Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/3137392e34322e3130302e302f32322d3332203d3e20323731313438.roa
File:                     3137392e34322e3130302e302f32322d3332203d3e20323731313438.roa (raw, json)
Hash identifier:          GUwZXTyPECeCev4p6J5I3dZ6Py548maWbbQ51ekIG90=
Subject key identifier:   05:03:C1:79:92:F5:8E:EA:4F:D5:6E:4D:DF:9C:CB:11:83:54:8F:F3
Certificate issuer:       /CN=50FFBD4C45B6FF76BF514B399F7EE1E379A93CB3
Certificate serial:       32DDCBFDF94C48E8CEF12EC5139C784577CEBA83
Authority key identifier: 50:FF:BD:4C:45:B6:FF:76:BF:51:4B:39:9F:7E:E1:E3:79:A9:3C:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50FFBD4C45B6FF76BF514B399F7EE1E379A93CB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/3137392e34322e3130302e302f32322d3332203d3e20323731313438.roa
Signing time:             Fri 29 Nov 2024 17:33:15 +0000
ROA not before:           Fri 29 Nov 2024 17:28:15 +0000
ROA not after:            Fri 28 Nov 2025 17:33:15 +0000
asID:                     271148
IP address blocks:        179.42.100.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:dd:cb:fd:f9:4c:48:e8:ce:f1:2e:c5:13:9c:78:45:77:ce:ba:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50FFBD4C45B6FF76BF514B399F7EE1E379A93CB3
        Validity
            Not Before: Nov 29 17:28:15 2024 GMT
            Not After : Nov 28 17:33:15 2025 GMT
        Subject: CN=0503C17992F58EEA4FD56E4DDF9CCB1183548FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:54:b4:41:56:74:ff:90:65:8d:ce:25:5a:
                    68:df:e1:c1:51:b8:f1:e8:01:9a:be:df:2f:d4:f9:
                    f6:0a:11:da:5a:13:44:c2:cc:ca:ae:f0:f2:dd:e4:
                    54:bb:21:e3:0f:d7:fe:36:b5:84:c5:2a:fd:62:b9:
                    38:bb:22:09:50:45:83:dd:83:e6:1f:81:e7:04:c1:
                    c2:f7:8f:f7:c4:1a:4e:b7:91:2d:70:0e:6c:c3:25:
                    a7:77:ff:af:f2:ce:f4:93:8c:c5:84:09:a5:0b:61:
                    d1:b1:5b:b4:b7:a4:34:52:96:23:a5:6e:c9:92:a4:
                    d1:11:5e:3a:b4:8a:01:30:69:06:d8:5e:40:40:8b:
                    bc:f7:53:66:cf:05:6a:81:2f:0f:18:35:7d:e9:3d:
                    e5:16:9a:94:94:36:09:54:c7:58:49:9b:98:8b:59:
                    99:62:7a:6f:98:71:a4:35:09:fd:02:2a:f2:12:66:
                    2e:3b:7a:ac:64:75:16:9f:34:3a:dd:5c:9a:4d:d4:
                    d4:9a:c2:85:01:14:fa:fb:3c:12:0a:e4:5a:f1:24:
                    ae:bc:f0:bf:b0:0c:61:21:83:82:93:c1:47:fc:3a:
                    f3:91:f3:ce:82:ca:48:d7:50:f6:b9:76:2b:3a:c4:
                    2e:59:52:e1:2d:fa:2d:31:ba:3e:b6:ca:33:46:15:
                    98:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:03:C1:79:92:F5:8E:EA:4F:D5:6E:4D:DF:9C:CB:11:83:54:8F:F3
            X509v3 Authority Key Identifier:
                keyid:50:FF:BD:4C:45:B6:FF:76:BF:51:4B:39:9F:7E:E1:E3:79:A9:3C:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/50FFBD4C45B6FF76BF514B399F7EE1E379A93CB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50FFBD4C45B6FF76BF514B399F7EE1E379A93CB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7nMNMKnarBCmgMjMt68AibxNdt1bdpnt46aegyt2ozFF/0/3137392e34322e3130302e302f32322d3332203d3e20323731313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:5c:ee:81:f5:4f:b6:d8:0b:4c:5b:83:c8:c2:6c:00:44:d7:
         9d:00:0c:c6:a2:28:bf:f3:d8:aa:41:49:47:2b:78:14:51:b5:
         93:b6:e7:b3:af:b4:a4:1d:57:8f:91:28:47:3a:4d:be:45:11:
         d2:c6:9c:1c:4a:12:64:05:c8:d4:c0:33:89:e3:28:1f:d3:a9:
         d2:df:40:e3:ab:8e:4d:e6:bc:19:a8:c0:99:ad:4b:c2:c9:8a:
         55:1f:8b:db:9d:65:cf:92:43:1c:86:87:d6:d2:6c:a9:6b:88:
         81:58:21:d2:80:53:75:f6:b7:7c:5e:62:39:76:1d:bd:a8:00:
         e4:c1:97:fd:9a:c5:f1:32:de:7b:ff:c6:73:06:18:e4:1f:f9:
         a3:91:5b:3a:b8:1f:26:59:c4:48:58:83:38:7b:cb:bd:e1:af:
         39:9b:47:98:72:a0:10:45:3b:ed:84:d7:ab:91:a0:a9:b9:89:
         b2:44:a6:7f:8e:63:f6:45:cc:7e:c4:b6:7d:75:c4:96:e0:64:
         00:12:b5:a3:51:13:33:07:27:78:ae:e0:42:0e:43:35:bf:d1:
         2e:0e:27:e2:5c:68:03:ee:3b:d1:97:fe:5d:c7:30:55:1d:b5:
         36:dd:e7:8f:b1:71:ba:70:71:47:34:36:b5:17:2a:60:42:c7:
         a3:11:f1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:35:07 2025 by rpki-client