Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31372e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e31372e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          elcMj2vHc11OxAoYtgmOXCmSOiIGqvW/3st5jbUs6Mw=
Subject key identifier:   75:D7:9B:CE:7F:8E:A8:44:45:A9:1B:7C:67:D2:BF:26:23:D2:FB:52
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       43995992C819AADDD938CF19D53B26F09F98C6D4
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31372e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:42:55 +0000
ROA not before:           Wed 31 Jul 2024 13:37:55 +0000
ROA not after:            Wed 30 Jul 2025 13:42:55 +0000
asID:                     11921
IP address blocks:        201.49.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:99:59:92:c8:19:aa:dd:d9:38:cf:19:d5:3b:26:f0:9f:98:c6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:37:55 2024 GMT
            Not After : Jul 30 13:42:55 2025 GMT
        Subject: CN=75D79BCE7F8EA84445A91B7C67D2BF2623D2FB52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5d:d0:f9:45:5c:98:47:05:11:c9:11:b2:fd:
                    5f:99:90:a6:ca:a5:5a:06:89:7d:54:38:6f:bc:c1:
                    97:04:84:93:ca:9e:ea:e8:1a:d4:30:61:c9:49:e4:
                    a3:be:97:60:22:9e:0c:01:a3:a8:44:56:9f:90:52:
                    46:10:90:0c:96:5a:23:04:69:4a:c4:55:8d:06:1d:
                    13:81:6d:ba:59:92:33:40:a9:23:28:e6:b5:69:31:
                    1c:0a:a9:1c:46:54:88:1b:21:a0:b9:8c:ab:9d:3f:
                    f7:c6:0e:58:2a:39:9f:91:6a:e9:72:5e:bd:43:5b:
                    bf:79:4e:44:57:75:92:d5:10:a2:fd:92:1d:59:25:
                    a9:d2:b7:c6:9e:7b:16:55:1f:3a:b6:e1:48:60:25:
                    7a:45:1b:57:9b:ff:5f:c8:e6:84:43:45:74:42:f3:
                    23:dd:64:86:fb:fe:c9:c7:04:a9:5a:af:21:8d:01:
                    03:9e:5e:c4:89:a5:a2:d7:09:59:6a:54:26:6c:5f:
                    b8:ed:7b:c5:da:db:dc:21:e8:23:03:7f:ee:02:7f:
                    f2:7c:0f:40:2a:37:fc:27:eb:17:f8:a4:20:c8:fc:
                    8d:9a:68:05:5d:01:72:70:e2:52:8d:06:05:a8:a3:
                    77:da:48:3b:f4:80:f3:ac:22:bd:b5:98:8a:06:0a:
                    b4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D7:9B:CE:7F:8E:A8:44:45:A9:1B:7C:67:D2:BF:26:23:D2:FB:52
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31372e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:86:60:2a:ab:27:23:de:19:5c:73:33:56:ac:62:ff:7f:e8:
         8b:de:ea:23:8e:9a:79:8b:22:08:27:62:a0:38:3b:2e:3e:37:
         4a:d1:68:95:b9:0a:c5:89:4b:44:5c:3d:83:03:d5:64:47:7e:
         95:d5:15:6a:83:94:b1:fc:29:51:7a:77:65:e4:47:fb:bd:31:
         21:72:64:e6:54:d4:99:af:e6:6b:69:32:17:99:85:62:84:d1:
         7e:70:eb:78:e6:65:5c:5b:31:cf:23:92:49:0b:bf:1f:ba:12:
         a6:43:b5:03:05:61:c4:3a:ed:39:4f:e8:4c:74:6d:ee:2b:69:
         da:48:d6:f8:7d:a3:72:68:a2:9e:8f:06:e1:af:0d:eb:3b:b0:
         88:6c:36:9a:f0:12:35:24:56:e0:53:ce:a2:5b:88:f3:d5:4e:
         0a:f3:6d:f7:34:76:b2:3a:60:13:4c:40:98:d4:e7:e0:3c:b3:
         ce:e7:06:41:eb:ec:7d:9e:76:fe:d9:d5:33:00:17:e6:bb:c6:
         46:0c:75:f4:c7:e3:1f:6d:08:ab:bf:24:7b:8f:86:69:cc:50:
         19:a2:b5:ec:e3:c3:bd:97:71:ff:fc:84:21:2c:42:73:0b:5c:
         6f:a4:d1:ca:1d:36:a0:75:b0:2b:93:03:32:9c:2a:d2:4b:27:
         a5:94:0d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:11:55 2025 by rpki-client