Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3132382e302f32322d3232203d3e203131393231.roa
File:                     3230302e3135302e3132382e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier:          n3fMx1BKrixX5QARH6I2FEnGY1XUxXzRK04D24m9bEg=
Subject key identifier:   BE:65:FA:3D:06:D0:FE:11:F4:93:9F:84:98:8A:F0:93:61:B5:B9:7F
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       46DE14966C157595D027A7DC6EAC3E62233D6387
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3132382e302f32322d3232203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:57 +0000
ROA not before:           Thu 28 Mar 2024 14:36:57 +0000
ROA not after:            Thu 27 Mar 2025 14:41:57 +0000
asID:                     11921
IP address blocks:        200.150.128.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:de:14:96:6c:15:75:95:d0:27:a7:dc:6e:ac:3e:62:23:3d:63:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:57 2024 GMT
            Not After : Mar 27 14:41:57 2025 GMT
        Subject: CN=BE65FA3D06D0FE11F4939F84988AF09361B5B97F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dc:9d:c6:e9:99:1b:df:da:26:4c:1f:3d:7b:
                    2e:7c:17:14:cc:44:ce:3f:0c:c0:83:bd:0c:db:20:
                    43:7a:aa:07:b0:15:f0:52:54:48:50:bf:f2:6b:7c:
                    80:86:6c:9c:36:e9:6b:25:42:26:46:f1:91:38:e8:
                    54:f8:4a:77:b0:0d:f6:96:02:24:bf:d1:b7:65:a2:
                    86:b2:43:a6:ef:4a:a5:3a:a5:3f:39:8e:c7:b7:e6:
                    ab:71:f1:0d:aa:19:7f:bb:f5:73:01:da:a8:e9:f2:
                    d8:62:08:6f:89:1c:fc:a8:80:a9:9a:4e:9c:be:73:
                    35:d1:93:25:55:95:b5:9f:df:d0:81:ab:a6:34:30:
                    e0:55:cb:2b:ec:e0:a8:64:05:ef:1d:e0:ea:92:1a:
                    1a:47:c5:2c:0b:7e:aa:b3:d4:cb:bc:67:1a:44:ad:
                    4b:b3:c0:59:d1:fc:4c:68:be:4e:24:a1:7e:a2:67:
                    c2:aa:95:dd:d7:3a:fe:1c:50:69:96:9e:7e:30:dd:
                    9b:2f:7f:fb:a0:66:19:96:bb:0e:e2:7f:cb:e4:65:
                    6c:e4:cb:ed:cc:f4:3f:25:06:34:0a:46:07:0b:44:
                    5c:73:dc:44:1f:eb:c8:cd:9a:17:90:e0:ee:59:79:
                    f2:c7:3d:c7:1d:c0:96:4d:02:e9:63:14:61:a1:a8:
                    8f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:65:FA:3D:06:D0:FE:11:F4:93:9F:84:98:8A:F0:93:61:B5:B9:7F
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3132382e302f32322d3232203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:68:89:f0:9e:22:dd:70:1b:74:49:b1:cc:09:7b:08:ad:8b:
         f3:fb:b4:ea:92:b3:3a:87:47:e0:51:3d:1d:e2:00:3d:56:aa:
         cc:93:d5:ad:61:30:e6:0e:8a:95:0f:8b:07:0a:a6:fc:bd:84:
         e5:d3:fa:f2:04:d2:59:95:3e:4a:2d:80:38:19:ac:63:80:71:
         9b:5f:75:6b:ab:2a:15:ee:5f:67:ed:5c:75:a7:07:a1:e3:fb:
         1f:76:b5:ba:58:c1:36:3e:b9:ac:92:f9:e4:77:79:8c:c9:f0:
         39:0d:48:86:da:ad:b2:88:8d:bf:ca:1f:55:0d:ce:11:27:1c:
         61:90:32:d6:91:03:c2:d9:42:c1:32:74:95:9d:2a:c1:1b:b9:
         2b:91:9b:fa:81:e6:a4:9f:8d:b9:7b:8c:38:39:4a:bd:5a:3d:
         8d:9c:29:01:de:46:ab:fd:8e:0f:01:21:fc:64:1d:df:4c:7e:
         c0:d3:9a:09:54:20:28:af:e2:b9:74:81:d5:25:b8:8d:91:ca:
         65:1b:b5:02:0b:35:42:87:d1:9e:0f:5e:c7:80:9b:62:59:6e:
         cf:70:14:20:9d:e4:00:c2:a8:26:99:6f:e4:cf:b6:2d:22:8b:
         74:08:e5:a8:a3:0f:e2:c2:76:da:7d:78:eb:0c:12:26:5b:b6:
         2a:9e:35:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org