Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e322e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e322e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          RRrCoz9XHd2kiUDcULBZ84pPuG9lv34FcC7jyjPymqg=
Subject key identifier:   95:82:53:44:67:F0:47:9F:25:77:C6:70:40:BA:9C:4F:0A:EC:95:72
Certificate issuer:       /CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
Certificate serial:       24A63A1AA49B5371EBDFBC4E837B919536FA3D1F
Authority key identifier: D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e322e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 31 Jul 2024 13:42:48 +0000
ROA not before:           Wed 31 Jul 2024 13:37:48 +0000
ROA not after:            Wed 30 Jul 2025 13:42:48 +0000
asID:                     11921
IP address blocks:        201.49.2.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a6:3a:1a:a4:9b:53:71:eb:df:bc:4e:83:7b:91:95:36:fa:3d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79C7E4BAE4953730FE72125E941901AFC590C0B
        Validity
            Not Before: Jul 31 13:37:48 2024 GMT
            Not After : Jul 30 13:42:48 2025 GMT
        Subject: CN=9582534467F0479F2577C67040BA9C4F0AEC9572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:07:c1:df:67:94:56:0e:8e:dd:65:af:e0:d8:
                    ce:9f:41:4e:86:fc:ed:cd:d4:bd:43:71:34:83:cc:
                    e7:bb:a8:95:e8:0b:99:46:6f:ce:e3:dc:4b:2f:d5:
                    88:b5:be:3a:5f:37:bf:5d:d3:cd:70:dd:bb:30:54:
                    7a:23:65:04:a2:97:5c:2d:37:b6:8d:84:3f:a0:51:
                    12:bb:a4:ce:51:09:10:a6:37:d8:0d:0a:e7:43:8b:
                    23:14:af:a4:1a:44:90:25:37:da:7a:b0:74:19:0d:
                    e0:49:dd:4b:53:52:7c:3a:1d:93:80:98:27:59:00:
                    58:51:27:f5:1e:e3:e6:23:1f:eb:94:df:f0:d3:1d:
                    32:2b:fb:79:82:b7:40:b6:b2:41:b5:ee:05:89:b8:
                    0e:5b:63:01:3e:c3:90:95:7a:9c:ba:ea:d8:6c:c4:
                    70:83:5c:cd:b4:ca:90:12:29:fe:49:a5:88:c3:2c:
                    2e:e5:97:27:32:c9:b0:c0:3f:af:3e:1e:c2:11:92:
                    9e:7e:97:30:06:93:02:6e:03:5b:64:9c:c5:50:ad:
                    68:6e:03:42:51:ec:d3:e7:52:5e:6a:28:15:4a:93:
                    98:d7:6d:2a:ff:12:e2:ee:a1:17:41:8a:72:b2:1e:
                    93:ff:14:db:1a:2f:53:10:c3:ae:03:ea:e3:ea:1d:
                    0d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:82:53:44:67:F0:47:9F:25:77:C6:70:40:BA:9C:4F:0A:EC:95:72
            X509v3 Authority Key Identifier:
                keyid:D7:9C:7E:4B:AE:49:53:73:0F:E7:21:25:E9:41:90:1A:FC:59:0C:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D79C7E4BAE4953730FE72125E941901AFC590C0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/1/3230312e34392e322e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:54:d8:43:d3:0e:45:41:61:dc:e5:3b:60:d0:22:7d:73:81:
         e1:ab:0d:14:d5:54:2c:74:2c:a0:83:c8:17:d9:9f:87:17:20:
         05:9a:b7:3f:1b:b2:1f:20:7b:da:2c:c2:b3:cf:55:c6:5c:df:
         31:16:68:ec:d0:0e:06:b7:fa:81:99:dc:9e:f9:3b:ad:17:05:
         fb:90:05:b5:b1:5f:9c:91:8b:0b:56:76:b8:55:fd:ae:f7:38:
         9d:8d:a9:c6:7a:ab:02:45:e7:7e:73:da:65:63:4b:94:1f:56:
         f1:f0:56:c1:71:07:c0:2d:dd:2e:d4:b6:71:55:67:38:1b:17:
         aa:ad:8d:21:e3:42:0c:8e:ca:80:7d:bf:9f:c5:48:ef:22:d8:
         39:99:56:f2:97:49:18:e8:2f:0b:9e:2e:38:1d:fa:32:df:61:
         ca:81:6c:f6:47:b7:ff:07:81:63:a6:a8:40:6c:19:34:bf:bd:
         25:02:c8:78:a1:3b:a4:a3:02:94:ba:ca:60:ba:e7:0b:46:e6:
         08:01:d5:1b:10:97:74:78:25:41:5b:e8:8b:56:a0:6c:a2:0e:
         25:2e:78:72:03:7d:e1:b7:b6:39:8d:62:fd:bf:22:fa:d7:78:
         a0:48:99:df:58:77:51:ed:eb:33:f3:f1:a8:2d:1f:24:d4:6f:
         b5:d4:9c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:41:59 2025 by rpki-client