Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130362e302f32342d3234203d3e203131393231.roa
File:                     3230302e3139342e3130362e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          UaMm6Au8pA90Y+1ZDsyqbo48ldgilycr72AfdRZUtQU=
Subject key identifier:   84:1C:0C:2B:14:1D:EE:49:A7:B2:3D:2B:31:A9:AB:3F:5C:E2:A6:38
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       6246EFB165D51A82E1B51A3EDD01DABB80915834
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130362e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:33:58 +0000
ROA not before:           Wed 31 Jul 2024 13:28:58 +0000
ROA not after:            Wed 30 Jul 2025 13:33:58 +0000
asID:                     11921
IP address blocks:        200.194.106.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:46:ef:b1:65:d5:1a:82:e1:b5:1a:3e:dd:01:da:bb:80:91:58:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:28:58 2024 GMT
            Not After : Jul 30 13:33:58 2025 GMT
        Subject: CN=841C0C2B141DEE49A7B23D2B31A9AB3F5CE2A638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a7:71:a7:4c:00:55:59:6c:6c:d8:08:2e:7c:
                    82:39:eb:fd:2f:a8:d8:64:fa:d2:8e:09:4c:60:50:
                    6a:81:44:c5:c3:28:6f:d8:b3:9a:46:32:8c:67:fb:
                    17:14:3f:c0:63:ee:f5:82:6b:77:be:1e:04:cd:57:
                    7e:52:02:c7:18:f4:0a:83:cd:77:92:ec:30:d2:fa:
                    04:7d:5b:7c:7a:ba:8e:df:05:d8:28:01:84:29:d8:
                    4c:1c:59:3e:36:6f:ad:75:07:e6:4d:33:e2:4f:4f:
                    d5:30:70:ac:11:47:ea:14:52:03:8b:9d:60:bc:7a:
                    81:48:e9:8a:88:7d:1b:fb:4c:e8:67:e9:12:de:6d:
                    19:ab:74:73:d1:20:55:db:4d:4f:ce:b8:98:a0:54:
                    74:0e:1e:d0:da:80:92:c1:c2:38:3c:8c:69:70:17:
                    63:a3:af:fd:c9:28:2d:0a:c6:2d:47:85:39:80:64:
                    ec:d7:39:9b:d6:22:77:4f:aa:90:09:fa:db:41:a7:
                    80:a8:51:5e:8c:c3:00:14:9c:a7:e9:b1:2f:12:e1:
                    b5:ec:01:ca:a8:a8:97:29:ef:92:fe:f7:d3:cb:34:
                    9c:e8:b0:74:73:8e:69:d1:92:75:88:8a:af:5c:00:
                    d3:74:e5:9c:ae:42:e7:ef:d0:1f:b0:48:1e:d6:47:
                    ac:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:1C:0C:2B:14:1D:EE:49:A7:B2:3D:2B:31:A9:AB:3F:5C:E2:A6:38
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3139342e3130362e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:26:a5:2e:9a:7d:a3:25:87:57:51:17:46:cc:33:7f:6c:a4:
         26:3d:23:59:70:3f:1e:3a:04:dd:9b:a1:67:11:d5:19:e3:cf:
         09:11:64:ac:92:cc:ae:9c:34:57:31:ce:7f:bd:41:b2:92:7b:
         69:ee:76:11:77:75:9e:2b:66:08:97:65:1a:49:6a:91:f2:42:
         56:ca:0e:61:c2:75:17:e2:b1:d3:dc:bd:59:3d:15:b3:2a:c0:
         b6:ba:31:d7:ca:0f:1c:51:97:cd:39:71:0d:25:47:5a:d5:ec:
         4d:67:f3:e6:88:f8:18:a6:74:f6:76:d0:d2:07:6d:3b:71:6e:
         70:3b:49:50:7f:25:99:97:9f:2a:ad:a8:2d:9c:1b:1f:32:42:
         4b:d0:b6:3e:39:18:8d:97:cb:ff:7d:94:9b:4d:51:7f:15:d1:
         80:24:75:f7:50:a9:c3:46:29:5c:db:36:54:4e:86:6b:69:5a:
         90:00:11:7c:44:c4:79:89:08:d7:3a:15:59:4f:45:03:fb:a8:
         5b:cc:0a:51:a7:f8:98:0b:3b:fb:4f:6e:fa:25:18:09:9d:85:
         60:ca:4c:ea:1f:dd:93:86:79:52:12:92:d3:7d:70:99:4e:89:
         c1:b4:bb:9d:e8:6c:52:68:8b:f6:dc:f1:7a:47:6c:98:14:81:
         15:d1:81:c4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYkbvsWXVGoLhtRo+3QHau4CRWDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA3MzExMzI4NThaFw0yNTA3MzAxMzMzNThaMDMxMTAvBgNV
BAMTKDg0MUMwQzJCMTQxREVFNDlBN0IyM0QyQjMxQTlBQjNGNUNFMkE2MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSp3GnTABVWWxs2AgufII56/0v
qNhk+tKOCUxgUGqBRMXDKG/Ys5pGMoxn+xcUP8Bj7vWCa3e+HgTNV35SAscY9AqD
zXeS7DDS+gR9W3x6uo7fBdgoAYQp2EwcWT42b611B+ZNM+JPT9UwcKwRR+oUUgOL
nWC8eoFI6YqIfRv7TOhn6RLebRmrdHPRIFXbTU/OuJigVHQOHtDagJLBwjg8jGlw
F2Ojr/3JKC0Kxi1HhTmAZOzXOZvWIndPqpAJ+ttBp4CoUV6MwwAUnKfpsS8S4bXs
AcqoqJcp75L+99PLNJzosHRzjmnRknWIiq9cANN05ZyuQufv0B+wSB7WR6wBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhBwMKxQd7kmnsj0rMamrP1zipjgwHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMwMmUzMTM5MzQyZTMxMzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMx
MzEzOTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIwmowDQYJKoZIhvcNAQELBQADggEBABEmpS6a
faMlh1dRF0bMM39spCY9I1lwPx46BN2boWcR1RnjzwkRZKySzK6cNFcxzn+9QbKS
e2nudhF3dZ4rZgiXZRpJapHyQlbKDmHCdRfisdPcvVk9FbMqwLa6MdfKDxxRl805
cQ0lR1rV7E1n8+aI+BimdPZ20NIHbTtxbnA7SVB/JZmXnyqtqC2cGx8yQkvQtj45
GI2Xy/99lJtNUX8V0YAkdfdQqcNGKVzbNlROhmtpWpAAEXxExHmJCNc6FVlPRQP7
qFvMClGn+JgLO/tPbvolGAmdhWDKTOof3ZOGeVISktN9cJlOicG0u53obFJoi/bc
8XpHbJgUgRXRgcQ=
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:35:36 2025 by rpki-client