Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3230312e34362e3132312e302f32342d3234203d3e20323731323339.roa
File:                     3230312e34362e3132312e302f32342d3234203d3e20323731323339.roa (raw, json)
Hash identifier:          KnCl33UZTfii7Rv7DHDPW3jYbetXIPBvSWeeuwXSd8c=
Subject key identifier:   82:EC:32:BA:85:2A:C0:32:42:CE:66:FA:B9:30:AD:2B:75:04:DA:8B
Certificate issuer:       /CN=85B44C89427FA1CFB8491F84467C58597CE25783
Certificate serial:       24FA0DC1F74BB12D9141341E8B915C9BB3A4535E
Authority key identifier: 85:B4:4C:89:42:7F:A1:CF:B8:49:1F:84:46:7C:58:59:7C:E2:57:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B44C89427FA1CFB8491F84467C58597CE25783.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3230312e34362e3132312e302f32342d3234203d3e20323731323339.roa
Signing time:             Tue 30 Jul 2024 19:51:47 +0000
ROA not before:           Tue 30 Jul 2024 19:46:47 +0000
ROA not after:            Tue 29 Jul 2025 19:51:47 +0000
asID:                     271239
IP address blocks:        201.46.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fa:0d:c1:f7:4b:b1:2d:91:41:34:1e:8b:91:5c:9b:b3:a4:53:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85B44C89427FA1CFB8491F84467C58597CE25783
        Validity
            Not Before: Jul 30 19:46:47 2024 GMT
            Not After : Jul 29 19:51:47 2025 GMT
        Subject: CN=82EC32BA852AC03242CE66FAB930AD2B7504DA8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:58:6d:32:49:2f:e5:eb:5b:b8:ff:17:b1:
                    90:6c:41:42:e9:e8:29:f9:24:b2:1b:b7:92:98:d2:
                    47:66:9d:6c:58:fb:ed:34:60:fe:5d:a6:a6:42:60:
                    56:5f:45:16:48:2a:43:d2:b5:f6:e0:39:e4:2b:55:
                    05:7c:94:56:1c:f6:66:f2:c2:b4:ec:08:ab:66:73:
                    d8:6a:e3:14:34:3a:0b:9a:24:9b:a4:72:28:65:b6:
                    e3:12:be:6f:d6:12:2e:c8:5b:6c:c4:93:5e:a7:9c:
                    0a:58:a4:c7:da:ca:61:49:08:6c:e4:72:22:7c:e0:
                    a4:4e:5e:75:46:3d:59:98:33:75:46:26:20:aa:57:
                    af:99:b8:64:68:50:2a:7f:44:e9:16:74:8d:41:39:
                    a2:c4:a6:91:2f:71:ff:f2:0c:39:6a:c8:c6:6c:66:
                    82:b0:8b:d7:c8:4c:b0:95:e0:83:1d:6c:a1:97:a0:
                    da:39:53:c7:95:ff:ca:dd:0d:b8:a7:09:10:50:79:
                    bd:49:49:28:8c:20:7d:5d:15:42:e5:cf:93:48:e8:
                    74:f5:dd:e6:8d:8d:6d:67:34:cc:ae:89:14:27:3f:
                    67:8d:6d:a1:a8:03:ad:68:84:14:f2:86:11:a4:11:
                    f6:a9:ae:a5:04:1e:c8:89:0a:12:a4:5f:0a:70:8f:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EC:32:BA:85:2A:C0:32:42:CE:66:FA:B9:30:AD:2B:75:04:DA:8B
            X509v3 Authority Key Identifier:
                keyid:85:B4:4C:89:42:7F:A1:CF:B8:49:1F:84:46:7C:58:59:7C:E2:57:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/85B44C89427FA1CFB8491F84467C58597CE25783.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B44C89427FA1CFB8491F84467C58597CE25783.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmAZBWJZihigumcTjh3JSHbh62Wd9eWkw4qM1v2PepB4/0/3230312e34362e3132312e302f32342d3234203d3e20323731323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:44:7e:d7:8c:82:5b:d0:67:2d:f2:31:4a:92:75:19:b0:19:
         45:35:9d:ba:80:f6:6d:cb:4d:c7:f7:27:fe:ff:56:95:25:5a:
         46:01:f6:f7:ad:5d:b8:3c:f6:26:3b:ec:2b:fb:19:51:69:24:
         35:cc:f8:cd:73:1f:7e:12:1c:b3:3d:0c:6c:06:f2:c3:30:05:
         2e:65:e9:32:dd:78:26:d4:9f:c9:fa:c6:19:9e:96:8d:77:bd:
         4e:9b:4d:f2:b6:da:27:16:17:65:48:0e:2c:58:46:a2:34:e6:
         19:a9:9e:52:b9:f7:95:b0:e2:7f:54:84:4b:f7:12:c2:c6:44:
         09:cb:33:6f:29:75:c0:3a:2a:95:a1:49:79:b8:32:c6:b5:b7:
         2c:ab:eb:5d:3f:04:81:1e:69:8d:bc:31:c6:01:cc:cc:6d:0e:
         25:e9:3f:37:6f:46:04:eb:07:7d:49:95:d8:1d:6e:0f:2e:42:
         f3:99:83:cb:0b:e6:f9:d3:3a:a4:18:11:72:a3:92:93:39:b1:
         f5:8c:38:3c:73:9a:27:84:9b:d2:13:9f:f8:c9:7f:26:d1:75:
         09:56:a8:72:1f:d6:56:f3:66:91:c6:78:aa:0c:a7:41:f5:8a:
         11:69:3d:1b:5c:fa:53:33:fe:a5:ef:34:9b:09:0b:99:82:9e:
         89:09:2b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:23 2025 by rpki-client