Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133342e302f32332d3233203d3e20323731313636.roa
File:                     3137392e34322e3133342e302f32332d3233203d3e20323731313636.roa (raw, json)
Hash identifier:          ecI6YDXfEevWYp6ZMhKM1QqRMw+u74YBs6k2n46bFdU=
Subject key identifier:   85:81:A4:A8:10:D2:4D:76:4C:28:2A:B5:B1:85:82:67:02:8E:9E:AE
Certificate issuer:       /CN=321E98532E0480CAAC859174555C2E9A5402331D
Certificate serial:       7A4151930787A8C4AC520F8D8EBF0BC4BF0A5ED0
Authority key identifier: 32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/321E98532E0480CAAC859174555C2E9A5402331D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133342e302f32332d3233203d3e20323731313636.roa
Signing time:             Wed 12 Apr 2023 13:02:53 +0000
ROA not before:           Wed 12 Apr 2023 12:57:53 +0000
ROA not after:            Wed 10 Apr 2024 13:02:53 +0000
asID:                     271166
IP address blocks:        179.42.134.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:41:51:93:07:87:a8:c4:ac:52:0f:8d:8e:bf:0b:c4:bf:0a:5e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321E98532E0480CAAC859174555C2E9A5402331D
        Validity
            Not Before: Apr 12 12:57:53 2023 GMT
            Not After : Apr 10 13:02:53 2024 GMT
        Subject: CN=8581A4A810D24D764C282AB5B1858267028E9EAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8c:73:45:c1:fb:ad:0c:b9:08:5e:18:f9:8d:
                    ca:d7:a9:89:f2:c3:a0:ba:87:63:48:30:b8:6f:4d:
                    cb:ec:fc:af:9e:5e:99:8c:b5:ff:30:f8:49:d7:67:
                    c7:01:6b:ea:c7:dd:2d:cb:8b:5f:18:45:5c:fe:86:
                    84:99:6b:53:f3:5f:c9:6f:d3:6f:99:18:2f:c4:04:
                    af:d1:be:b5:07:9f:2f:02:9b:95:2a:9f:f4:2a:09:
                    3f:58:ef:ae:4f:bd:16:21:03:26:db:7c:25:99:10:
                    be:26:e6:d3:c7:84:fc:62:d6:35:6f:b3:ee:68:a1:
                    a6:be:07:86:92:d6:62:d4:99:c7:d0:06:9c:9f:73:
                    ef:5c:95:e3:2c:38:26:77:57:c4:1c:23:4a:2f:ab:
                    d2:d5:b0:09:2a:ee:c7:36:2c:ff:03:9b:d2:7e:31:
                    ed:7b:fd:70:85:4a:e6:32:cd:d0:3f:31:a3:9c:c8:
                    3f:f8:d6:64:b4:71:0f:5a:6e:07:60:2c:ea:44:c7:
                    10:98:69:38:ae:38:05:64:70:21:c7:73:f8:c6:63:
                    52:42:72:50:2f:4d:35:ff:79:f6:82:4a:fd:a9:8c:
                    37:e7:ef:1b:7e:4f:72:e9:77:42:8c:97:57:45:52:
                    3a:ec:ac:5e:1e:ab:81:f3:6d:1f:87:3a:aa:2a:5e:
                    82:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:81:A4:A8:10:D2:4D:76:4C:28:2A:B5:B1:85:82:67:02:8E:9E:AE
            X509v3 Authority Key Identifier:
                keyid:32:1E:98:53:2E:04:80:CA:AC:85:91:74:55:5C:2E:9A:54:02:33:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/321E98532E0480CAAC859174555C2E9A5402331D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/321E98532E0480CAAC859174555C2E9A5402331D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HnqPZLqC5c1QQRM7dcmWAVDzJnyifsCA2pep8GCfp8VV/0/3137392e34322e3133342e302f32332d3233203d3e20323731313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:1e:c7:89:61:2c:25:d8:ec:86:78:71:f1:d2:cc:38:0f:c5:
