Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37382e302f32342d3234203d3e203131393231.roa
File:                     3230302e3233332e37382e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          kly24GoyiGjKwaXYnmkfgjJWI3RmyLuZAZUB8TPzmDY=
Subject key identifier:   BF:B3:04:00:F6:1F:B8:98:8A:B4:3B:EE:26:4F:50:36:46:78:D0:7C
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       0E53F2146540B5A81B512D5FDAF50243BE3D84C7
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37382e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:40:31 +0000
ROA not before:           Wed 31 Jul 2024 13:35:31 +0000
ROA not after:            Wed 30 Jul 2025 13:40:31 +0000
asID:                     11921
IP address blocks:        200.233.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:53:f2:14:65:40:b5:a8:1b:51:2d:5f:da:f5:02:43:be:3d:84:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:35:31 2024 GMT
            Not After : Jul 30 13:40:31 2025 GMT
        Subject: CN=BFB30400F61FB8988AB43BEE264F50364678D07C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:7c:73:85:e7:e6:52:37:33:41:4e:e6:c4:20:
                    88:a1:61:da:83:84:d5:83:14:d5:fa:82:86:4d:52:
                    67:33:81:60:85:54:30:90:75:9b:46:3a:d6:8c:32:
                    1f:1e:85:5c:e8:d6:39:42:94:e8:f7:16:44:72:5c:
                    c9:0c:56:db:0d:04:41:e2:7d:a6:69:af:a4:d5:1c:
                    25:85:ec:95:bb:ea:bd:dc:bd:ee:56:ee:0e:15:c9:
                    ba:29:2c:b4:cc:df:4c:ec:b0:ab:c5:c6:07:f8:88:
                    fa:c3:89:4b:ba:af:54:6e:1d:27:13:9b:2c:3a:43:
                    4b:f5:ef:b8:cc:73:f3:b0:ef:d3:aa:78:1e:b7:15:
                    c2:f4:3d:5a:e9:3d:de:05:cb:06:c7:a5:a9:d7:91:
                    4c:d7:05:82:3f:52:9f:fc:4e:36:3c:a8:96:17:32:
                    3c:4f:92:26:45:01:b4:30:4d:7d:eb:7b:44:12:8f:
                    27:9d:81:9a:41:02:f0:58:c1:52:c3:dd:b6:b3:85:
                    cb:42:58:5e:7c:bd:0b:4b:39:15:a4:de:59:17:67:
                    bb:ba:f5:68:22:57:bd:75:a5:15:c2:28:2b:d7:d1:
                    ca:c9:0b:92:1f:7c:83:d8:5e:13:0f:c1:19:72:a2:
                    c7:a4:93:97:c5:9d:92:f6:d6:91:92:bb:64:10:81:
                    e7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B3:04:00:F6:1F:B8:98:8A:B4:3B:EE:26:4F:50:36:46:78:D0:7C
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230302e3233332e37382e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:d4:71:4e:43:29:cb:29:53:05:5a:f9:fd:f4:4d:e1:17:d6:
         14:b5:6a:25:a1:4f:b7:19:1c:10:ca:ab:9b:f1:b5:fe:c5:99:
         1b:7f:80:97:a8:e9:8c:0f:81:be:5d:b7:87:8e:2d:f0:d2:a1:
         0b:fd:52:74:83:06:de:df:4b:51:b9:df:c7:47:f1:cc:4f:df:
         a7:10:43:8b:fa:f2:d9:e9:47:10:19:1f:02:57:35:87:1a:da:
         96:34:e7:e4:64:67:f4:f1:2f:c3:89:cf:08:d2:fb:93:ed:8f:
         20:2c:d1:c6:80:4b:c3:57:fa:89:ef:cb:7b:d2:97:ca:98:6e:
         0f:0e:4f:32:92:54:51:ac:06:82:f4:34:bf:af:71:e8:00:5e:
         55:ca:19:6b:c9:56:48:ad:21:f6:af:28:19:82:32:59:1d:80:
         f6:a8:bc:9b:48:1b:d0:0c:b3:d5:47:f9:d5:a4:34:9f:c9:25:
         55:6a:8b:a8:8c:11:7b:a6:eb:71:6e:47:c8:34:9d:30:cd:77:
         2b:66:e6:43:48:d4:05:8f:65:36:fd:2f:39:80:75:11:c1:de:
         46:be:f1:e0:86:8b:b8:09:f5:f7:6a:ff:cd:de:0e:4b:23:d3:
         37:e6:3a:24:a1:91:a2:35:9a:6c:d0:f7:ea:f0:58:30:19:7e:
         d5:ad:51:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:27:20 2025 by rpki-client