Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32332d3233203d3e20323731313636.roa
File:                     3137392e34322e3133322e302f32332d3233203d3e20323731313636.roa (raw, json)
Hash identifier:          7I3m1q9Hc/l0dcXIKBNOwBr3y5fDJEwnJjd+9F47e5k=
Subject key identifier:   BE:8D:23:6C:83:2D:4B:C1:4C:48:4D:05:12:6E:25:F5:50:48:0C:B6
Certificate issuer:       /CN=321E98532E0480CAAC859174555C2E9A5402331D
Certificate serial:       64EF8D460447606D01D706C8636DBA9B2C623C9A
Authority key identifier: 32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/321E98532E0480CAAC859174555C2E9A5402331D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32332d3233203d3e20323731313636.roa
Signing time:             Wed 12 Apr 2023 13:02:54 +0000
ROA not before:           Wed 12 Apr 2023 12:57:54 +0000
ROA not after:            Wed 10 Apr 2024 13:02:54 +0000
asID:                     271166
IP address blocks:        179.42.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ef:8d:46:04:47:60:6d:01:d7:06:c8:63:6d:ba:9b:2c:62:3c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321E98532E0480CAAC859174555C2E9A5402331D
        Validity
            Not Before: Apr 12 12:57:54 2023 GMT
            Not After : Apr 10 13:02:54 2024 GMT
        Subject: CN=BE8D236C832D4BC14C484D05126E25F550480CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:75:46:92:31:15:2b:13:86:5b:39:40:5c:
                    db:dd:d1:fa:4c:b7:46:07:68:6e:05:6e:06:b8:c0:
                    ce:f8:4d:7a:82:92:ea:f6:19:6c:4c:0b:38:53:ea:
                    49:25:6e:d3:42:cf:68:70:8b:eb:d6:42:6a:42:a8:
                    4e:f5:89:69:4b:09:e3:b4:43:a4:71:75:23:eb:53:
                    4e:a7:c3:f7:69:17:b3:d6:a7:79:56:5b:dd:61:fc:
                    01:7f:9b:eb:d7:48:a8:6f:5b:7c:74:4b:ce:9f:41:
                    03:5d:d4:a6:86:a0:e1:c6:c7:c4:80:48:2d:4b:a2:
                    76:5e:52:75:f6:4f:ff:8e:e1:ff:0c:8c:16:f7:37:
                    c5:69:08:22:20:ee:79:a5:f8:6c:a7:d0:04:d1:cf:
                    d3:08:26:33:6a:91:5e:e0:4a:f6:3b:f5:eb:81:32:
                    70:41:79:3d:93:b9:dc:f9:e2:ed:5d:1d:0d:f1:04:
                    91:c9:b5:5e:58:03:9a:30:02:f0:09:34:55:38:09:
                    e9:d0:3d:98:5a:1c:d6:6b:27:72:6e:bc:ef:92:8c:
                    11:88:f5:ee:c8:8a:35:f0:a2:c2:40:85:b1:b4:f9:
                    37:69:9e:ba:0a:4c:f9:fc:54:20:e0:86:33:9b:21:
                    dd:e3:be:62:7d:ed:b6:64:17:34:6c:a7:00:22:05:
                    bb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8D:23:6C:83:2D:4B:C1:4C:48:4D:05:12:6E:25:F5:50:48:0C:B6
            X509v3 Authority Key Identifier:
                keyid:32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/321E98532E0480CAAC859174555C2E9A5402331D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/321E98532E0480CAAC859174555C2E9A5402331D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32332d3233203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:8f:32:99:e1:5b:00:03:c1:29:18:bc:05:76:df:04:74:af:
         16:82:7d:c4:e6:e0:20:34:81:6e:3d:ef:1c:86:42:e3:25:a1:
         59:5e:b3:e7:fe:11:64:df:fd:fa:64:20:8f:0f:98:b9:d9:10:
         0d:18:87:e5:0d:af:6f:4e:a8:5b:d6:bf:fa:55:13:67:e9:34:
         ee:b6:e0:d5:b9:e2:8f:44:38:ca:ee:03:ed:cc:8b:7d:9e:4a:
         97:a7:ad:16:14:d3:f7:29:3d:cf:11:a0:bd:58:32:86:d2:c2:
         a2:28:03:bc:52:59:3e:2e:bd:9e:6a:a5:e5:39:c4:72:87:12:
         21:08:aa:7b:b8:76:9b:ca:8b:85:54:53:07:b4:e5:8f:9a:22:
         fc:6c:43:7f:01:db:2a:e7:6d:f5:19:df:0c:0c:92:3b:db:60:
         27:f8:dd:1f:06:99:d8:13:51:9e:80:bd:08:ea:62:12:23:a3:
         8a:8d:13:b2:3f:1e:a0:ea:a3:95:07:11:3d:e9:cd:f2:66:c5:
         9d:f6:78:8b:dd:b7:15:b2:38:03:13:ec:cf:85:d8:e3:fd:58:
         b7:c9:be:4b:a7:6e:a1:fe:3f:0a:65:b9:82:0d:5c:f1:66:bc:
         9e:87:52:65:47:18:f4:05:11:f3:d0:3d:87:38:1d:d9:35:d6:
         a4:2d:96:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org