Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37302e302f32342d3234203d3e203131393231.roa
File:                     3230302e3233332e37302e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          Pb5c2WnPBStwLY6yTrLjrW2XfJcijkomtk9sUnestCE=
Subject key identifier:   69:81:FF:34:A0:2D:00:29:86:D8:D6:F9:19:AE:E2:B0:54:DD:8B:53
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       090FC27C862C180726590F8B2B5083F8C83C8420
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37302e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 13 Mar 2024 22:42:09 +0000
ROA not before:           Wed 13 Mar 2024 22:37:09 +0000
ROA not after:            Wed 12 Mar 2025 22:42:09 +0000
asID:                     11921
IP address blocks:        200.233.70.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0f:c2:7c:86:2c:18:07:26:59:0f:8b:2b:50:83:f8:c8:3c:84:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 13 22:37:09 2024 GMT
            Not After : Mar 12 22:42:09 2025 GMT
        Subject: CN=6981FF34A02D002986D8D6F919AEE2B054DD8B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cb:d4:a0:3d:3d:7e:31:3b:dc:a2:5f:fa:4e:
                    c4:2d:14:5c:3e:99:70:d4:cf:94:be:92:34:0e:1a:
                    cd:7f:be:46:90:91:7d:9c:39:2c:b7:16:bb:da:cc:
                    8c:bf:05:76:27:98:40:98:8b:3d:f1:cc:91:ad:56:
                    30:8b:16:52:e8:c1:1d:3d:3e:4f:2e:05:a2:2a:b5:
                    c0:30:a9:73:5d:af:c9:9f:f0:ef:87:b3:e8:eb:a8:
                    68:1a:85:49:c2:4e:4b:2d:bc:7a:65:54:67:76:13:
                    e2:d6:7a:5f:e4:12:8c:cc:c4:33:c3:f1:d7:b8:34:
                    cd:80:b9:3d:f6:51:07:e4:8b:f9:1c:bc:c7:f5:8f:
                    ab:69:0b:2b:7b:8a:f4:2d:3c:cc:07:c5:a1:1d:91:
                    8d:14:5b:6c:69:b5:ba:c1:8d:b9:36:89:68:d4:05:
                    90:39:09:dc:37:35:d0:4b:47:38:e0:29:cc:86:a8:
                    60:9d:3d:de:d3:f5:6e:0e:9a:89:c7:ec:9e:05:8f:
                    67:2d:52:fe:43:ff:c9:67:97:d1:b1:db:6d:1e:72:
                    be:56:72:3d:79:c3:88:52:7b:6e:29:2f:5c:5b:2c:
                    dc:d7:ce:80:fa:d0:f5:98:96:18:15:78:64:3d:3f:
                    3b:aa:b8:c4:35:2d:c6:c0:55:9f:7b:4c:05:d6:30:
                    01:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:81:FF:34:A0:2D:00:29:86:D8:D6:F9:19:AE:E2:B0:54:DD:8B:53
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37302e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:9e:95:09:7f:15:45:d9:2c:37:30:e0:6c:9d:25:bf:4d:46:
         7a:00:2b:c4:f1:8f:31:b8:25:da:9c:98:c1:be:6e:55:e2:3a:
         2a:dc:07:55:88:b6:57:e0:d1:04:62:68:03:59:11:5d:f7:95:
         9c:12:fc:2d:13:67:92:f6:e1:45:1b:da:a9:e8:c8:74:13:f3:
         66:17:04:3c:8b:f7:5a:4e:ac:07:3a:91:44:62:8a:97:4f:ba:
         ec:10:2f:5d:43:95:94:b8:c9:8b:00:ca:65:6e:06:de:34:a1:
         83:29:6e:86:c9:c3:47:65:e0:6d:fd:07:c1:e8:e7:f3:87:c0:
         b3:27:47:c8:b4:0c:67:1f:3c:4c:0a:ba:f5:9b:66:e7:31:01:
         07:43:fd:0b:d4:1f:27:96:a0:b7:53:13:7d:21:84:a0:c1:f7:
         cb:99:a1:c6:27:12:8b:70:b6:39:4c:72:43:ab:7c:f8:20:15:
         46:ec:5f:35:0e:66:22:9b:e1:5b:ed:17:5b:86:36:a9:ca:d8:
         bc:ef:ec:28:c5:cd:a0:0e:7e:b9:a5:dc:3a:28:73:b1:bf:f0:
         10:5c:88:0b:b6:cf:d4:a8:35:9c:19:03:a5:ea:45:6d:8e:c3:
         14:e4:b4:29:51:97:0c:78:75:15:41:5f:72:1a:b1:26:3f:b2:
         01:aa:d5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:07 2025 by rpki-client