Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32332d3234203d3e20323731313636.roa
File:                     3137392e34322e3133322e302f32332d3234203d3e20323731313636.roa (raw, json)
Hash identifier:          +1jUMJUbjsViY48xBX8bvUQzXIlHNXEcLaz1gtBaSAs=
Subject key identifier:   AC:1F:F1:F0:EF:E4:57:78:2A:DC:D8:5C:55:AA:B8:0A:21:F9:09:00
Certificate issuer:       /CN=50B3EF11A49FF2C32B4941381D39B44CA7F88B22
Certificate serial:       4AE3AF3822A6A35714D6B19724C3530199129C28
Authority key identifier: 50:B3:EF:11:A4:9F:F2:C3:2B:49:41:38:1D:39:B4:4C:A7:F8:8B:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50B3EF11A49FF2C32B4941381D39B44CA7F88B22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32332d3234203d3e20323731313636.roa
Signing time:             Wed 08 Nov 2023 17:15:47 +0000
ROA not before:           Wed 08 Nov 2023 17:10:47 +0000
ROA not after:            Wed 06 Nov 2024 17:15:47 +0000
asID:                     271166
IP address blocks:        179.42.132.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e3:af:38:22:a6:a3:57:14:d6:b1:97:24:c3:53:01:99:12:9c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50B3EF11A49FF2C32B4941381D39B44CA7F88B22
        Validity
            Not Before: Nov  8 17:10:47 2023 GMT
            Not After : Nov  6 17:15:47 2024 GMT
        Subject: CN=3082010A0282010100DF492AAC55848C2E66388E60E30E7586738FB560794F7BD7ABEFBB5D6B07E58CA31625F0FD13D61192480BA32F9828CE307147D074F5C3FF9CC62C32A06C284DC6107A90781E35E8903FC8ADFB95C676F5B4BA19A0E1507348DF72F6DF5EFC0494F2470FD95C5383464AE5C8FA7BEF2BD3A6B92D6A329DBC0DC212A02D330E78A88F16E790BA139DFA0765A02D55CE05F33017B568BB5670306AF7707009A8B2D408B6D3AA36FBE0F993452ACDCEEBEFA3F7165C5C9E2D62A5B4B6AAAFA6A6688D973AD674DF291854E9834970F8B03A1A6541923E15C35BD2C40D11FEB27AF903DAA7A25A78011E038B12D18F4CF4AD73DECC46D6F9A8ABEF7B2A7A9C67EEF70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:49:2a:ac:55:84:8c:2e:66:38:8e:60:e3:0e:
                    75:86:73:8f:b5:60:79:4f:7b:d7:ab:ef:bb:5d:6b:
                    07:e5:8c:a3:16:25:f0:fd:13:d6:11:92:48:0b:a3:
                    2f:98:28:ce:30:71:47:d0:74:f5:c3:ff:9c:c6:2c:
                    32:a0:6c:28:4d:c6:10:7a:90:78:1e:35:e8:90:3f:
                    c8:ad:fb:95:c6:76:f5:b4:ba:19:a0:e1:50:73:48:
                    df:72:f6:df:5e:fc:04:94:f2:47:0f:d9:5c:53:83:
                    46:4a:e5:c8:fa:7b:ef:2b:d3:a6:b9:2d:6a:32:9d:
                    bc:0d:c2:12:a0:2d:33:0e:78:a8:8f:16:e7:90:ba:
                    13:9d:fa:07:65:a0:2d:55:ce:05:f3:30:17:b5:68:
                    bb:56:70:30:6a:f7:70:70:09:a8:b2:d4:08:b6:d3:
                    aa:36:fb:e0:f9:93:45:2a:cd:ce:eb:ef:a3:f7:16:
                    5c:5c:9e:2d:62:a5:b4:b6:aa:af:a6:a6:68:8d:97:
                    3a:d6:74:df:29:18:54:e9:83:49:70:f8:b0:3a:1a:
                    65:41:92:3e:15:c3:5b:d2:c4:0d:11:fe:b2:7a:f9:
                    03:da:a7:a2:5a:78:01:1e:03:8b:12:d1:8f:4c:f4:
                    ad:73:de:cc:46:d6:f9:a8:ab:ef:7b:2a:7a:9c:67:
                    ee:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1F:F1:F0:EF:E4:57:78:2A:DC:D8:5C:55:AA:B8:0A:21:F9:09:00
            X509v3 Authority Key Identifier:
                keyid:50:B3:EF:11:A4:9F:F2:C3:2B:49:41:38:1D:39:B4:4C:A7:F8:8B:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/50B3EF11A49FF2C32B4941381D39B44CA7F88B22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/50B3EF11A49FF2C32B4941381D39B44CA7F88B22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133322e302f32332d3234203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:3f:b7:2f:f6:ce:e6:cb:ff:c4:37:d3:62:bd:e3:e3:47:1b:
         7c:96:9e:f7:33:57:ce:9a:99:a3:87:93:c8:c1:34:5e:97:8a:
         84:01:2b:8d:8e:f4:1c:df:2a:cd:59:c8:ef:cd:72:49:bc:85:
         b4:b4:72:14:8d:be:3d:f9:de:c8:07:73:67:c0:c8:52:8f:83:
         82:8e:ae:66:9d:81:a2:6f:21:d1:f3:b3:94:26:13:06:62:14:
         62:36:ff:b4:0d:30:bf:43:69:f9:37:de:90:4f:5d:5a:b7:06:
         a3:18:4e:e1:cf:e4:1a:1c:24:a3:4e:e6:d2:eb:e8:f1:78:69:
         0e:c8:57:a1:62:7a:56:99:60:e4:59:9e:de:9b:6b:87:98:73:
         6f:2e:15:2b:3a:c2:69:c3:33:e2:68:69:e5:8b:70:82:a1:1b:
         50:a8:56:54:de:0c:61:b6:5f:07:fc:d3:97:31:6d:3d:80:00:
         8a:ab:31:8a:e1:05:ef:4c:15:52:a3:58:3e:57:f8:6f:2f:34:
         0c:2a:23:74:44:7c:b7:a6:b6:80:16:10:6e:69:cf:2d:5e:1c:
         51:7f:3e:ca:05:4a:7f:32:9b:b0:54:b5:0d:be:df:b4:bb:d4:
         c2:0d:05:fd:5c:d4:c0:0a:6f:6c:91:ae:73:83:5d:45:97:88:
         37:9b:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:30 2025 by rpki-client