         d4:a4:b7:ea:11:a6:c7:19:67:68:4f:f8:07:2b:9c:07:ce:bc:
         e5:6f:03:76:2f:2a:cf:57:5f:5c:0a:d6:f6:49:75:56:15:20:
         72:f7:d0:90:8f:25:c6:df:d5:15:78:4c:e1:2d:ac:5e:d3:8d:
         c6:62:b6:d4:67:b0:a3:a9:b3:fc:28:28:2e:34:e4:b9:07:09:
         e5:a5:a6:32:03:d8:68:a6:1c:ce:1b:a0:fb:f2:c8:28:b6:1f:
         e8:1e:50:08:55:6d:af:d3:d8:de:f8:54:58:1d:78:15:6f:26:
         55:f2:39:9a:9e:b1:ad:39:26:0e:de:57:da:b6:6b:a9:42:11:
         7e:ed:70:b5:40:08:2f:7b:6b:a3:0b:7a:4d:bf:f6:0e:c4:db:
         b9:77:fa:fd:c1:59:e2:b0:8e:49:1b:f1:9d:50:bb:7c:a5:40:
         fe:52:c7:c9:d8:76:f1:ba:c0:37:7c:82:66:fa:16:15:fc:c3:
         c3:8c:15:d0:d7:1b:0e:56:95:1c:0b:bb:2d:71:94:74:ef:17:
         0b:be:5d:5a:f8:06:7a:92:2f:4d:14:97:29:56:23:43:81:7d:
         13:7f:67:1c:4d:aa:eb:b2:a5:60:8d:b6:a7:b6:02:3b:42:86:
         b3:5f:05:e2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUekFRkweHqMSsUg+Njr8LxL8KXtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIxRTk4NTMyRTA0ODBDQUFDODU5MTc0NTU1QzJFOUE1
NDAyMzMxRDAeFw0yMzA0MTIxMjU3NTNaFw0yNDA0MTAxMzAyNTNaMDMxMTAvBgNV
BAMTKDg1ODFBNEE4MTBEMjRENzY0QzI4MkFCNUIxODU4MjY3MDI4RTlFQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAjHNFwfutDLkIXhj5jcrXqYny
w6C6h2NIMLhvTcvs/K+eXpmMtf8w+EnXZ8cBa+rH3S3Li18YRVz+hoSZa1PzX8lv
02+ZGC/EBK/RvrUHny8Cm5Uqn/QqCT9Y765PvRYhAybbfCWZEL4m5tPHhPxi1jVv
s+5ooaa+B4aS1mLUmcfQBpyfc+9cleMsOCZ3V8QcI0ovq9LVsAkq7sc2LP8Dm9J+
Me17/XCFSuYyzdA/MaOcyD/41mS0cQ9abgdgLOpExxCYaTiuOAVkcCHHc/jGY1JC
clAvTTX/efaCSv2pjDfn7xt+T3Lpd0KMl1dFUjrsrF4eq4HzbR+HOqoqXoLjAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhYGkqBDSTXZMKCq1sYWCZwKOnq4wHwYDVR0j
BBgwFoAUMh6YUy4EgMqshZF0VVwumlQCMx0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSG5xUFpMcUM1YzFRUVJNN2RjbVdBVkR6Sm55aWZzQ0EycGVwOEdDZnA4
VlYvMC8zMjFFOTg1MzJFMDQ4MENBQUM4NTkxNzQ1NTVDMkU5QTU0MDIzMzFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMyMUU5ODUzMkUwNDgwQ0FB
Qzg1OTE3NDU1NUMyRTlBNTQwMjMzMUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hucVBaTHFDNWMxUVFSTTdkY21XQVZEekpueWlmc0NBMnBlcDhHQ2ZwOFZWLzAv
MzEzNzM5MmUzNDMyMmUzMTMzMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM3
MzEzMTM2MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGzKoYwDQYJKoZIhvcNAQELBQADggEBAHwex4lh
LCXY7IZ4cfHSzDgPxdSkt+oRpscZZ2hP+AcrnAfOvOVvA3YvKs9XX1wK1vZJdVYV
IHL30JCPJcbf1RV4TOEtrF7TjcZittRnsKOps/woKC405LkHCeWlpjID2GimHM4b
oPvyyCi2H+geUAhVba/T2N74VFgdeBVvJlXyOZqesa05Jg7eV9q2a6lCEX7tcLVA
CC97a6MLek2/9g7E27l3+v3BWeKwjkkb8Z1Qu3ylQP5Sx8nYdvG6wDd8gmb6FhX8
w8OMFdDXGw5WlRwLuy1xlHTvFwu+XVr4BnqSL00UlylWI0OBfRN/ZxxNquuypWCN
tqe2AjtChrNfBeI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 07:59:38 2025 by rpki-client