Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3230302e35332e33302e302f32342d3234203d3e203533303632.roa
File:                     3230302e35332e33302e302f32342d3234203d3e203533303632.roa (raw, json)
Hash identifier:          SpWMQe0WW1dfdCVwqa69EFwz9g9I3ngHNMNojgRMzTU=
Subject key identifier:   2D:02:1A:6B:A0:3C:03:49:20:DA:5A:00:97:B9:1D:AD:20:43:4F:C1
Certificate issuer:       /CN=FD7279E1669A4C13E1BF1D2511A91E03406FA0E2
Certificate serial:       099055A471B7739D42137C5DAF0850A859FB778A
Authority key identifier: FD:72:79:E1:66:9A:4C:13:E1:BF:1D:25:11:A9:1E:03:40:6F:A0:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3230302e35332e33302e302f32342d3234203d3e203533303632.roa
Signing time:             Mon 10 Feb 2025 19:17:45 +0000
ROA not before:           Mon 10 Feb 2025 19:12:45 +0000
ROA not after:            Mon 09 Feb 2026 19:17:45 +0000
asID:                     53062
IP address blocks:        200.53.30.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:90:55:a4:71:b7:73:9d:42:13:7c:5d:af:08:50:a8:59:fb:77:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD7279E1669A4C13E1BF1D2511A91E03406FA0E2
        Validity
            Not Before: Feb 10 19:12:45 2025 GMT
            Not After : Feb  9 19:17:45 2026 GMT
        Subject: CN=2D021A6BA03C034920DA5A0097B91DAD20434FC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:6f:a4:1f:08:3b:fd:19:df:36:57:99:4a:
                    cd:8e:49:8b:41:51:4c:68:60:bd:3c:02:f9:fd:71:
                    f5:49:33:5e:8c:38:e0:df:70:57:41:1c:4d:57:9d:
                    75:3c:f9:41:10:8f:8b:41:91:4a:21:ad:2d:54:e4:
                    98:37:fb:7d:bb:4a:41:99:2d:89:8b:d0:e7:0d:00:
                    8c:21:86:fa:89:94:54:17:27:9a:63:29:fb:8e:a6:
                    cf:81:6a:1b:c5:1f:71:7b:61:8b:98:7d:d8:a4:6a:
                    d1:7c:fa:21:7c:08:f2:9c:c7:86:59:9e:5b:5c:6a:
                    fb:a3:d1:ce:a7:43:ad:7b:b9:c5:b9:0a:b8:b9:f5:
                    c5:97:a7:89:bd:17:d1:e7:8b:e1:ae:44:3f:c7:8d:
                    b2:8f:ca:6e:41:55:9d:19:05:65:9d:9c:f0:9e:66:
                    2f:79:e3:8f:5d:2f:df:93:4f:a8:9f:ad:22:ca:46:
                    6e:40:86:27:75:14:81:24:fe:16:3d:6f:80:a4:0b:
                    91:21:77:6a:21:ea:34:80:51:09:f1:f9:a4:69:30:
                    7a:74:8d:01:5a:a5:75:c9:fb:92:bf:7e:e0:d9:ef:
                    ab:2a:f4:1b:ef:47:5e:08:97:45:d5:31:53:f4:da:
                    7b:00:47:07:68:cd:1b:fc:3c:f6:35:19:0d:93:1b:
                    ee:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:02:1A:6B:A0:3C:03:49:20:DA:5A:00:97:B9:1D:AD:20:43:4F:C1
            X509v3 Authority Key Identifier:
                keyid:FD:72:79:E1:66:9A:4C:13:E1:BF:1D:25:11:A9:1E:03:40:6F:A0:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD7279E1669A4C13E1BF1D2511A91E03406FA0E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3230302e35332e33302e302f32342d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:ae:cc:03:28:00:bc:df:fc:d9:9a:c2:f0:8e:c7:f2:52:f3:
         15:88:0a:8b:bb:04:9f:6c:a2:f4:e6:49:09:ec:0d:4c:47:ba:
         f8:0a:d8:f3:42:e5:17:3d:cf:4d:7b:4d:00:0b:bd:71:a4:61:
         3e:06:e0:52:65:81:64:15:43:40:7e:cf:b7:1f:73:ef:f4:81:
         5c:9b:0f:a4:2e:3f:d1:12:25:e2:a0:f4:38:95:dc:e0:da:cd:
         2a:55:f3:4a:23:b0:05:3d:7c:02:08:39:f2:e0:d6:e0:b2:e1:
         c9:9b:d8:be:5e:16:9d:8c:15:84:1e:aa:2a:80:0c:1a:4e:27:
         91:1d:09:cf:21:6d:f4:e2:03:48:e6:30:98:01:35:9c:e8:7e:
         9c:55:e0:28:56:d3:3c:5d:4e:1f:f0:8e:81:c4:bc:46:cc:ec:
         c6:68:ad:a1:9c:8e:ad:b9:37:a6:ec:8e:10:b8:1a:2f:5d:65:
         80:30:ca:72:c5:36:04:23:42:d6:26:26:ab:89:cc:2c:ef:41:
         38:0a:5f:40:14:0b:c7:58:b2:16:1b:05:c1:93:7c:d3:18:af:
         a3:93:d0:2a:ad:5e:d9:ef:d7:d7:76:1a:32:dc:f7:be:48:18:
         91:d7:27:59:6d:ef:ca:d6:a4:13:f3:6b:38:25:c9:8d:b8:5e:
         db:5b:89:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:21:35 2025 by rpki-client