Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31312e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e31312e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          nu+GSq9enQRvZ/jjLpFKXwN578CLHTt2TYRmu7gTUso=
Subject key identifier:   C9:86:15:B4:C8:B2:BE:EE:78:11:82:EB:60:9F:E5:3C:B0:D1:61:72
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       27935AAD28D13D9B3A637B512363481376CD6801
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31312e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:42:52 +0000
ROA not before:           Wed 31 Jul 2024 13:37:52 +0000
ROA not after:            Wed 30 Jul 2025 13:42:52 +0000
asID:                     11921
IP address blocks:        201.49.11.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:93:5a:ad:28:d1:3d:9b:3a:63:7b:51:23:63:48:13:76:cd:68:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:37:52 2024 GMT
            Not After : Jul 30 13:42:52 2025 GMT
        Subject: CN=C98615B4C8B2BEEE781182EB609FE53CB0D16172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:91:d0:eb:d8:18:e8:2e:34:37:54:f6:92:e9:
                    9b:d7:ac:39:e8:af:06:85:34:47:1e:94:cc:b4:82:
                    db:c5:8a:7a:e8:ef:ea:e2:44:54:e7:dd:dc:50:fa:
                    71:11:34:4d:c6:d9:de:97:d0:ff:79:f2:95:1a:37:
                    ef:4e:6f:3c:41:e6:69:58:79:c4:45:e8:1f:b2:0c:
                    95:da:be:1b:8f:8d:cb:79:44:89:a8:02:2c:23:37:
                    53:16:e4:a4:01:b1:67:26:d1:be:ad:6b:a8:17:18:
                    ed:72:77:ec:37:76:56:53:16:d6:83:e2:e0:a1:99:
                    5b:97:73:8f:51:46:c0:87:c6:70:9e:3b:00:c3:85:
                    37:c5:e7:06:be:7e:f0:97:7a:20:6c:9d:45:03:ec:
                    e0:12:38:83:ee:c0:af:26:26:b7:bf:7e:e4:24:b4:
                    91:23:21:2f:df:7f:5e:ce:02:2e:56:a3:06:bb:53:
                    09:cb:a4:90:98:64:53:90:6b:3f:03:a5:bd:00:b6:
                    d8:34:18:f2:96:d1:c4:82:71:86:92:89:16:e3:e4:
                    9f:2a:f1:ab:5d:32:34:91:5e:be:10:5d:a8:b9:d0:
                    78:e4:b4:b4:df:68:30:d1:30:d1:13:73:d3:59:16:
                    3a:c5:17:7b:07:f9:3e:dc:a8:38:38:aa:64:30:6d:
                    f1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:86:15:B4:C8:B2:BE:EE:78:11:82:EB:60:9F:E5:3C:B0:D1:61:72
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31312e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:6f:57:e1:e7:af:3f:30:40:dc:a9:fa:a5:5d:58:80:c4:0b:
         1a:82:6c:3f:e3:64:5b:3c:82:02:9e:56:a7:fd:1d:9f:e6:09:
         23:fe:65:3e:5f:de:37:3c:39:52:ce:f0:4c:c0:8b:94:05:fc:
         46:29:10:61:ac:64:82:53:ed:4c:ea:4a:d5:0e:b3:82:f7:42:
         ef:88:7c:6a:7e:38:2b:88:47:38:36:a2:37:00:c5:34:de:ca:
         ee:a0:00:1d:41:f4:a6:ba:c7:53:96:8b:64:18:88:b0:2b:ed:
         14:49:a6:de:10:4c:8b:27:8a:eb:d7:3c:05:41:52:11:1c:26:
         45:b5:e0:1f:17:31:53:25:8e:8a:c8:dd:79:e7:f6:26:da:e6:
         52:6e:c9:68:54:f9:e0:ad:e3:a9:5b:24:c4:ab:24:d6:ab:2c:
         7e:b9:58:50:46:b3:6e:ce:5b:f2:e9:de:d3:41:2b:06:4e:40:
         bc:40:bc:a4:02:a3:65:a1:d6:46:6e:c8:05:7a:6b:68:f3:25:
         b4:3a:e7:01:c5:b9:97:ad:2a:61:38:5d:12:62:aa:1e:01:83:
         16:f2:55:97:25:83:3c:66:fe:21:25:6a:a3:32:17:3d:6a:8f:
         51:b1:06:95:9e:de:65:fa:3f:5e:86:6d:90:43:02:77:d0:32:
         ea:19:9f:1c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJ5NarSjRPZs6Y3tRI2NIE3bNaAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5QzdFNEJBRTQ5NTM3MzBGRTcyMTI1RTk0MTkwMUFG
QzU5MEMwQjAeFw0yNDA3MzExMzM3NTJaFw0yNTA3MzAxMzQyNTJaMDMxMTAvBgNV
BAMTKEM5ODYxNUI0QzhCMkJFRUU3ODExODJFQjYwOUZFNTNDQjBEMTYxNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTkdDr2BjoLjQ3VPaS6ZvXrDno
rwaFNEcelMy0gtvFinro7+riRFTn3dxQ+nERNE3G2d6X0P958pUaN+9ObzxB5mlY
ecRF6B+yDJXavhuPjct5RImoAiwjN1MW5KQBsWcm0b6ta6gXGO1yd+w3dlZTFtaD
4uChmVuXc49RRsCHxnCeOwDDhTfF5wa+fvCXeiBsnUUD7OASOIPuwK8mJre/fuQk
tJEjIS/ff17OAi5Wowa7UwnLpJCYZFOQaz8Dpb0Attg0GPKW0cSCcYaSiRbj5J8q
8atdMjSRXr4QXai50HjktLTfaDDRMNETc9NZFjrFF3sH+T7cqDg4qmQwbfFZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUyYYVtMiyvu54EYLrYJ/lPLDRYXIwHwYDVR0j
BBgwFoAU15x+S65JU3MP5yEl6UGQGvxZDAswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMS9ENzlDN0U0QkFFNDk1MzczMEZFNzIxMjVFOTQxOTAxQUZDNTkwQzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3OUM3RTRCQUU0OTUzNzMw
RkU3MjEyNUU5NDE5MDFBRkM1OTBDMEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzEv
MzIzMDMxMmUzNDM5MmUzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMTM5
MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMkxCzANBgkqhkiG9w0BAQsFAAOCAQEAFm9X4eevPzBA
3Kn6pV1YgMQLGoJsP+NkWzyCAp5Wp/0dn+YJI/5lPl/eNzw5Us7wTMCLlAX8RikQ
YaxkglPtTOpK1Q6zgvdC74h8an44K4hHODaiNwDFNN7K7qAAHUH0prrHU5aLZBiI
sCvtFEmm3hBMiyeK69c8BUFSERwmRbXgHxcxUyWOisjdeef2JtrmUm7JaFT54K3j
qVskxKsk1qssfrlYUEazbs5b8une00ErBk5AvEC8pAKjZaHWRm7IBXpraPMltDrn
AcW5l60qYThdEmKqHgGDFvJVlyWDPGb+ISVqozIXPWqPUbEGlZ7eZfo/XoZtkEMC
d9Ay6hmfHA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:15:23 2025 by rpki-client