Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e39382e302f32332d3233203d3e203131393231.roa
File:                     3230302e3139342e39382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          tgEIcNlJX2AI5tHBNimkhWaz5qmKNcTH5u9/SziNjm0=
Subject key identifier:   EA:C9:91:36:1F:B1:41:1D:21:35:09:72:5C:85:2C:CF:6C:3F:53:7B
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       2D8055DF39390B2CD8B1846232589759CAF400E6
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e39382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:57 +0000
ROA not before:           Thu 28 Mar 2024 14:36:57 +0000
ROA not after:            Thu 27 Mar 2025 14:41:57 +0000
asID:                     11921
IP address blocks:        200.194.98.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:80:55:df:39:39:0b:2c:d8:b1:84:62:32:58:97:59:ca:f4:00:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:57 2024 GMT
            Not After : Mar 27 14:41:57 2025 GMT
        Subject: CN=EAC991361FB1411D213509725C852CCF6C3F537B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:9c:ba:13:a2:ad:37:61:9e:27:cc:54:b2:
                    a2:cc:bf:43:0c:3a:db:37:84:c0:0c:d1:cf:4b:20:
                    4f:07:3a:13:1a:75:69:b3:64:33:72:57:e6:b1:21:
                    06:3b:c3:15:01:d7:d2:bb:aa:5d:7a:62:1d:b9:ad:
                    4f:ea:ae:17:0e:e7:7e:44:20:88:e0:19:6c:2c:00:
                    bf:f1:86:d8:eb:04:ce:0a:25:bc:d4:17:b3:93:22:
                    1a:b2:59:ac:cd:cc:39:4a:4b:f4:bd:ee:29:9f:a9:
                    0d:af:ec:bd:b8:1f:53:7c:fd:f4:1c:26:23:cf:ea:
                    61:e9:5f:a6:58:0d:a7:61:50:f1:a0:ba:ba:f9:b2:
                    8c:eb:65:9b:29:63:6d:ac:f5:e0:97:9f:5e:8e:9c:
                    92:ea:62:0f:81:20:bb:27:78:e9:e1:ad:c3:bf:e6:
                    7b:e9:52:e7:02:60:4c:df:f1:22:a0:79:b1:9d:74:
                    60:ec:84:13:57:1a:c8:b5:87:20:1e:3a:e8:f3:0e:
                    a5:8a:30:ad:30:17:7f:ed:b5:9c:80:41:3e:c3:04:
                    06:35:6b:89:ed:b4:56:84:7c:59:37:b7:b0:d7:4c:
                    4f:e2:c4:87:e5:28:bf:58:c6:c0:ff:44:41:27:a6:
                    31:f7:b8:fe:2a:7f:d7:05:eb:76:40:25:f2:d2:22:
                    64:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C9:91:36:1F:B1:41:1D:21:35:09:72:5C:85:2C:CF:6C:3F:53:7B
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e39382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:2d:3f:cc:2b:ce:30:14:72:bb:9f:d3:f4:fc:54:83:9b:1e:
         42:0c:a8:16:d6:ce:b2:14:47:95:53:c6:97:1f:f2:a7:08:b2:
         b0:f7:fc:20:47:89:a1:94:af:9f:df:0d:1f:fe:a4:fd:6d:8c:
         e9:aa:04:bd:8d:d3:67:d8:7c:a2:58:ce:9e:aa:6b:4e:9a:dc:
         9e:90:39:bb:f8:06:8a:3c:e5:87:33:f1:3b:1c:00:74:66:54:
         75:8b:fa:09:25:af:08:2f:b1:a3:a6:f7:11:6a:9f:b3:0d:e7:
         0c:0e:89:de:c1:72:3c:cc:c9:02:cc:7a:57:d8:5a:f6:08:c7:
         ae:0a:66:6b:f9:35:78:f8:6b:d3:9b:15:c4:d6:a7:bf:10:68:
         d6:14:3d:46:9a:db:50:a5:9d:d3:fb:de:5e:ef:77:4e:4b:58:
         f2:35:02:89:08:20:1f:13:ec:5d:c6:a6:7a:59:eb:ff:2f:e2:
         e4:78:bf:ec:78:6d:72:30:18:63:66:4a:f7:46:dc:c9:61:b4:
         8e:0b:ad:13:43:ac:49:42:2e:2c:93:de:3a:dd:b7:f9:d0:b4:
         8d:54:37:78:75:01:92:ae:5b:8a:6f:f3:09:2f:14:81:cf:09:
         04:d3:dd:94:1d:e1:ed:9d:98:0f:59:39:a2:ab:90:c4:2d:53:
         70:21:da:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:41 2025 by rpki-client