Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37312e302f32342d3234203d3e203131393231.roa
File:                     3230302e3233332e37312e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          X1jB8qSofMjXRBd/BbUU1VX/z3f0tv2/H36SkZ+QjYg=
Subject key identifier:   3E:93:35:CD:FB:93:4E:D2:5F:CF:08:62:94:5B:3C:63:7F:CB:4F:E8
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       0992B825A228C7F69D6729588374D3BFCB85D187
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37312e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:39:15 +0000
ROA not before:           Wed 31 Jul 2024 13:34:15 +0000
ROA not after:            Wed 30 Jul 2025 13:39:15 +0000
asID:                     11921
IP address blocks:        200.233.71.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:92:b8:25:a2:28:c7:f6:9d:67:29:58:83:74:d3:bf:cb:85:d1:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:34:15 2024 GMT
            Not After : Jul 30 13:39:15 2025 GMT
        Subject: CN=3E9335CDFB934ED25FCF0862945B3C637FCB4FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:02:76:cc:22:e0:b6:83:77:f2:7c:56:54:4b:
                    df:08:3f:71:6d:5f:ed:d6:de:19:ac:1d:78:63:9b:
                    0c:28:69:15:6a:c6:90:9a:94:74:85:86:4f:47:93:
                    12:fd:4c:1b:e5:8e:4f:32:8e:28:5c:83:8f:82:bc:
                    f7:19:fd:75:89:8a:f0:5e:76:26:99:08:4d:58:71:
                    ff:99:a2:8b:bb:ce:17:8d:d4:c0:b5:de:75:0c:3b:
                    14:b5:20:47:6e:7f:53:91:d7:8c:cd:12:09:2f:47:
                    0c:57:ec:b8:98:16:bc:c4:ed:05:31:fd:4d:0b:7d:
                    f9:86:5f:d3:2c:1a:51:73:f6:be:f4:e5:3c:1d:f5:
                    ea:e2:65:ab:b4:91:09:64:a6:ac:b3:22:91:bc:d8:
                    bc:b2:62:67:bb:bb:11:31:8d:1d:87:ac:40:d2:33:
                    33:3a:b4:1c:39:37:52:87:57:33:2a:41:d5:fa:e1:
                    df:4c:b5:ee:b3:3a:12:26:fa:4a:a5:59:19:5b:ea:
                    ab:d6:11:02:53:95:b8:44:8a:8a:bd:5f:78:68:f8:
                    cb:87:be:e3:9a:99:86:b9:d6:ff:56:3f:be:32:de:
                    b8:51:5b:d5:48:50:91:87:77:92:71:10:17:7b:39:
                    4a:02:c6:6c:24:84:98:fb:20:12:f4:0d:5a:d4:65:
                    02:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:93:35:CD:FB:93:4E:D2:5F:CF:08:62:94:5B:3C:63:7F:CB:4F:E8
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37312e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:f4:2f:3f:f9:a2:13:a8:a0:c8:e9:89:4a:c9:42:5e:98:92:
         66:e2:3c:72:31:74:97:a7:01:a3:96:41:3c:b9:4b:0c:d7:58:
         8c:fa:37:b4:ff:9d:49:ee:eb:98:57:9f:5a:ce:54:a7:6a:45:
         a3:88:77:c7:b4:85:63:18:99:e7:08:3a:9a:51:a7:de:29:55:
         e3:a0:b7:b0:e8:6a:f9:42:19:c7:40:ea:6a:cd:f8:19:61:70:
         9d:5e:31:d5:c7:b7:69:4f:94:92:7d:47:f5:e8:44:a8:1c:15:
         41:71:bf:3a:79:95:2d:7e:47:ce:57:76:47:48:3b:34:6d:b8:
         78:fa:5c:49:7b:98:d0:91:c1:5d:3a:70:ea:19:20:f8:ce:4f:
         1d:5d:9f:63:3c:37:1b:64:c6:e3:02:6e:7c:78:88:8a:15:86:
         e7:ec:ef:7f:f7:28:dd:ba:9b:ab:ca:be:fb:a6:f9:00:02:aa:
         28:92:ce:32:c6:d3:e2:c5:a0:0f:63:b5:40:df:76:52:c2:5e:
         9f:3b:66:f9:af:32:12:c0:d1:80:86:20:b5:37:71:7f:4d:67:
         b9:3d:34:5b:64:64:70:3a:88:ca:3a:5a:27:dc:27:00:8c:71:
         f1:31:27:a3:d8:1d:66:d6:7a:97:27:e1:58:6a:f3:41:83:08:
         84:e9:a3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:27:53 2025 by rpki-client