Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/3137392e34392e3133362e302f32322d3234203d3e20323731323038.roa
File:                     3137392e34392e3133362e302f32322d3234203d3e20323731323038.roa (raw, json)
Hash identifier:          7Y1DNJFAEWewne6pBQ/aKEzeL8p5hQzCHTN0HQNgX+o=
Subject key identifier:   00:70:87:7C:93:3F:85:D6:9C:E2:E9:8A:8D:63:80:73:8F:64:E7:A8
Certificate issuer:       /CN=65A0E0483F8FEB1975830B245B8AE1088D76B211
Certificate serial:       049211EC01CD1450EC98B3E9A97EFCEF5CD44605
Authority key identifier: 65:A0:E0:48:3F:8F:EB:19:75:83:0B:24:5B:8A:E1:08:8D:76:B2:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65A0E0483F8FEB1975830B245B8AE1088D76B211.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/3137392e34392e3133362e302f32322d3234203d3e20323731323038.roa
Signing time:             Wed 04 Dec 2024 18:59:11 +0000
ROA not before:           Wed 04 Dec 2024 18:54:11 +0000
ROA not after:            Wed 03 Dec 2025 18:59:11 +0000
asID:                     271208
IP address blocks:        179.49.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:92:11:ec:01:cd:14:50:ec:98:b3:e9:a9:7e:fc:ef:5c:d4:46:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65A0E0483F8FEB1975830B245B8AE1088D76B211
        Validity
            Not Before: Dec  4 18:54:11 2024 GMT
            Not After : Dec  3 18:59:11 2025 GMT
        Subject: CN=0070877C933F85D69CE2E98A8D6380738F64E7A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:35:0b:7a:47:d2:b8:11:b2:d8:70:74:8c:3e:
                    bf:17:27:e3:ec:25:21:dc:c9:45:27:c8:82:0e:d8:
                    82:fe:c8:78:51:31:c3:9d:65:82:65:d6:39:28:95:
                    e6:6e:52:c5:83:b1:06:b8:23:78:dd:1c:de:4d:aa:
                    59:80:b3:a4:37:73:fc:56:50:f7:80:91:9e:ae:88:
                    55:88:ad:7a:0d:bb:75:c9:e3:a2:5b:cf:d0:d1:fc:
                    91:03:d1:b9:f3:ad:71:aa:86:4e:1c:8c:12:76:19:
                    f4:aa:49:c0:7e:ad:71:ea:c7:3e:8b:46:7d:6a:92:
                    fa:bc:47:a0:af:b1:8e:d6:9f:d6:3a:72:59:c1:60:
                    1f:ef:19:a4:df:ce:77:93:27:79:cb:77:85:4d:41:
                    38:cc:0b:d3:3a:7a:9a:c7:78:4f:87:ad:cd:c0:7e:
                    b9:58:2b:64:e3:39:31:6a:ac:64:02:91:11:fc:e4:
                    8e:fb:f9:ec:84:19:79:ac:54:e0:6a:7b:ba:36:ef:
                    f7:e2:40:21:01:61:f8:53:91:04:f6:cd:b8:c8:d1:
                    20:cf:db:25:f1:76:e9:95:8a:ce:bc:31:d6:19:d1:
                    3b:29:f5:ab:55:58:53:2a:e4:31:8e:a1:30:b8:2e:
                    d7:93:e0:00:15:41:c0:63:86:ce:b6:26:e4:37:c2:
                    28:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:70:87:7C:93:3F:85:D6:9C:E2:E9:8A:8D:63:80:73:8F:64:E7:A8
            X509v3 Authority Key Identifier:
                keyid:65:A0:E0:48:3F:8F:EB:19:75:83:0B:24:5B:8A:E1:08:8D:76:B2:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/65A0E0483F8FEB1975830B245B8AE1088D76B211.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/65A0E0483F8FEB1975830B245B8AE1088D76B211.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbVaYTz4f318BQgdfUHnXDxSkRPM4XHpCkAZieAAbSWR/0/3137392e34392e3133362e302f32322d3234203d3e20323731323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:57:fa:45:44:be:d9:17:8b:83:82:71:c0:cf:1f:61:20:c8:
         07:d5:34:1b:70:98:fa:3f:7d:1a:ba:0e:eb:dc:05:e2:88:80:
         a4:d5:c2:21:7a:88:6b:40:79:91:33:12:4f:df:b4:1c:aa:84:
         22:d1:70:f8:a0:17:2d:97:4d:46:8c:21:94:a3:21:cc:b8:05:
         39:be:a8:c0:25:cb:34:e8:2d:8e:2e:44:e7:eb:1d:7a:23:f9:
         1d:38:2b:d1:2c:0b:c7:99:13:3b:c3:5d:6a:13:48:97:d7:8c:
         cc:e8:96:64:2d:81:41:3a:03:97:51:c4:9e:7d:98:0f:9e:cb:
         1e:9b:74:17:47:ef:b3:de:9c:50:f7:3e:c7:ba:e8:0d:de:bf:
         0d:7e:4e:be:77:f8:16:c7:56:2a:c5:35:56:34:ca:14:c4:3d:
         34:8e:ab:da:62:1e:70:53:c7:bf:7f:da:55:1b:b1:01:5b:39:
         2a:9c:0d:9f:d1:06:6e:5a:61:15:cd:97:e1:30:2e:bf:14:d1:
         13:fb:3e:c3:59:2c:17:d0:f5:22:52:f2:ab:e1:33:bd:2f:3f:
         88:74:81:af:59:d9:a5:71:b6:3c:c5:6b:08:e7:63:7b:63:a2:
         66:11:a1:b5:c5:f1:39:d2:39:95:4f:28:d9:3b:22:77:f1:b2:
         80:5e:98:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:40:03 2025 by rpki-client