Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130342e302f32322d3232203d3e203131393231.roa
File:                     3230302e3139342e3130342e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier:          qaFZLuNzmNe1MHnRTJHUJEDYZ/hnuIIDeXMOaLungZg=
Subject key identifier:   C6:24:BE:F1:DB:C5:71:53:90:4B:9F:90:AA:F7:5C:CF:BC:AB:8A:0E
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       2BF220DA3D3B923BBC597E400AF0C6F963CD837D
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130342e302f32322d3232203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:56 +0000
ROA not before:           Thu 28 Mar 2024 14:36:56 +0000
ROA not after:            Thu 27 Mar 2025 14:41:56 +0000
asID:                     11921
IP address blocks:        200.194.104.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:f2:20:da:3d:3b:92:3b:bc:59:7e:40:0a:f0:c6:f9:63:cd:83:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:56 2024 GMT
            Not After : Mar 27 14:41:56 2025 GMT
        Subject: CN=C624BEF1DBC57153904B9F90AAF75CCFBCAB8A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:19:06:b6:d2:6b:ac:26:fe:69:28:c3:83:6e:
                    6d:1b:16:28:11:8e:c2:9f:fa:fe:3b:97:21:67:c0:
                    45:5f:dd:b2:3d:3f:79:f6:ba:b1:9f:e7:f3:a4:6c:
                    16:28:18:61:4f:7d:b3:b3:5e:6e:6b:f5:e8:88:fc:
                    73:da:8e:b9:f2:69:05:5d:c4:3f:68:5d:f4:d2:47:
                    b0:07:91:34:09:8b:f7:59:cd:9e:04:3f:d6:44:47:
                    12:49:9b:9c:8d:1c:b6:d2:18:bd:43:18:d8:db:39:
                    19:b6:cb:d9:21:a2:be:30:bb:04:9c:34:d5:af:f2:
                    77:ce:ee:4a:5a:9c:53:89:b5:78:7a:85:e4:d1:93:
                    32:22:88:b5:48:27:1a:94:7c:0d:61:1f:03:90:03:
                    30:d0:bd:94:c1:2d:39:4f:6b:d7:aa:f4:ef:40:b5:
                    74:cc:8f:7d:7a:a0:37:91:f6:6d:e8:b7:d9:46:f2:
                    89:0d:84:71:29:b6:5c:82:2c:54:b8:59:dd:c2:e3:
                    ab:47:a5:68:af:af:d7:c0:8e:45:7d:4e:7a:82:9f:
                    10:76:d0:b2:25:2c:01:ce:eb:79:70:45:47:3c:01:
                    9b:0f:2c:83:e9:ba:2e:25:cd:aa:fe:ef:ec:62:47:
                    ef:08:fb:7f:d3:c8:d6:d8:76:0a:d8:29:32:3b:98:
                    27:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:24:BE:F1:DB:C5:71:53:90:4B:9F:90:AA:F7:5C:CF:BC:AB:8A:0E
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130342e302f32322d3232203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:f8:fe:ee:6d:38:1f:cc:ce:f2:9e:17:36:77:c6:b5:0f:0e:
         94:cc:26:6c:16:7f:8c:c1:ac:d8:7c:6b:e7:f7:fb:e9:18:aa:
         cc:02:6a:55:9a:98:23:ac:af:e3:f6:09:9b:e5:4f:f5:a1:17:
         23:84:36:e1:d2:bb:1b:8d:be:3f:5c:90:8f:11:4f:12:b0:b2:
         de:a6:b9:8f:0c:ab:c7:c8:a4:02:bd:76:c1:0f:55:b6:fe:6d:
         8f:8d:eb:d6:be:78:0b:b4:3b:71:dd:86:58:bb:f6:0f:86:d5:
         be:22:38:cc:8e:db:52:cb:1c:24:1a:86:3e:71:e6:ba:fd:ca:
         b4:87:29:67:cd:d0:47:dc:6c:89:a3:7e:5e:9a:0f:7d:63:7e:
         de:1e:a1:2a:8e:ac:5d:6a:e9:43:db:93:03:58:a5:9b:20:91:
         7d:27:23:5c:e9:b8:b9:e9:6c:1a:53:8e:9f:e9:c2:50:94:a1:
         11:56:e1:16:01:55:27:2e:e7:09:92:51:3d:d4:65:c1:8c:65:
         1d:b4:59:05:18:c8:57:e5:91:10:6a:70:5d:51:ec:4e:40:b0:
         4e:98:65:9d:7f:c7:8b:91:94:2d:60:01:9c:d4:5e:08:93:fa:
         98:3d:80:9b:76:9f:a0:6a:17:df:12:08:a7:f3:1b:df:6c:cb:
         e8:23:b0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:49 2025 by rpki-client