Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e3133342e302e302f31362d3234203d3e203130383831.roa
File:                     3230302e3133342e302e302f31362d3234203d3e203130383831.roa (raw, json)
Hash identifier:          SDEGm6NBgl+Q4omiH7Z6zUknd5aDmNg2VO1UN3Fx1kE=
Subject key identifier:   C5:56:3A:B8:E1:50:67:38:0D:5F:98:3B:BE:C8:FE:F3:17:1C:30:A5
Certificate issuer:       /CN=BA67A26F29951B044D426A0B6615C66CA1ABE0DB
Certificate serial:       307FBA9E9BAC755F8FA645D4BB78512B19A45732
Authority key identifier: BA:67:A2:6F:29:95:1B:04:4D:42:6A:0B:66:15:C6:6C:A1:AB:E0:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e3133342e302e302f31362d3234203d3e203130383831.roa
Signing time:             Mon 01 Apr 2024 17:08:49 +0000
ROA not before:           Mon 01 Apr 2024 17:03:49 +0000
ROA not after:            Mon 31 Mar 2025 17:08:49 +0000
asID:                     10881
IP address blocks:        200.134.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7f:ba:9e:9b:ac:75:5f:8f:a6:45:d4:bb:78:51:2b:19:a4:57:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA67A26F29951B044D426A0B6615C66CA1ABE0DB
        Validity
            Not Before: Apr  1 17:03:49 2024 GMT
            Not After : Mar 31 17:08:49 2025 GMT
        Subject: CN=C5563AB8E15067380D5F983BBEC8FEF3171C30A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:24:2b:f7:cc:8a:62:7b:05:45:e0:d0:ac:9d:
                    ed:17:15:41:ec:18:ad:f4:38:ba:df:3d:f1:52:60:
                    fc:68:65:df:31:82:b1:f4:22:60:cd:c6:60:db:6f:
                    6e:f7:6f:50:00:d7:05:b1:d8:50:d0:04:d3:1f:9e:
                    8a:3d:c9:47:6f:79:e3:72:d3:da:84:a0:a6:e3:db:
                    72:a8:25:e0:b9:59:25:8d:8d:ed:33:1d:cd:47:30:
                    84:ff:15:f4:4d:e7:37:f7:7a:65:5c:bd:52:a5:69:
                    46:25:22:58:5f:04:54:4c:93:6d:0b:47:81:2e:82:
                    4e:04:6f:9d:6b:5f:1d:5c:43:54:87:89:f6:05:1f:
                    8f:44:30:c1:3a:e9:d6:8a:00:66:27:8b:47:3f:35:
                    be:64:10:3a:bc:c2:d9:ae:cb:3f:fa:84:b7:67:f3:
                    70:b9:1d:8b:eb:24:4c:e5:d2:fd:a1:5e:34:3c:8f:
                    71:2c:aa:66:fe:ac:71:9b:49:c9:7c:d4:9b:cb:54:
                    d5:fa:a6:31:29:97:be:e7:4a:ac:40:74:54:c6:db:
                    f7:cf:15:c4:14:f9:1b:b0:ec:4c:76:e7:a0:f6:37:
                    6a:6f:48:96:c2:c5:2a:c3:41:c4:d8:15:cc:6b:ac:
                    1b:56:eb:c0:a0:8f:a2:c2:ae:c4:4b:9e:94:65:59:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:56:3A:B8:E1:50:67:38:0D:5F:98:3B:BE:C8:FE:F3:17:1C:30:A5
            X509v3 Authority Key Identifier:
                keyid:BA:67:A2:6F:29:95:1B:04:4D:42:6A:0B:66:15:C6:6C:A1:AB:E0:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA67A26F29951B044D426A0B6615C66CA1ABE0DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HGWjiaWhfy9z13J4rwR7Hqdvmz7NF4FDtifs1BfSh4Px/0/3230302e3133342e302e302f31362d3234203d3e203130383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:79:34:e6:31:c2:1a:0c:ae:ae:61:56:e9:bf:4d:9e:81:72:
         d2:f1:1b:f4:0a:8e:8b:db:7d:ed:6c:6d:e4:5d:07:86:ff:a6:
         2e:ef:e6:92:11:6e:81:65:b0:87:47:a4:4f:9d:75:58:8d:5f:
         5d:c9:ed:88:54:a8:34:0a:39:9f:93:0f:63:54:30:44:b3:6b:
         da:dd:34:dc:4d:e9:d2:76:a4:f3:21:e0:1e:8c:e8:e4:f4:b1:
         b6:bd:39:56:96:6f:a4:4d:34:65:4b:f6:20:d5:bb:5b:fc:8b:
         f2:e3:2e:e9:96:7f:8e:b2:e3:91:87:38:19:4e:c9:db:36:1a:
         30:48:fb:8e:4d:70:fb:fa:86:72:b7:04:02:05:72:99:9c:0a:
         58:ea:37:ef:7d:84:b3:a6:f8:06:4f:5f:1d:7c:6f:fc:7c:27:
         e1:fe:ee:d3:f5:b6:19:4f:71:d0:a1:3c:5f:6b:70:ae:0e:3f:
         1d:09:8b:64:d4:9d:60:98:b3:88:cc:68:50:41:69:d6:9a:46:
         4d:96:64:59:5d:14:f3:53:03:56:13:86:09:db:29:48:1a:3d:
         f5:6e:7d:04:50:84:2e:49:ae:5b:79:ca:78:29:d2:0e:03:bb:
         bd:0a:e4:ae:0c:fa:2b:f1:b9:19:da:50:aa:c6:17:9a:90:8c:
         7a:78:28:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:46 2025 by rpki-client