Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130322e302f32342d3234203d3e203131393231.roa
File:                     3230302e3139342e3130322e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          6OR+Zg0tItBfSApazmjvdFPqOJW4tqaB7QdKik7hCaE=
Subject key identifier:   E6:12:6A:0F:9F:74:11:E5:D6:B2:D4:2D:30:80:25:14:58:1B:67:FC
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       10993104EDC0EDA58286992F5DF98280073CABBC
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130322e302f32342d3234203d3e203131393231.roa
Signing time:             Tue 17 Oct 2023 17:46:25 +0000
ROA not before:           Tue 17 Oct 2023 17:41:25 +0000
ROA not after:            Tue 15 Oct 2024 17:46:25 +0000
asID:                     11921
IP address blocks:        200.194.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:99:31:04:ed:c0:ed:a5:82:86:99:2f:5d:f9:82:80:07:3c:ab:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Oct 17 17:41:25 2023 GMT
            Not After : Oct 15 17:46:25 2024 GMT
        Subject: CN=E6126A0F9F7411E5D6B2D42D30802514581B67FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:63:07:ee:41:f4:69:63:a7:3e:78:58:00:d8:
                    78:41:14:a5:d7:fd:b3:d3:48:d8:da:81:54:5d:bf:
                    12:93:ea:62:63:a4:37:c3:f3:1c:61:21:39:61:cd:
                    78:7b:e0:f8:a0:e7:42:71:f5:5d:e4:5f:d5:62:31:
                    33:f0:ee:a1:48:96:27:59:91:36:55:72:9b:ce:82:
                    ce:9d:97:af:5a:69:e0:78:6b:00:21:15:df:bc:fa:
                    f9:6f:69:94:b4:7f:3f:63:b3:ff:3a:94:a9:7f:6f:
                    57:4a:38:71:22:9b:1c:4d:c3:45:78:a6:78:41:47:
                    34:54:49:c5:35:2b:4d:e0:d1:a7:25:91:a0:c4:58:
                    14:3e:2b:75:08:4b:6b:a3:79:f1:93:9e:92:90:5b:
                    84:ec:e0:ee:03:eb:b6:86:ca:86:fb:7a:e5:5f:d7:
                    0d:66:16:34:34:04:65:e0:8b:54:4d:63:cf:0d:a4:
                    9c:0f:d0:ce:50:4b:18:f5:6d:a4:5b:16:52:5b:fb:
                    9b:e6:6b:d6:cf:be:7c:23:62:06:fc:bf:7f:5c:9f:
                    44:be:34:65:cc:d0:a5:07:ba:2b:4d:b8:2b:34:af:
                    0b:7f:14:be:de:03:65:a9:4b:f9:33:2a:13:48:40:
                    8f:5f:e0:85:a5:3c:67:8e:a3:03:e6:8a:fe:cd:66:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:12:6A:0F:9F:74:11:E5:D6:B2:D4:2D:30:80:25:14:58:1B:67:FC
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130322e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:02:8b:b9:2b:5b:8f:ae:f2:ec:9d:87:fc:3d:e0:73:c8:79:
         94:fa:1d:87:ea:ec:f1:db:58:bb:70:11:bc:8d:f6:eb:0a:80:
         ea:5f:10:0c:96:b0:cb:47:58:9c:4d:9f:11:4e:e9:ff:36:a5:
         71:2a:aa:38:e0:9b:45:ec:ec:e3:a7:bd:e3:a8:5c:61:0d:6b:
         8a:fb:9f:f0:4f:27:52:5f:64:be:78:fc:c7:de:a9:f5:21:4b:
         39:e8:f9:6c:66:a2:34:3d:cc:7e:b0:4e:34:c5:29:c9:34:14:
         79:be:48:a1:a5:11:6e:b0:85:94:ae:65:dd:58:0c:08:95:75:
         62:67:66:11:ce:56:d5:07:91:9d:6c:27:43:a1:99:3f:a9:c9:
         69:ed:52:30:2a:19:8d:18:5f:60:8a:34:32:c2:12:94:84:47:
         32:a6:63:0b:50:84:2b:3d:ab:2b:4e:5e:ef:58:97:9f:32:12:
         19:17:39:2f:c2:18:8c:9a:e0:98:09:83:e7:c3:64:2d:2c:95:
         b5:79:4c:d5:73:4a:81:c8:a9:94:c7:8b:d4:07:5c:3a:7f:ce:
         e7:f6:af:af:45:96:e4:dd:b2:c0:ae:56:e2:2f:9a:a2:3b:73:
         50:a4:90:4a:de:68:6a:4c:b1:bd:ff:f2:13:04:03:42:3f:fa:
         c8:50:38:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:41 2025 by rpki-client