Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32322d3232203d3e20323731313636.roa
File:                     3137392e34322e3133322e302f32322d3232203d3e20323731313636.roa (raw, json)
Hash identifier:          TMYux5F+GHd17xf5d5wyo6bBSeUomiwsBBJc6CqOZks=
Subject key identifier:   76:06:44:71:CA:A0:E5:6C:79:A8:84:C1:F9:C9:DC:73:AF:A0:76:B8
Certificate issuer:       /CN=321E98532E0480CAAC859174555C2E9A5402331D
Certificate serial:       73BFF26076AAA91D36E87F0607953EFD280A323D
Authority key identifier: 32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/321E98532E0480CAAC859174555C2E9A5402331D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32322d3232203d3e20323731313636.roa
Signing time:             Wed 12 Apr 2023 13:02:55 +0000
ROA not before:           Wed 12 Apr 2023 12:57:55 +0000
ROA not after:            Wed 10 Apr 2024 13:02:55 +0000
asID:                     271166
IP address blocks:        179.42.132.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:bf:f2:60:76:aa:a9:1d:36:e8:7f:06:07:95:3e:fd:28:0a:32:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321E98532E0480CAAC859174555C2E9A5402331D
        Validity
            Not Before: Apr 12 12:57:55 2023 GMT
            Not After : Apr 10 13:02:55 2024 GMT
        Subject: CN=76064471CAA0E56C79A884C1F9C9DC73AFA076B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:a6:a3:de:4a:79:28:45:2a:76:cc:05:d1:
                    56:91:32:a1:19:71:17:57:91:a9:08:4e:cb:3f:8a:
                    55:70:22:7b:2a:ee:c5:d5:e0:79:0c:f0:fd:80:62:
                    eb:11:1f:8a:19:43:b8:39:41:3e:a9:5f:15:83:2a:
                    f4:4e:44:92:ab:7c:73:ff:ab:bd:39:75:46:d1:a1:
                    8c:b7:5c:2a:1e:d4:49:03:80:d9:f6:80:d0:c4:10:
                    0d:ff:31:1a:4c:0f:66:d6:f8:27:c8:d8:1b:70:c5:
                    60:ef:0f:1a:42:1c:0a:90:ca:cb:a5:83:21:72:6c:
                    09:85:14:a8:de:37:b6:f2:29:3c:a7:5d:07:08:78:
                    f9:42:1b:8a:d9:39:1f:5d:ae:25:08:f7:7f:a3:bd:
                    6c:5f:c8:7b:c5:82:40:49:4a:be:45:10:cc:1d:84:
                    1a:a7:27:b6:67:0c:28:a1:70:31:6d:b4:60:eb:ba:
                    55:c6:75:8a:7e:41:74:10:38:8a:a6:3e:13:04:90:
                    6c:8d:9f:be:0b:c3:ff:7b:a9:dd:ea:d4:a2:d2:81:
                    77:fd:43:ee:9b:e7:1c:67:22:1c:61:1a:62:d7:74:
                    4b:80:de:84:cd:ac:60:99:b7:0c:b6:4f:db:bd:c3:
                    7b:94:a7:23:c8:68:cb:45:58:37:f5:89:bf:e7:5e:
                    6d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:06:44:71:CA:A0:E5:6C:79:A8:84:C1:F9:C9:DC:73:AF:A0:76:B8
            X509v3 Authority Key Identifier:
                keyid:32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/321E98532E0480CAAC859174555C2E9A5402331D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/321E98532E0480CAAC859174555C2E9A5402331D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32322d3232203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:d1:57:d2:2c:95:58:15:2c:2d:71:71:d2:e6:6e:66:91:a2:
         af:07:b7:40:b3:2c:39:de:84:ba:67:61:94:df:d3:0d:31:d3:
         9c:45:d2:88:32:a3:a2:f3:9f:de:3c:f1:9d:05:90:3e:88:37:
         b4:4c:10:f8:1d:2e:69:94:82:3e:67:3c:f5:20:02:29:de:4b:
         94:5f:22:04:b3:34:62:8e:07:67:3d:42:cb:c1:73:99:28:87:
         2e:a1:75:63:91:88:70:cc:31:b4:67:b7:bb:23:7b:94:8a:6d:
         16:99:07:3d:94:ba:d9:d0:85:db:b1:53:8a:ce:8d:b3:d8:05:
         94:fb:61:a0:0d:12:8f:91:c3:c9:a9:1a:27:a2:82:6f:bb:05:
         a2:bb:d8:c6:7c:c3:fc:30:e5:3f:85:01:24:78:4d:46:ad:f0:
         ed:8f:79:9b:4d:17:5f:59:70:2b:f8:8b:ce:3d:5b:d7:47:58:
         c0:a8:af:72:74:51:ec:14:0d:23:36:b1:5a:50:c2:ad:ca:8f:
         12:e7:d4:d1:22:a5:50:3e:a4:11:b6:0a:72:7f:cd:5c:ee:77:
         b2:55:76:71:a4:ea:5f:72:38:fb:80:a2:67:ac:b2:8c:6b:e5:
         86:ce:32:c3:6b:42:56:57:2d:9d:0f:ed:c3:de:e9:5a:16:12:
         1b:94:17:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:44 2025 by rpki-client