Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3133362e302f32322d3232203d3e203131393231.roa
File:                     3230302e3135302e3133362e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier:          JYkfbZSeinau58ZPXtmSSoi3c15QjZ5sXUlBb0H9aio=
Subject key identifier:   05:92:FA:1A:CF:C2:5D:70:1A:CE:D3:41:E8:B4:7A:73:4A:51:CD:12
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       3D0040316D141135F0952264619A6F4B6BF71F51
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3133362e302f32322d3232203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:56 +0000
ROA not before:           Thu 28 Mar 2024 14:36:56 +0000
ROA not after:            Thu 27 Mar 2025 14:41:56 +0000
asID:                     11921
IP address blocks:        200.150.136.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:00:40:31:6d:14:11:35:f0:95:22:64:61:9a:6f:4b:6b:f7:1f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:56 2024 GMT
            Not After : Mar 27 14:41:56 2025 GMT
        Subject: CN=0592FA1ACFC25D701ACED341E8B47A734A51CD12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:62:02:45:d2:c1:4a:02:51:91:cd:f7:4c:78:
                    08:55:27:ec:c4:2f:5d:af:bd:68:c0:2f:0d:ef:46:
                    d1:54:ea:5e:25:d0:1f:3f:e1:99:63:06:f5:d1:94:
                    4e:38:6a:95:13:99:7d:f8:e0:5a:63:6a:a3:0a:96:
                    8a:ce:87:b9:57:13:8d:5d:ae:99:f3:9b:0a:3d:80:
                    ab:25:44:58:dc:80:06:eb:fc:fa:87:93:e2:87:24:
                    47:20:ab:97:d7:52:3e:fb:aa:12:24:82:31:5a:f7:
                    24:9b:16:7e:c1:04:91:e1:96:1c:c1:30:c7:62:6a:
                    7f:8c:a6:7c:fa:35:03:a2:6f:c3:83:00:ca:ec:a8:
                    18:d4:58:74:11:10:59:a1:74:b1:f6:04:ce:34:6a:
                    99:17:a5:b9:30:72:ce:53:06:bb:23:7a:73:29:4b:
                    c1:4a:c7:e6:17:23:84:4a:6d:21:7c:19:de:52:2f:
                    05:e6:8a:26:50:9d:8e:16:4f:c1:59:81:c9:5e:33:
                    46:77:c1:80:53:02:dd:67:8b:29:65:71:56:f1:69:
                    fe:c4:f6:b9:88:a8:53:2a:78:d2:68:a8:e6:4a:5f:
                    7c:36:98:53:d7:39:5e:3c:cf:2c:5b:70:56:07:b8:
                    23:bf:c7:c2:2e:4e:5c:50:43:23:6e:71:00:cb:1e:
                    e6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:92:FA:1A:CF:C2:5D:70:1A:CE:D3:41:E8:B4:7A:73:4A:51:CD:12
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3133362e302f32322d3232203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:68:a8:bf:6e:29:cf:4c:9a:a4:49:3b:23:da:38:65:51:5c:
         36:f9:48:b9:a3:45:c7:74:14:c1:c9:69:c7:d7:c0:98:ea:ad:
         48:82:c8:92:29:f6:f2:e3:c4:eb:e0:78:a7:dc:03:24:c1:8b:
         0c:d1:63:dc:5f:40:29:eb:ea:b1:33:db:e7:7a:65:53:9e:07:
         c5:bd:cf:0b:26:eb:d8:ee:82:68:40:dd:87:3e:ca:70:f4:3e:
         ae:84:78:f6:f1:c9:de:39:f4:7c:e2:81:4f:cc:e0:93:4e:ef:
         d0:9b:6e:9e:4d:35:9e:dc:1d:b9:4f:66:07:73:9d:1c:b9:f9:
         2d:b9:7e:b3:e0:81:45:fd:4f:65:35:98:8e:7d:48:dd:8e:df:
         c2:c8:45:9b:52:f2:96:44:90:bb:6e:db:8e:e5:73:49:73:d7:
         5e:30:33:87:dc:fb:66:29:02:a3:3b:64:4f:2b:82:29:41:73:
         69:b7:e6:ae:f2:af:93:8b:03:f2:d7:67:ad:f8:8f:fc:9c:b2:
         be:61:f7:57:f6:63:24:86:43:03:99:f4:36:f2:d1:38:6c:26:
         7c:79:9b:95:2a:9e:11:4d:46:2b:b3:91:88:74:10:a7:8b:8c:
         e7:77:f6:0e:c3:0e:64:c6:8a:c2:e6:3b:4a:78:1d:28:4d:77:
         2a:ed:bf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:45:52 2025 by rpki-client