Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3230312e34362e3132302e302f32332d3234203d3e20323731323339.roa
File:                     3230312e34362e3132302e302f32332d3234203d3e20323731323339.roa (raw, json)
Hash identifier:          XzWmgRGw3tweDkHfIOHjXRTI7qrz5KFvrW5t7QOKv0E=
Subject key identifier:   E3:F9:32:C4:C9:14:16:4A:52:C8:1F:B8:2F:86:78:C4:BF:BC:AA:A5
Certificate issuer:       /CN=E78F6793229F60787B6BB9D88C9E47A77557ED21
Certificate serial:       18AD24274DD8CF5FEF61FE7E3A97F00D4105C84E
Authority key identifier: E7:8F:67:93:22:9F:60:78:7B:6B:B9:D8:8C:9E:47:A7:75:57:ED:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F6793229F60787B6BB9D88C9E47A77557ED21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3230312e34362e3132302e302f32332d3234203d3e20323731323339.roa
Signing time:             Fri 27 Dec 2024 17:23:01 +0000
ROA not before:           Fri 27 Dec 2024 17:18:01 +0000
ROA not after:            Fri 26 Dec 2025 17:23:01 +0000
asID:                     271239
IP address blocks:        201.46.120.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ad:24:27:4d:d8:cf:5f:ef:61:fe:7e:3a:97:f0:0d:41:05:c8:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E78F6793229F60787B6BB9D88C9E47A77557ED21
        Validity
            Not Before: Dec 27 17:18:01 2024 GMT
            Not After : Dec 26 17:23:01 2025 GMT
        Subject: CN=E3F932C4C914164A52C81FB82F8678C4BFBCAAA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:ee:1b:1e:7d:fe:eb:01:6d:39:7b:d4:97:
                    b4:f6:69:3a:10:14:3e:3f:65:68:f8:41:c7:27:bf:
                    0e:ce:f3:33:13:2b:63:16:7f:41:53:7e:a7:83:75:
                    ae:81:f5:32:eb:a0:51:e4:cb:d2:c4:05:c8:89:46:
                    de:a1:9c:a9:fe:d1:bc:7b:35:58:98:24:de:df:13:
                    c2:d0:8b:a3:ce:50:0e:49:6e:45:69:f4:dc:a1:5e:
                    4d:d9:3f:6a:83:75:b7:f0:d5:e6:f9:a3:f2:65:c7:
                    3a:fa:b5:b5:0e:57:da:64:d1:ab:27:d1:d4:06:8f:
                    1b:7a:05:36:83:eb:8a:2a:be:26:a9:c7:34:ff:9f:
                    0b:d8:71:cb:c3:58:df:63:50:bf:fa:8b:03:58:5a:
                    41:27:3d:2a:d0:bb:b8:c7:af:ca:60:63:48:6f:74:
                    95:31:8e:af:5b:7c:28:de:dc:63:33:f8:41:b1:70:
                    92:ff:fc:35:80:e6:92:53:d7:79:c7:c8:e7:ff:cd:
                    aa:52:96:b3:10:da:26:e2:89:f2:67:5f:7f:30:f6:
                    34:7b:1b:d4:67:ff:b0:80:22:ab:df:08:e5:8f:18:
                    f6:85:74:da:72:b6:d2:fc:8f:0f:7f:03:55:a6:20:
                    c0:19:69:29:7e:96:d6:a4:f0:63:f8:1c:ed:66:30:
                    fc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F9:32:C4:C9:14:16:4A:52:C8:1F:B8:2F:86:78:C4:BF:BC:AA:A5
            X509v3 Authority Key Identifier:
                keyid:E7:8F:67:93:22:9F:60:78:7B:6B:B9:D8:8C:9E:47:A7:75:57:ED:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/E78F6793229F60787B6BB9D88C9E47A77557ED21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E78F6793229F60787B6BB9D88C9E47A77557ED21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3230312e34362e3132302e302f32332d3234203d3e20323731323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:ab:89:bb:83:59:3b:d6:04:1e:7a:f9:2a:d1:9d:1f:90:3a:
         c3:e4:59:6e:ec:a9:24:fa:1c:fd:6f:42:b5:c7:41:6a:92:d6:
         df:f0:dd:bd:6f:b9:16:6b:f4:65:22:a9:b6:8c:db:d8:97:29:
         bf:b0:cf:b1:d6:e1:fe:34:62:02:83:89:69:c4:51:0c:c7:eb:
         90:a9:1f:fb:53:00:36:a0:8c:c3:34:f0:06:4e:de:03:b6:67:
         f4:9b:78:4a:eb:1f:7a:7a:b4:ab:21:fe:32:3d:13:79:d4:64:
         e9:96:54:eb:73:52:ed:35:7a:e2:a3:2c:b4:cc:76:22:e3:d1:
         bd:21:3c:dd:8d:be:5e:1d:8a:25:61:2e:74:ef:fd:f3:25:d6:
         36:c4:33:df:9f:cc:89:e8:5e:96:61:a7:7e:c7:9f:9b:75:01:
         7e:94:a4:8f:5d:3f:8d:ca:49:22:e7:84:08:4c:b3:e0:42:07:
         e7:43:f0:de:ef:0b:70:9d:cc:2e:80:b4:8f:8f:21:fa:a0:97:
         f6:b7:a0:46:45:f1:1e:f9:bb:11:0f:b6:97:af:a0:37:25:30:
         65:c3:7f:e5:38:8e:3c:ae:50:52:3b:ea:1c:20:ea:6e:fe:8b:
         46:60:0b:03:e4:02:0f:b3:b3:63:a0:0a:cd:3c:ce:8e:9c:d1:
         af:92:f5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:46:56 2025 by rpki-client