Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3133312e3232312e37322e302f32322d3234203d3e203532353636.roa
File:                     3133312e3232312e37322e302f32322d3234203d3e203532353636.roa (raw, json)
Hash identifier:          +KyYaLc5XggtgOD2M6mIJUt8C/6B+wsMAToT27Jw9lU=
Subject key identifier:   50:10:A7:24:DE:C4:B0:37:C3:79:F4:50:B1:49:1F:42:12:D4:08:D5
Certificate issuer:       /CN=3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258
Certificate serial:       1F453F05D5ACC5F107F2A703BE4CC1E46E45B8F9
Authority key identifier: 30:30:AC:9F:D9:E2:F2:BC:6E:0B:31:2F:D7:C5:5E:8E:AA:58:42:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3133312e3232312e37322e302f32322d3234203d3e203532353636.roa
Signing time:             Tue 26 Nov 2024 18:40:20 +0000
ROA not before:           Tue 26 Nov 2024 18:35:20 +0000
ROA not after:            Tue 25 Nov 2025 18:40:20 +0000
asID:                     52566
IP address blocks:        131.221.72.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:45:3f:05:d5:ac:c5:f1:07:f2:a7:03:be:4c:c1:e4:6e:45:b8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258
        Validity
            Not Before: Nov 26 18:35:20 2024 GMT
            Not After : Nov 25 18:40:20 2025 GMT
        Subject: CN=5010A724DEC4B037C379F450B1491F4212D408D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:7f:00:ad:67:b1:39:72:76:8b:db:2c:fe:
                    40:9e:6a:1c:f1:1b:f4:48:63:16:88:70:3e:80:6d:
                    e2:7a:8c:ed:b0:82:19:66:8e:2c:ba:ee:f7:ab:89:
                    ef:25:6c:fc:8f:70:34:99:25:59:73:59:e7:f2:38:
                    ec:1c:bb:0d:78:28:30:8c:c8:a3:56:86:ca:7e:6e:
                    11:38:9b:e5:29:c6:01:a6:cd:85:fc:87:b4:49:18:
                    90:12:a7:23:e8:79:10:f4:a6:34:44:03:81:bb:99:
                    17:73:85:78:1d:16:59:6e:41:3b:73:29:15:ae:a1:
                    52:af:dd:29:95:37:6d:c2:3d:c2:b3:eb:45:59:68:
                    dd:51:ef:af:1e:e8:8d:d0:c0:16:83:36:98:2b:c6:
                    2c:45:50:6f:40:d6:0c:00:fe:14:ff:c4:f7:e4:66:
                    5d:b2:21:e8:54:fc:4d:c4:fe:c9:bc:16:a3:cc:74:
                    b6:d5:f5:56:e2:4b:0f:ef:b7:9a:3d:aa:52:eb:5a:
                    7c:19:cc:16:56:15:29:94:0c:1d:ff:74:e1:04:ab:
                    13:22:f8:6f:e4:dd:00:f5:3f:ee:e5:a7:bd:cb:15:
                    71:be:17:e8:9f:43:4a:cf:44:fb:67:9d:a8:da:a6:
                    d9:fc:cf:f5:87:32:9c:6b:fd:2d:e3:71:5e:51:6c:
                    aa:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:10:A7:24:DE:C4:B0:37:C3:79:F4:50:B1:49:1F:42:12:D4:08:D5
            X509v3 Authority Key Identifier:
                keyid:30:30:AC:9F:D9:E2:F2:BC:6E:0B:31:2F:D7:C5:5E:8E:AA:58:42:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3030AC9FD9E2F2BC6E0B312FD7C55E8EAA584258.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HT47CaVGFoaGFGxqrWXNF64aUFikwVAiWSXz7YK94YDr/0/3133312e3232312e37322e302f32322d3234203d3e203532353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:ee:d8:49:e2:ec:ef:12:c7:d6:08:e5:67:db:c5:69:24:22:
         df:9f:04:4c:72:91:ae:95:62:9e:41:31:3a:37:c1:c8:8c:80:
         6d:fa:8f:29:1a:61:68:6d:e5:d3:90:d3:d6:e4:f6:dc:e3:b5:
         a7:86:15:22:60:46:5b:22:05:ba:a6:0d:f6:cb:87:8c:24:1e:
         ff:3f:73:c2:d6:93:a9:52:ba:62:51:39:ce:37:98:db:be:80:
         2c:ef:2b:c6:32:77:36:a5:02:08:4f:fb:61:8b:fd:76:ed:e0:
         fe:9a:6e:37:58:8d:a7:57:10:46:7c:33:8f:e1:48:52:52:8a:
         fa:03:1e:f2:cd:8a:92:02:cf:2e:03:0c:59:98:82:9d:31:45:
         1d:5d:69:75:40:0b:01:94:9a:8a:5c:c3:ab:8e:4a:ff:d5:d4:
         03:5a:04:57:04:f8:28:1e:9f:4f:b0:62:f3:72:bd:b8:2e:a5:
         88:d3:49:c7:92:1b:44:30:d0:a2:11:67:e1:88:4a:ac:58:48:
         be:6e:33:d2:08:aa:e9:45:bc:50:1e:b3:5d:27:f3:6a:68:91:
         a5:e3:96:30:af:a4:aa:0e:dd:04:22:dd:76:27:b6:e7:02:a7:
         6a:20:aa:91:fa:63:df:1f:71:0e:e7:99:77:c2:ca:2c:68:92:
         88:ad:ca:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:29:38 2025 by rpki-client