Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e342e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e342e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          cO5KgGvUn7GPnEXlO4j/XRDOHEb1ueO738jmhy3anHg=
Subject key identifier:   70:6C:E6:BD:30:4E:9F:78:A3:A6:78:24:58:27:3E:93:A6:34:1A:B9
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       6B4A20565295C7426468B98541ED52DDCA2CCE61
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e342e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:42:49 +0000
ROA not before:           Wed 31 Jul 2024 13:37:49 +0000
ROA not after:            Wed 30 Jul 2025 13:42:49 +0000
asID:                     11921
IP address blocks:        201.49.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:4a:20:56:52:95:c7:42:64:68:b9:85:41:ed:52:dd:ca:2c:ce:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:37:49 2024 GMT
            Not After : Jul 30 13:42:49 2025 GMT
        Subject: CN=706CE6BD304E9F78A3A6782458273E93A6341AB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:31:ad:be:ba:0e:02:e1:7f:7e:3d:8a:18:86:
                    0f:57:1e:55:e7:ab:7f:6c:fc:bd:74:a2:e3:45:71:
                    23:de:4f:1d:75:12:0b:9a:f9:91:b7:15:79:32:40:
                    f7:7d:10:6f:d9:15:e0:93:aa:94:11:e6:ce:6c:86:
                    ba:38:89:6e:07:73:85:50:9d:00:38:16:a5:89:e1:
                    6e:73:7c:41:87:3a:49:d7:90:54:c6:ea:38:80:80:
                    9c:a6:3f:91:a9:79:0b:81:3c:93:7f:e7:d0:c1:3f:
                    e3:7c:3b:21:23:12:ca:cf:26:35:6f:4d:18:38:4d:
                    32:59:91:c2:f4:82:85:26:9f:22:5b:b7:e1:e9:a4:
                    2e:65:d4:72:c7:f0:e5:ab:21:9c:35:b2:a4:cb:9e:
                    15:6a:04:8f:51:11:6e:e3:66:87:90:77:e3:a5:54:
                    cc:95:fc:d2:6b:38:26:fd:f7:c4:c8:4e:e0:fd:b7:
                    e0:fc:84:6b:3d:1e:de:cc:e3:a2:73:30:31:31:19:
                    55:66:eb:64:af:de:97:a3:0d:4b:55:75:8e:39:b2:
                    f0:96:5e:84:9f:3b:46:6e:b0:45:91:b8:80:f5:40:
                    fb:d8:d2:74:ce:57:f5:b4:8c:5c:b6:80:0e:38:2b:
                    e1:a4:89:61:b5:db:27:da:59:25:4c:30:9e:57:6d:
                    e0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6C:E6:BD:30:4E:9F:78:A3:A6:78:24:58:27:3E:93:A6:34:1A:B9
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e342e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:d2:59:fc:fe:99:2f:33:e0:85:9d:a5:9b:a6:d5:63:c5:87:
         fd:82:cf:68:49:08:9b:cd:1d:9e:14:70:cc:c5:39:99:e8:c5:
         ba:2c:1f:8d:1b:c8:b0:2e:40:f0:09:cb:69:22:e0:79:35:95:
         27:55:be:6f:b0:9e:d7:29:ee:d2:40:f7:b2:20:90:03:38:54:
         f2:e4:52:75:99:e2:a5:fb:69:ac:05:81:ba:a1:9e:61:7d:98:
         03:c6:23:27:cd:11:4e:0f:52:9d:80:49:30:15:f8:57:fb:a5:
         6a:79:c7:22:6c:4f:c9:3e:45:69:12:ae:b7:4e:14:92:df:49:
         83:0a:96:4b:55:1e:2a:40:62:fa:5a:ad:6d:16:99:3f:e8:60:
         54:fb:22:c7:77:c1:59:de:d0:d7:ed:0a:f3:00:6b:01:42:62:
         6c:cd:4f:1e:fa:fb:30:54:fd:8f:49:f1:14:66:1a:c5:8c:c9:
         dc:33:33:3a:be:33:56:6a:a9:75:90:f8:51:16:c6:df:3e:fe:
         fd:71:ab:c2:83:a3:0f:a8:ab:8b:88:e6:d8:86:51:9a:f7:3f:
         bb:c9:04:a1:66:24:53:b5:89:46:3a:d5:56:6d:ed:29:d4:83:
         ba:50:a1:25:c7:5e:29:fd:ba:b4:da:af:28:18:77:12:f9:ce:
         55:a2:8f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:02:11 2025 by rpki-client