4a:6d:08:03:67:ee:ef:ad:f1:f5:db:
                    2d:1e:3e:45:18:23:29:a8:a5:67:45:89:b0:48:e6:
                    c1:ae:e0:d9:e9:67:d7:0d:68:69:ac:f7:f1:27:0e:
                    89:b9:5c:d1:28:3f:01:3f:f3:4f:7d:3a:7f:9b:bc:
                    80:b9:7e:22:fa:fe:b6:7e:ba:c8:4a:66:dc:7b:ef:
                    d6:d2:c0:e5:6d:33:dc:4b:dc:4c:cd:ac:43:f0:da:
                    5e:84:bd:f8:62:6b:44:b2:0b:97:5e:5a:98:05:2a:
                    ee:ab:c6:32:a9:33:9e:fe:c0:38:04:2e:53:99:4d:
                    08:76:c2:08:fa:b1:3d:f8:6b:06:7d:52:8b:68:04:
                    c7:92:f8:e6:74:ed:36:60:aa:97:05:04:11:2a:d1:
                    34:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C4:EB:29:7B:76:73:36:8F:0A:6A:A2:73:6F:F7:9B:79:84:DD:5B
            X509v3 Authority Key Identifier:
                keyid:20:01:ED:AB:33:F7:18:E9:26:EE:05:1A:5D:4E:EF:C0:95:51:D2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/2001EDAB33F718E926EE051A5D4EEFC09551D26A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2001EDAB33F718E926EE051A5D4EEFC09551D26A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7wPLxobGZUuKfUKstopvBiDWqUNaTqH6cheqLBkqpa1/0/3136302e32302e3138302e302f32322d3234203d3e20323636323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:53:74:56:06:ad:23:fa:c8:39:0f:b8:d1:9a:fb:cc:07:18:
         e5:2f:bf:36:78:40:37:ec:b7:7c:f7:a1:04:ea:3c:e3:16:91:
         bf:fd:13:bf:70:84:8d:76:d6:ea:ae:ab:a9:3a:9a:bc:89:15:
         05:d5:f2:3a:89:09:06:bb:44:4f:85:1c:28:a2:bf:c8:93:7a:
         0f:e3:41:16:bc:9e:2b:5e:0d:36:7a:da:17:ff:77:ef:c6:b9:
         d6:7d:70:63:1d:d7:ad:26:a5:e0:2c:3a:c9:32:61:2f:c5:71:
         1a:e7:9c:52:f1:1b:5b:0c:b2:b5:b0:fc:79:52:2c:3d:1c:d9:
         0b:c4:6e:a5:9f:51:da:ea:49:8a:97:00:96:9e:b6:16:4a:5f:
         88:e6:61:8b:8a:91:78:a4:68:a8:04:81:d7:1d:7b:9d:38:07:
         ea:95:62:41:cb:77:a2:be:48:f5:5d:97:2b:ef:5b:81:32:55:
         5a:27:1d:07:17:a4:2e:b1:c2:18:77:23:fe:41:14:6d:f8:bb:
         ee:84:4a:4f:f5:94:18:90:f6:06:38:a4:22:d8:db:60:8a:b9:
         86:33:1e:ba:f5:68:84:be:fa:ee:de:20:8c:63:a3:4c:ba:4e:
         8d:a4:ea:bd:92:f9:27:b5:8f:a3:f0:9b:5f:8b:6d:72:e4:c4:
         2d:fe:ad:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:11:24 2025 by rpki-client