Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36342e302f32342d3234203d3e203131393231.roa
File:                     3230302e3233332e36342e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          Fup52drDJYPlew7yR9KHnv/DDp+xAZg7/F5Pn03/PXs=
Subject key identifier:   98:85:BD:A7:D9:52:75:C5:94:DF:76:8F:45:9B:2F:DA:38:CC:82:08
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       52792FEFAB0E52186FD41A6C6E57EB2F2DB404CE
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36342e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:39:12 +0000
ROA not before:           Wed 31 Jul 2024 13:34:12 +0000
ROA not after:            Wed 30 Jul 2025 13:39:12 +0000
asID:                     11921
IP address blocks:        200.233.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:79:2f:ef:ab:0e:52:18:6f:d4:1a:6c:6e:57:eb:2f:2d:b4:04:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:34:12 2024 GMT
            Not After : Jul 30 13:39:12 2025 GMT
        Subject: CN=9885BDA7D95275C594DF768F459B2FDA38CC8208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:26:25:4c:78:72:c6:00:fb:65:f8:85:c5:1b:
                    52:94:ff:40:9e:5d:b2:9f:3b:34:27:4e:25:bd:85:
                    c2:67:37:e5:77:a4:7d:d2:73:89:e0:e1:cf:4b:03:
                    93:83:b9:af:be:79:d6:a4:c8:93:cd:ba:f5:c0:3c:
                    20:20:75:f6:64:54:06:ed:50:d8:5b:74:6d:6c:ed:
                    51:ee:71:b2:6b:83:a4:8e:12:c8:58:91:11:76:1e:
                    0e:e9:18:38:9a:30:c3:eb:ae:cc:23:8e:15:a1:6c:
                    e3:50:0e:63:8b:76:b7:03:cc:77:37:3b:b4:bc:60:
                    6e:4a:51:78:4a:ee:96:9b:ce:4a:62:20:63:b0:10:
                    df:4f:96:5b:33:5e:b4:3b:5b:e6:09:cc:d9:8c:7a:
                    89:c3:41:f1:60:fa:8b:57:f3:d9:6a:65:68:ca:ff:
                    dd:c3:c8:62:d6:b7:07:f1:bc:2a:3d:ef:a0:40:ff:
                    e9:d3:48:a8:1b:ae:b1:ca:da:c9:c5:f0:b9:e7:cf:
                    e7:de:e1:17:e1:8a:4e:13:65:f7:36:08:74:09:40:
                    84:99:10:ab:87:d2:0c:8d:d7:0c:45:56:a5:f5:c3:
                    24:15:0d:09:dc:77:71:a5:70:d3:4e:39:8a:bd:93:
                    de:2c:10:d6:7a:9b:dd:c8:d4:a5:0a:57:cf:7f:c7:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:85:BD:A7:D9:52:75:C5:94:DF:76:8F:45:9B:2F:DA:38:CC:82:08
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36342e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:28:2a:fd:6c:02:91:f5:fc:b4:ba:82:49:9d:a4:2c:d0:e4:
         0a:45:88:43:98:c2:e1:dc:c5:e6:70:4e:87:aa:e0:c9:88:e5:
         f7:4d:5a:c2:ff:03:6b:95:d6:46:e7:72:f6:95:ad:94:64:f4:
         8a:ac:ab:5a:dd:d0:18:cc:01:47:9a:8b:09:c9:db:46:34:4c:
         a1:30:0d:c7:06:f1:b8:ed:6e:ad:b8:d2:6d:dc:5a:c3:02:5a:
         f9:16:07:77:ea:34:92:5b:19:cb:a6:d4:75:19:0c:ad:f3:f5:
         bf:d4:25:84:44:6a:42:58:19:3e:f7:32:cf:6f:a4:e6:9d:8e:
         3b:68:23:90:ae:da:34:47:6a:dd:68:d3:67:1e:57:85:17:59:
         08:70:d1:a7:d7:ba:07:7a:be:0b:05:2f:ff:d0:7f:2f:b2:06:
         7e:2f:70:b5:67:53:7e:7d:75:f8:f2:7b:c0:1c:87:49:88:9c:
         99:44:41:57:11:69:90:99:32:8e:6d:92:99:92:89:b4:2c:94:
         cd:1d:f5:53:6e:26:4e:12:b5:a4:3e:44:28:ec:c4:5d:2e:8e:
         88:22:e9:f1:08:1c:31:1e:8d:88:a8:c3:f8:6a:28:50:64:d8:
         cb:ba:36:ad:68:bc:d9:56:9b:0a:25:6c:1a:64:dd:2b:ad:6a:
         f2:71:a6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:17:51 2025 by rpki-client