Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130302e302f32332d3233203d3e203131393231.roa
File:                     3230302e3139342e3130302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          Sa6pfSAKKEALahtQVXU2qxiNuWMZbp3VJs+IyevSNe0=
Subject key identifier:   65:2A:5E:85:C0:B6:A0:8A:96:6B:53:1E:B6:B6:80:AE:12:57:B9:C5
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       1650B3A607CB2800112FB05B6384B5F6E5A6E3E7
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:56 +0000
ROA not before:           Thu 28 Mar 2024 14:36:56 +0000
ROA not after:            Thu 27 Mar 2025 14:41:56 +0000
asID:                     11921
IP address blocks:        200.194.100.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:50:b3:a6:07:cb:28:00:11:2f:b0:5b:63:84:b5:f6:e5:a6:e3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:56 2024 GMT
            Not After : Mar 27 14:41:56 2025 GMT
        Subject: CN=652A5E85C0B6A08A966B531EB6B680AE1257B9C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3f:50:4a:c0:86:ef:b8:22:db:14:7d:0c:c5:
                    78:dc:60:4e:89:0b:e5:e6:c4:45:ca:8b:ed:37:cb:
                    f4:be:f0:93:f1:15:a0:0d:b5:1a:ca:67:85:c4:d0:
                    1b:24:de:6c:d8:44:25:91:52:40:d1:01:0f:77:c0:
                    bf:2e:92:e4:69:05:fa:3d:b8:05:ca:59:34:30:93:
                    7b:12:93:29:22:84:c7:5b:7d:ce:0f:15:76:e4:99:
                    7b:00:d3:01:f9:f7:41:39:c6:94:90:61:fe:ab:6d:
                    b6:34:4f:38:1b:9f:85:5b:ba:1c:e3:70:58:bb:43:
                    df:e5:e1:63:5b:43:a3:17:a8:e4:07:67:cf:be:9a:
                    d4:bb:96:21:e3:14:dd:20:7e:4b:17:69:09:52:05:
                    f9:b7:71:fe:b1:d7:73:cb:fd:d9:f9:7c:91:a6:9c:
                    44:81:3f:09:35:0a:8d:bf:93:e7:d2:22:47:35:0d:
                    86:37:d2:bc:9a:eb:1b:49:ee:5f:1a:4c:fa:fc:16:
                    44:86:80:31:0d:05:69:88:8d:b0:00:a6:c8:69:99:
                    95:44:f6:d0:ee:58:ff:5d:22:67:5f:a7:ef:70:b3:
                    7e:e9:52:99:27:86:4d:79:6b:7e:00:5f:96:1c:c4:
                    8e:ce:36:b3:d9:9d:bb:a3:2a:a5:b6:8c:b2:80:12:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2A:5E:85:C0:B6:A0:8A:96:6B:53:1E:B6:B6:80:AE:12:57:B9:C5
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:07:e1:cf:df:df:da:a3:82:3e:68:d6:b0:95:8b:22:d8:67:
         ef:77:4c:f8:f3:be:7a:6a:8a:92:fe:39:af:4b:0b:75:49:5f:
         fe:18:95:8f:d3:d1:a1:b4:9a:d6:8e:89:e0:3b:d9:dc:13:cc:
         92:8a:bd:ed:03:60:de:24:b6:ff:b8:98:cd:cf:3f:58:fa:bc:
         a8:a0:5f:a5:05:11:4d:0c:26:ee:3b:22:2b:54:6e:c0:86:f5:
         fa:94:c7:01:69:29:bb:3c:40:5f:b9:90:0e:73:06:37:70:ef:
         88:7d:6f:e1:e3:b4:b4:55:81:d4:76:79:55:95:2c:54:37:12:
         6b:40:a8:a9:f4:d5:a9:9f:ea:07:cc:e9:d6:27:1d:07:05:93:
         8a:bb:3e:6e:86:d7:11:37:9c:2c:b6:03:bc:d4:24:c0:60:e0:
         4c:41:22:12:2d:55:07:d4:9d:8a:d8:8d:57:09:82:77:81:60:
         01:f0:38:cd:0e:98:85:d0:5b:03:77:b5:1a:05:6d:40:be:1e:
         9b:77:b9:a2:3e:17:5e:3b:fa:8e:f2:32:7b:01:be:aa:52:83:
         15:8c:13:ae:ad:c9:0d:12:2b:e4:89:b4:b8:2d:bf:6c:77:06:
         33:51:81:b6:9d:51:84:76:59:f4:e1:d4:be:d5:1e:2e:d6:3a:
         5f:ff:3e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:44 2025 by rpki-client