Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130342e302f32312d3231203d3e203131393231.roa
File:                     3230302e3139342e3130342e302f32312d3231203d3e203131393231.roa (raw, json)
Hash identifier:          1kM2vsfAZ/ZzfdKSVR2nzhWubZG2eLFKaYGwTWgTFp8=
Subject key identifier:   E5:AB:BB:DC:F2:0E:E5:B3:08:61:27:9F:4D:50:BC:20:48:41:1B:B9
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       2B7ED176D9E971E3DC0A47DDE388642577180FE2
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130342e302f32312d3231203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:56 +0000
ROA not before:           Thu 28 Mar 2024 14:36:56 +0000
ROA not after:            Thu 27 Mar 2025 14:41:56 +0000
asID:                     11921
IP address blocks:        200.194.104.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7e:d1:76:d9:e9:71:e3:dc:0a:47:dd:e3:88:64:25:77:18:0f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:56 2024 GMT
            Not After : Mar 27 14:41:56 2025 GMT
        Subject: CN=E5ABBBDCF20EE5B30861279F4D50BC2048411BB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:07:35:73:9f:39:b1:8e:5f:4a:61:b7:9d:29:
                    0b:18:25:e5:f5:d9:9a:69:f1:d6:83:7c:8a:05:d3:
                    13:69:38:bb:85:51:fc:86:ff:65:72:88:17:e5:40:
                    86:40:84:0d:28:29:e8:7f:10:02:81:5f:04:47:bf:
                    62:ec:6f:67:0a:74:70:d5:33:5d:ac:37:b3:21:52:
                    a3:16:2b:bb:4b:14:0f:1c:5a:1d:46:23:5f:e4:b0:
                    40:c3:6d:9f:1a:de:bd:85:95:38:e6:2d:f8:bf:69:
                    c7:d7:82:64:95:7b:ac:05:25:16:1f:5f:e3:c3:ee:
                    84:7e:08:88:d2:28:af:89:c9:76:f1:d9:cf:9e:83:
                    4b:b3:76:d1:1f:c7:b5:fc:0f:63:74:cc:24:90:7d:
                    15:13:bd:ed:33:54:a9:17:8f:20:52:6b:55:32:d5:
                    4a:f5:34:18:9a:6d:b4:ff:63:79:58:47:6b:e6:e2:
                    04:84:4a:bd:08:c0:14:a6:68:18:e3:2f:0f:50:fb:
                    e5:74:55:80:3d:35:1e:10:9f:09:0d:2b:11:4b:45:
                    aa:1f:44:cf:e2:b8:f7:6d:43:9c:91:51:15:1e:02:
                    a3:ca:4f:ea:ad:7d:e8:0a:f0:56:e5:1c:10:4b:64:
                    25:70:bf:67:14:12:53:0d:c2:04:9e:45:6f:86:01:
                    f0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AB:BB:DC:F2:0E:E5:B3:08:61:27:9F:4D:50:BC:20:48:41:1B:B9
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130342e302f32312d3231203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:ae:a6:b6:b7:ec:33:4c:00:7f:44:7b:8d:49:0e:a9:9f:dc:
         d4:81:a8:61:49:2c:23:eb:10:cd:53:a3:a0:85:b5:0c:5a:55:
         b1:6d:69:d3:1b:d7:16:8d:74:7b:e9:e6:fe:bb:f7:04:df:0d:
         56:f5:d2:c6:e5:5b:3f:c6:fd:52:dc:f5:89:3e:8b:8e:4e:fc:
         a2:09:d0:0d:d9:2b:df:c2:b8:54:ab:e0:5d:3a:a6:43:af:fe:
         fe:9e:04:1a:57:89:d7:46:a7:50:4d:15:c0:a2:a9:7d:38:98:
         8d:3f:2d:d3:23:20:20:f0:a2:ba:d0:fc:e5:a7:78:2c:36:26:
         9c:d3:82:ac:ad:a4:ab:59:ae:47:5d:79:57:c3:a0:0c:9c:03:
         b3:7e:a4:b3:43:9f:70:0d:47:a3:ef:c3:58:c6:74:a5:73:f0:
         29:0c:f2:14:22:b4:e6:13:8c:bc:1d:08:ca:4b:df:12:a0:27:
         e4:6a:18:cd:56:33:40:52:8c:fe:a1:c3:57:13:c0:41:0a:1e:
         95:47:22:22:64:0d:60:a1:89:8c:a6:c7:63:d4:e0:1f:ee:6a:
         71:a4:6e:e9:6c:16:30:6c:82:05:da:27:f7:36:3e:3d:7c:a6:
         f4:f4:0a:bf:9b:39:e2:a1:77:6e:f7:2c:1b:99:24:68:8b:a5:
         a7:0d:17:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:26 2025 by rpki-client