Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133342e302f32342d3234203d3e203131393231.roa
File:                     3230302e3135302e3133342e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          CwyFJjfCD4vOKYvQTSwD6Si/6CYO9kQzCkzewqbSQdk=
Subject key identifier:   4D:09:AE:8E:91:52:23:FA:47:E7:08:E7:6C:7E:71:98:CB:EE:AD:5E
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       07157E8F046E7927C629D11F65ABA31E342C4F25
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133342e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:35:56 +0000
ROA not before:           Wed 31 Jul 2024 13:30:56 +0000
ROA not after:            Wed 30 Jul 2025 13:35:56 +0000
asID:                     11921
IP address blocks:        200.150.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:15:7e:8f:04:6e:79:27:c6:29:d1:1f:65:ab:a3:1e:34:2c:4f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:30:56 2024 GMT
            Not After : Jul 30 13:35:56 2025 GMT
        Subject: CN=4D09AE8E915223FA47E708E76C7E7198CBEEAD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:30:0f:30:a5:db:8e:7e:fc:2b:61:25:ba:6b:
                    e9:6b:2c:e1:94:49:c8:5c:51:f5:ae:46:15:b8:ae:
                    78:f7:71:9f:b5:2c:ff:bf:27:d4:ea:ed:46:f8:43:
                    13:17:77:fe:a4:7c:39:b2:85:84:5e:7f:1d:83:93:
                    fd:48:44:07:04:b2:15:0f:b3:0d:62:79:7c:1a:16:
                    40:bc:4a:4f:ac:66:af:1f:db:0d:a7:04:d2:bd:7e:
                    4c:22:06:a0:91:8c:84:af:6c:56:21:28:f6:9b:52:
                    89:8e:84:c6:dd:1c:b7:72:2e:d8:5d:64:4b:ac:67:
                    8f:b7:8d:c0:0c:76:7d:14:f8:0a:aa:c7:41:2b:b8:
                    4f:0a:7b:f9:e1:fb:4f:85:59:1a:9c:9c:8f:ad:c4:
                    9c:62:0a:f5:d4:0a:a3:6b:fd:da:9c:66:40:b9:cf:
                    83:ed:4c:5d:ef:7f:45:03:51:09:ba:50:86:90:5a:
                    78:53:51:a2:c0:05:b0:3d:ea:c1:e0:b6:e7:ac:1f:
                    a4:8a:a1:8b:d8:81:8b:f6:81:07:a9:80:63:e6:56:
                    9a:c9:85:5e:26:82:ca:fa:35:a6:34:9f:73:12:c8:
                    7d:ce:4c:3b:ab:fe:65:ae:06:a6:1f:95:e3:04:f9:
                    c8:44:86:ad:e8:ea:52:56:2e:0a:66:00:d0:1c:d3:
                    d4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:09:AE:8E:91:52:23:FA:47:E7:08:E7:6C:7E:71:98:CB:EE:AD:5E
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3135302e3133342e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:d7:ce:8b:7e:30:7e:f4:cc:04:36:a9:e4:b3:21:43:2a:d5:
         88:31:3c:ce:a9:e6:a5:69:56:a5:cf:54:ac:b9:8f:e2:bd:d1:
         56:b3:ab:98:63:91:a7:40:92:0a:31:82:1a:4d:37:36:33:45:
         57:b2:ed:4c:eb:2d:f8:97:ea:58:24:6a:6f:f2:a9:4e:83:fd:
         0d:7e:9a:dc:2b:4c:c7:ff:8d:d7:6f:67:70:b9:ef:ec:17:28:
         f7:36:69:72:dd:c6:28:0c:2c:75:ac:2d:ba:df:08:c5:00:27:
         18:a3:69:25:13:0f:9e:c6:cc:67:d5:d4:24:34:56:4a:e8:2c:
         98:7c:c8:70:89:75:d9:9f:5d:b8:cc:09:dc:4e:41:02:f8:36:
         ee:a4:48:20:69:9e:8c:ee:45:c9:01:98:9f:7b:20:e5:f4:e0:
         ca:4c:83:7a:8b:7a:4e:99:b6:27:a7:d1:33:22:a5:8d:4d:d3:
         35:1c:c3:b2:f1:58:81:bc:58:db:eb:f0:12:ef:b5:d3:b0:18:
         3b:ca:e6:94:57:e7:cc:df:52:07:1a:fd:95:3b:7a:3e:df:25:
         96:86:f1:d4:b3:53:d9:50:b7:93:90:6c:7d:36:4b:f2:77:cc:
         95:c2:6f:03:d1:9e:2c:5d:98:a2:ac:9f:92:82:8c:89:95:53:
         1d:02:37:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:35:25 2025 by rpki-client