Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36352e302f32342d3234203d3e203131393231.roa
File:                     3230302e3233332e36352e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          NQA5v6+UZAlYOzRiUa4Zb2kfSRGSDTuIXhiwjgoO0oQ=
Subject key identifier:   B3:0F:D5:CA:83:65:9D:21:15:F2:5E:41:50:EC:97:11:CC:23:01:0B
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       6FA73E41934473978FEBECC5B2BB6FD9B0B6D747
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36352e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:39:12 +0000
ROA not before:           Wed 31 Jul 2024 13:34:12 +0000
ROA not after:            Wed 30 Jul 2025 13:39:12 +0000
asID:                     11921
IP address blocks:        200.233.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a7:3e:41:93:44:73:97:8f:eb:ec:c5:b2:bb:6f:d9:b0:b6:d7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:34:12 2024 GMT
            Not After : Jul 30 13:39:12 2025 GMT
        Subject: CN=B30FD5CA83659D2115F25E4150EC9711CC23010B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:18:27:0b:5f:bc:ce:8d:f2:dc:e9:03:44:
                    7d:d4:cc:2a:f8:0d:af:23:4d:1b:16:e2:de:d5:59:
                    54:4f:0a:79:ab:73:eb:8c:ad:c6:e3:98:ff:4a:b6:
                    95:d8:08:e3:78:a6:52:aa:e3:0b:13:51:7d:55:76:
                    d7:1f:d2:c4:e4:24:c4:36:f2:04:4c:cb:72:e1:9e:
                    f2:cd:3e:02:95:1c:db:a9:d5:f0:96:d6:28:ca:b6:
                    25:c0:a3:3a:ab:b8:53:0e:18:7d:27:96:cb:05:e1:
                    cc:c7:eb:42:fe:a3:ba:0d:4d:3e:40:06:66:28:e4:
                    00:13:4e:d3:5f:70:87:db:e8:b2:03:fc:a8:f0:dc:
                    9c:3a:46:b8:85:ee:e6:e2:fa:d9:c8:46:09:c3:fc:
                    80:8c:34:e8:b6:66:8c:69:c6:1e:26:86:88:f7:7b:
                    ed:ab:31:cf:a2:01:fd:f4:45:43:81:42:a3:e0:a4:
                    f2:d3:d0:1c:31:9f:ff:54:0b:89:e1:63:01:0b:03:
                    ac:aa:70:77:6a:be:2c:86:48:c3:9d:de:7e:bc:f1:
                    55:c6:21:bc:65:28:f0:de:7c:e0:81:83:dd:7b:d1:
                    80:d6:10:1f:c4:6d:fb:30:31:49:d6:e7:7a:dc:b3:
                    21:83:ed:b4:17:fd:1f:d6:18:ce:41:c2:a2:c8:b6:
                    37:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0F:D5:CA:83:65:9D:21:15:F2:5E:41:50:EC:97:11:CC:23:01:0B
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e36352e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:85:e3:a8:fc:cd:ce:c7:5d:ee:1b:de:13:b9:93:3c:5f:7b:
         ef:ac:25:79:5d:ce:d1:51:7b:1f:8f:2f:6a:d0:38:95:68:44:
         a9:12:ef:20:60:bb:55:42:ac:40:ae:d0:6f:59:47:f5:c4:14:
         ed:6a:1f:b7:79:82:db:7b:a3:1e:1c:19:87:34:7d:78:04:cf:
         4d:65:f6:4d:72:1a:a7:16:26:46:f4:43:da:37:31:31:22:dd:
         f3:6c:d4:f2:0f:76:a8:fa:05:d7:94:bc:0f:ec:84:8a:bc:08:
         77:e2:55:00:5a:e8:01:8a:86:29:f9:63:a8:cf:fe:d6:4e:ca:
         95:5c:d3:fb:ee:23:3b:9e:19:67:a7:61:3e:4c:1a:97:a6:96:
         11:55:55:0a:08:a7:1e:d6:b7:6c:2c:31:c9:50:74:2f:55:5b:
         c1:a9:3b:0f:8b:8d:01:52:70:12:b3:00:95:21:18:c3:4c:19:
         93:99:ae:04:ad:06:83:1d:94:79:4b:0e:0f:9b:e2:bb:3e:7a:
         e8:28:81:48:cd:cf:69:35:f5:b3:09:74:af:b4:88:b4:55:f7:
         0e:04:cf:6f:27:23:bc:24:48:db:a0:0e:f5:70:78:07:a8:4e:
         c8:69:4d:4a:8c:91:d3:65:8e:47:b7:c7:4d:01:3d:59:31:96:
         48:f9:24:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:32:39 2025 by rpki-client