Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133332e302f32342d3234203d3e203131393231.roa
File:                     3230302e3135302e3133332e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          0hiBNbUAGy8//DuyNpql449qXOD82BZsBJjqiJc5jKw=
Subject key identifier:   8A:24:AA:A7:90:45:D3:90:8F:9F:34:51:66:A9:4D:A7:4E:D2:1A:7A
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       4DF542D452183E0084E44428F0A95BA6CDBEDF4D
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133332e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:35:55 +0000
ROA not before:           Wed 31 Jul 2024 13:30:55 +0000
ROA not after:            Wed 30 Jul 2025 13:35:55 +0000
asID:                     11921
IP address blocks:        200.150.133.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f5:42:d4:52:18:3e:00:84:e4:44:28:f0:a9:5b:a6:cd:be:df:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:30:55 2024 GMT
            Not After : Jul 30 13:35:55 2025 GMT
        Subject: CN=8A24AAA79045D3908F9F345166A94DA74ED21A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:6c:02:c5:63:7d:06:78:ac:e3:1e:07:5e:
                    51:35:7d:99:c7:b5:0a:61:48:48:a9:f9:e4:c5:3a:
                    5f:92:56:24:63:ac:22:73:db:8c:4f:e9:15:b5:73:
                    9d:75:d5:d4:98:84:38:79:85:d9:23:b1:2f:58:36:
                    89:f8:04:1b:72:d9:f1:89:bd:6f:4e:4d:89:73:e5:
                    82:30:28:1a:5d:f4:7e:e4:10:42:5a:b3:a4:f2:eb:
                    61:9e:d1:bb:93:90:89:f4:20:26:3c:c6:21:19:16:
                    37:b5:f8:d3:ce:e9:d9:69:40:3d:c2:b0:b7:bf:9f:
                    5a:6c:ed:27:7b:7d:78:d5:4c:93:dc:59:fe:3e:d1:
                    9e:09:08:2c:cf:da:65:0e:cd:e6:30:0b:7f:4b:19:
                    8b:4c:1b:bf:b1:fd:26:6a:45:fb:2e:52:1d:8e:63:
                    bd:ab:13:ea:b7:1f:a8:c8:86:ce:71:ea:5e:92:cd:
                    bd:d7:66:82:59:76:8b:92:46:30:01:65:5f:82:bf:
                    0d:6b:b7:57:53:5d:4d:f2:2e:0c:df:a9:33:87:f2:
                    75:95:fc:24:9d:68:b5:de:e7:9e:e2:8c:3e:fc:33:
                    3f:aa:01:c9:5e:8e:af:dc:0f:4b:7a:d3:aa:1a:ae:
                    51:9b:e2:3a:66:04:d8:b7:66:b2:47:5f:ed:b1:48:
                    08:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:24:AA:A7:90:45:D3:90:8F:9F:34:51:66:A9:4D:A7:4E:D2:1A:7A
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133332e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:0b:8e:f4:22:b2:b9:f1:e5:fc:a9:b3:ff:e1:80:66:a6:07:
         83:c7:ac:e6:24:37:72:12:fc:f9:4d:08:0a:88:64:7e:01:66:
         cb:c9:d0:ed:3a:d0:3b:f0:b2:7d:8b:67:8d:8b:77:68:ca:69:
         d8:09:8b:d0:59:c1:57:39:a2:3f:30:ec:cb:71:cc:7d:66:1d:
         60:ae:18:9d:0a:5e:c7:30:a2:7f:77:ec:29:59:c3:f7:e4:62:
         75:6c:eb:68:44:a0:03:59:e0:85:20:a5:68:c7:8a:30:3e:a9:
         c2:c2:ed:4f:e5:95:96:7f:c6:82:65:1f:47:b3:e4:91:e6:1a:
         81:09:3c:5a:20:d3:55:7a:78:da:81:ae:86:52:6a:c1:97:b4:
         89:40:f6:45:f2:22:4f:b4:6e:ff:a7:36:fc:0d:a7:56:41:07:
         6e:31:0a:24:dd:3c:62:a0:c4:0e:f5:db:bd:82:7d:9d:05:5d:
         c1:da:37:17:52:e5:45:39:66:43:cb:2d:24:b3:2f:72:6d:3d:
         4a:b4:9f:db:73:dc:93:0d:34:36:a4:57:9a:8b:3c:51:64:2b:
         82:6a:1b:5a:b3:46:66:81:5e:44:a1:d2:69:86:32:3a:85:bf:
         6c:ab:da:d0:10:92:73:ec:a2:c1:ce:67:5c:15:52:98:24:12:
         cf:f1:d3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:35:18 2025 by rpki-client