Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31322e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e31322e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          Y3oFWXulQBFl8WzETdywrfT8iMnbQiWYgoM8zrLSnxU=
Subject key identifier:   40:08:13:A7:D5:BB:2B:2B:F9:BF:D0:53:A6:6F:9C:EE:09:56:7D:94
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       195FB8AEE87FD875B7C6108190A63126972F19AD
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31322e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:42:53 +0000
ROA not before:           Wed 31 Jul 2024 13:37:53 +0000
ROA not after:            Wed 30 Jul 2025 13:42:53 +0000
asID:                     11921
IP address blocks:        201.49.12.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5f:b8:ae:e8:7f:d8:75:b7:c6:10:81:90:a6:31:26:97:2f:19:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:37:53 2024 GMT
            Not After : Jul 30 13:42:53 2025 GMT
        Subject: CN=400813A7D5BB2B2BF9BFD053A66F9CEE09567D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ad:6d:e7:9d:89:4d:6a:c5:90:33:5f:0a:7f:
                    b1:a6:92:38:77:48:9b:40:6e:33:c9:a5:5b:5f:2b:
                    22:5d:d9:94:6c:8a:27:a8:cd:c5:03:af:fd:7c:e1:
                    e9:18:d3:1d:8c:94:f8:95:c4:77:e0:ae:ae:52:be:
                    a3:47:a2:d3:75:6a:d1:0d:16:7c:b2:62:03:eb:cc:
                    c0:46:e9:19:74:11:20:e5:d8:ba:41:fa:8a:dd:6a:
                    13:48:5a:04:84:4d:02:1a:0d:f4:7a:7f:11:4f:4b:
                    36:ef:92:c6:c3:ae:98:47:69:c1:81:92:03:73:78:
                    e4:ab:81:83:36:01:16:b9:9d:8b:27:27:6d:91:96:
                    9e:9c:0d:1e:78:d5:f2:9c:67:8a:09:e4:c2:3f:7f:
                    d2:d1:8d:9a:f0:f8:34:f3:fa:4b:1d:8f:a0:2c:7e:
                    03:ca:b2:33:fc:90:ec:a9:8e:5a:a5:d3:27:67:29:
                    3a:a7:d7:2d:aa:4e:49:13:53:13:be:b7:44:51:54:
                    a2:bc:4d:a4:56:ff:ac:61:98:ac:fb:f3:bd:be:c1:
                    ce:e0:29:61:e0:bc:c6:07:27:38:40:ef:8f:fa:0f:
                    a5:5e:ac:7d:a5:c9:59:5a:51:d7:18:56:97:66:9f:
                    69:3e:2a:fb:8b:4d:56:45:c5:9f:be:53:22:a8:07:
                    04:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:08:13:A7:D5:BB:2B:2B:F9:BF:D0:53:A6:6F:9C:EE:09:56:7D:94
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e31322e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:35:2d:32:b7:2b:78:b4:35:05:fa:b9:d1:af:c9:1e:f0:4a:
         28:3d:49:f8:78:a7:fb:99:81:5a:1a:04:48:4b:35:8f:86:78:
         5e:ac:a3:f9:4e:66:02:41:be:37:cd:84:43:51:72:fb:68:3c:
         2f:e9:a2:34:e1:3e:cd:47:47:42:2d:ac:1c:da:bc:0e:30:01:
         d0:b8:1a:e0:35:ff:ab:29:0a:db:b9:5c:4d:af:aa:60:85:8d:
         39:90:cb:a1:f7:37:20:79:24:ac:ff:c8:fc:b8:ce:fe:cf:34:
         0d:ec:9d:dd:f3:d7:41:8a:33:95:73:4a:3d:17:04:b0:20:f8:
         7a:9a:ea:46:2e:f7:ea:d8:a1:6a:9f:28:ad:9d:62:6c:24:df:
         d0:3d:0a:3e:4e:36:1d:b3:c4:e6:58:77:29:54:c0:52:21:60:
         5c:3c:ed:87:ad:99:82:00:cb:26:35:00:64:79:e9:10:d8:64:
         89:23:f8:c6:4b:fd:b2:de:0e:52:57:30:4e:b3:7d:d4:db:c4:
         3f:a1:eb:44:00:d0:2f:2d:71:83:fb:ba:44:78:37:d9:ec:ef:
         6b:ee:e6:1f:06:b8:78:e4:a1:b4:b0:e2:3a:93:a8:5d:d6:19:
         36:85:fe:39:12:10:da:c0:a1:63:22:ce:d8:f8:8c:6e:c2:f6:
         c2:a2:24:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:11:49 2025 by rpki-client