Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132392e302f32342d3234203d3e203131393231.roa
File:                     3230302e3135302e3132392e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          SH3cmMoPzwOCpmo/kOGhn3zgJ3M8Hg/vwlgddUk1h2Y=
Subject key identifier:   DF:DA:09:6C:4B:30:04:DC:10:57:BC:6F:80:AB:D6:9A:38:95:22:1D
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       4EEE80DD0DF575306D7412987AB73D6D6BEB67A5
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132392e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:35:53 +0000
ROA not before:           Wed 31 Jul 2024 13:30:53 +0000
ROA not after:            Wed 30 Jul 2025 13:35:53 +0000
asID:                     11921
IP address blocks:        200.150.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ee:80:dd:0d:f5:75:30:6d:74:12:98:7a:b7:3d:6d:6b:eb:67:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:30:53 2024 GMT
            Not After : Jul 30 13:35:53 2025 GMT
        Subject: CN=DFDA096C4B3004DC1057BC6F80ABD69A3895221D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:c4:a4:1f:c1:69:37:83:67:37:61:4e:77:
                    e2:84:90:57:cf:fd:bb:47:ec:7f:71:76:e6:38:83:
                    c8:08:19:55:aa:9c:0c:49:6b:d1:40:05:05:01:67:
                    d6:39:73:2e:3f:ed:3b:71:4c:14:e5:1b:d6:9a:43:
                    69:0c:19:64:50:6a:53:2f:e6:e1:39:ce:01:23:b5:
                    1e:87:38:49:1e:f8:60:82:cb:e1:15:3f:e8:1a:38:
                    7a:65:4d:61:ff:f7:dc:94:0e:6d:72:7b:dd:cc:04:
                    24:3b:54:e7:02:0b:52:84:f2:bd:d0:c0:16:a6:2e:
                    d8:a2:f2:b1:03:0b:ad:94:2c:ae:e2:c2:09:80:c7:
                    f8:6e:02:23:bd:a4:c6:ed:7d:bd:a7:42:3f:62:fa:
                    02:4a:f7:72:fd:66:b6:2f:be:6d:d6:68:34:b2:e5:
                    8e:69:91:1c:fa:49:c0:11:d4:28:16:29:6b:a1:f5:
                    2c:91:69:e1:bc:84:9c:4b:e5:aa:f3:84:5c:5a:d9:
                    92:34:1b:6f:56:53:1c:b5:a0:bc:4d:e4:31:43:83:
                    56:a9:10:ab:04:d3:79:53:87:72:0c:78:fb:2c:8f:
                    f4:a9:53:1c:16:28:5d:9d:c7:18:73:4e:25:7f:fa:
                    87:d1:c1:36:59:a1:0d:4b:eb:fc:59:83:e0:10:8c:
                    ff:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:DA:09:6C:4B:30:04:DC:10:57:BC:6F:80:AB:D6:9A:38:95:22:1D
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3132392e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:a1:94:11:6b:a5:b1:44:18:bb:b1:18:fa:d8:56:4c:2e:32:
         d0:96:4c:ff:a6:46:85:14:21:ad:de:9f:65:1b:42:ce:2c:cb:
         c1:1f:47:f3:22:35:f3:39:7b:12:44:69:8c:a5:8f:17:b9:92:
         40:77:6c:b2:13:8d:36:ac:a8:5f:71:33:e1:5a:f7:08:73:99:
         54:b0:e5:bd:f5:90:d3:8a:b8:97:1d:f4:2c:2d:3f:13:23:86:
         61:d7:14:a9:75:d3:9d:e3:32:03:2d:cd:8d:34:c6:c8:0f:32:
         45:b4:38:c8:60:98:4a:92:63:b0:97:0b:cf:5f:41:61:6f:54:
         a3:b1:52:9c:73:71:60:c7:69:ed:a6:7e:1c:04:db:02:50:64:
         23:be:0b:88:90:c2:6a:48:b6:25:d0:d2:8b:bb:ba:da:aa:0e:
         a6:e7:30:d8:fd:50:a0:25:f1:b7:6f:c3:ed:35:ff:2c:95:55:
         24:2b:5a:b8:75:15:14:69:57:f4:05:73:25:c9:45:42:6a:46:
         83:be:8c:48:c6:ca:2c:00:de:a6:c5:0b:d4:ae:31:ed:40:e6:
         a8:0c:11:17:8f:81:25:ed:fa:d8:ec:5a:49:44:74:15:fc:74:
         40:6f:cc:f6:61:c0:1b:a6:a1:27:fa:e1:a3:9e:ae:9e:1a:65:
         dd:b7:a2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:45 2025 by rpki-client