Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3132382e302f32312d3231203d3e203131393231.roa
File:                     3230302e3135302e3132382e302f32312d3231203d3e203131393231.roa (raw, json)
Hash identifier:          zulEZwc7tq89yF90YNSy25WyR4qZ+tPAQ8tTZqNM4dc=
Subject key identifier:   29:FB:82:DC:26:3C:B6:C9:3E:F9:39:1B:9F:01:AF:0D:DA:4E:42:F0
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       361ECEF4ABB34B0E183A4B3CA13EB60D855D1413
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3132382e302f32312d3231203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:56 +0000
ROA not before:           Thu 28 Mar 2024 14:36:56 +0000
ROA not after:            Thu 27 Mar 2025 14:41:56 +0000
asID:                     11921
IP address blocks:        200.150.128.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1e:ce:f4:ab:b3:4b:0e:18:3a:4b:3c:a1:3e:b6:0d:85:5d:14:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:56 2024 GMT
            Not After : Mar 27 14:41:56 2025 GMT
        Subject: CN=29FB82DC263CB6C93EF9391B9F01AF0DDA4E42F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5d:c7:2c:8c:a1:ec:53:0d:10:92:94:16:18:
                    82:ce:b5:df:88:a2:f3:ba:f3:3a:f4:5f:68:04:dd:
                    a3:a0:b0:fa:61:ce:9b:5a:dc:a3:dc:a8:1d:6a:6d:
                    7d:30:ca:5f:44:07:1e:10:34:fd:1f:66:82:0d:d9:
                    73:6b:ce:81:19:e0:77:ec:27:5f:43:e9:73:ce:ef:
                    2b:14:9a:6b:0d:a1:c6:5f:52:39:cc:51:ec:12:cc:
                    86:59:80:4e:10:2c:7f:1c:8b:ab:a0:e4:31:8f:98:
                    fd:29:2b:10:7c:59:6f:c0:9c:b4:24:a3:e7:50:8e:
                    f7:c7:ba:73:43:12:0d:01:f1:ba:73:a7:29:63:8c:
                    af:e1:00:a8:bb:7b:3d:cb:d2:f8:06:f7:a5:d0:a9:
                    6f:72:9f:cb:f8:be:5e:a6:44:fb:d9:97:ef:65:45:
                    84:63:84:9f:0e:23:3d:2e:50:0a:1c:32:7d:f1:37:
                    a2:b8:df:f2:50:07:2b:a6:87:ad:68:81:ed:23:5a:
                    f1:80:63:b1:7e:49:3f:6e:9f:65:7f:cc:cf:c9:e6:
                    47:5e:c2:c4:ed:19:06:65:d5:97:df:74:f1:a3:c0:
                    31:c6:7b:ee:bd:ce:2e:33:09:0d:df:f6:eb:b7:c1:
                    13:32:0e:07:54:c8:d2:a7:4b:d8:7e:ed:0e:3c:d9:
                    2f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FB:82:DC:26:3C:B6:C9:3E:F9:39:1B:9F:01:AF:0D:DA:4E:42:F0
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3132382e302f32312d3231203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:cc:f6:14:61:b9:84:75:48:c8:bc:10:55:2c:72:a3:cd:ce:
         cf:23:76:d6:24:3c:2d:96:01:ca:0d:93:79:e7:63:4d:76:bf:
         d4:43:ab:77:e9:d3:db:ab:ab:48:ba:ec:6a:06:aa:98:1f:3b:
         7f:17:96:7e:13:14:f7:09:c0:f9:7b:ac:2b:8c:54:f7:5c:d8:
         92:14:2b:23:63:ee:3c:bf:ad:eb:1a:fb:fd:c3:22:3e:2b:79:
         35:88:2f:54:f5:06:70:4c:61:8e:8b:10:31:2f:5c:ac:62:df:
         b6:05:54:8c:c8:d6:e4:4a:47:df:7b:41:39:ff:f4:10:cf:66:
         97:8c:12:15:59:4a:e4:f1:3a:64:b6:3e:83:6a:64:6c:a5:93:
         3e:ee:7b:c7:63:8b:56:2f:7b:a0:7f:9f:75:7d:ea:df:ee:af:
         12:45:ca:b0:e1:d7:2e:35:7a:95:06:02:0c:10:a4:94:d5:35:
         1d:22:9c:e7:94:a6:db:ca:91:9a:75:88:e3:d4:50:0d:e3:fb:
         f6:cf:ef:db:67:93:af:c7:e9:39:26:3f:bc:95:6a:cd:37:aa:
         69:ed:6f:d4:fa:de:39:fb:e5:eb:8d:d5:42:c2:55:ba:3e:b1:
         96:3a:58:7a:9d:eb:60:cd:18:43:33:05:77:67:bc:a2:10:37:
         3e:b2:bf:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org