Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3132382e302f32332d3233203d3e203131393231.roa
File:                     3230302e3135302e3132382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          05pnQYnBvD7Hzc913z4nnWAMYteGrs5b3svx//JGqxs=
Subject key identifier:   5F:52:7F:A7:E6:70:76:74:9B:FA:DC:C9:51:36:72:E8:48:41:DF:EC
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       5B762756176C99F794695964EC8BF87388D0CF37
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3132382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 17:41:58 +0000
ROA not before:           Thu 28 Mar 2024 17:36:58 +0000
ROA not after:            Thu 27 Mar 2025 17:41:58 +0000
asID:                     11921
IP address blocks:        200.150.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:76:27:56:17:6c:99:f7:94:69:59:64:ec:8b:f8:73:88:d0:cf:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 17:36:58 2024 GMT
            Not After : Mar 27 17:41:58 2025 GMT
        Subject: CN=5F527FA7E67076749BFADCC9513672E84841DFEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:65:17:4f:aa:6f:00:31:16:1e:ee:97:30:db:
                    1b:d6:81:9e:48:87:a6:cf:bd:23:b1:92:23:f2:bd:
                    72:d3:ef:0a:98:16:e3:81:8d:dd:bf:72:7c:a8:91:
                    e4:3b:84:0e:a9:c3:fa:08:0c:33:ce:f4:ff:24:c2:
                    b9:98:23:a0:c1:69:d5:a1:f5:e3:a2:92:a8:f7:9e:
                    c8:9d:1b:62:ba:cc:c0:e3:30:f7:a8:5c:6b:9e:e7:
                    8d:fa:80:c6:3b:e0:7a:8b:b5:19:98:f9:bf:d2:f4:
                    b0:20:f3:44:cb:6c:40:2b:09:43:c2:f3:97:fa:08:
                    2c:b8:7f:3e:df:3d:24:2c:0e:c7:6f:38:19:e9:37:
                    15:66:ed:b7:d9:50:c3:3a:75:3e:c6:3e:77:94:81:
                    c1:01:db:da:d8:cf:51:dc:a6:6e:22:f7:eb:f1:1c:
                    d1:de:0b:ca:a1:63:4b:fd:4b:cc:d3:c3:4b:e1:67:
                    a6:93:7f:57:cb:c3:7f:e0:75:a1:29:83:6a:ef:fa:
                    bb:25:ad:ec:36:af:0b:6f:83:e3:a8:7f:08:b2:73:
                    32:28:ab:f9:91:11:a4:03:c1:82:56:af:e4:c6:07:
                    55:d3:5c:1d:51:2e:c9:7d:1f:9f:b8:da:92:87:bc:
                    a8:88:40:ce:ca:8e:0a:42:75:cf:4c:4a:e9:5b:82:
                    7f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:52:7F:A7:E6:70:76:74:9B:FA:DC:C9:51:36:72:E8:48:41:DF:EC
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3132382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:c4:ea:77:c9:da:ae:dd:f0:98:9d:ca:ad:07:95:c6:b7:df:
         90:93:ed:d7:db:69:c9:ad:db:02:5e:77:2d:a3:5f:6a:4b:9c:
         0c:ed:eb:a4:b7:0e:9f:b5:6b:25:65:29:80:4b:24:52:d7:c7:
         34:97:95:9a:92:12:69:c5:48:b4:f8:52:df:b0:c3:01:05:0b:
         c3:d3:af:29:a9:b5:be:92:8f:4f:22:54:55:1f:6d:29:fa:13:
         e5:6b:74:02:d2:15:0f:51:8c:a0:28:50:eb:37:08:5a:45:4d:
         d6:dd:e3:9b:4f:f0:3b:c9:32:4d:02:ca:a1:3f:c0:09:81:20:
         38:4f:73:28:dc:e0:db:06:17:00:af:4d:fc:b0:cf:98:2a:c9:
         66:19:3a:b0:f6:be:3b:9a:db:1c:62:eb:47:4e:3c:05:c1:de:
         8e:2c:88:88:69:8f:da:31:ef:cc:08:a6:af:4d:bc:30:e4:2c:
         40:73:79:ff:1d:be:20:46:e7:c8:38:a6:27:80:9a:70:f1:b1:
         82:e6:9a:af:c4:f7:01:50:4a:fb:8a:86:b0:17:b5:90:52:82:
         71:fc:e6:00:0f:39:ab:79:ee:c0:6b:fa:a6:36:d2:81:b7:bc:
         4a:4b:a5:33:d8:1e:61:02:c5:28:ed:84:c8:04:dd:ad:f1:3f:
         df:74:4d:38
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUW3YnVhdsmfeUaVlk7Iv4c4jQzzcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczMDYyNDQ0ODA2N0Q4M0U4MzRBRkQxMUU5NjU3REQ4
RTE5OTE5OTAeFw0yNDAzMjgxNzM2NThaFw0yNTAzMjcxNzQxNThaMDMxMTAvBgNV
BAMTKDVGNTI3RkE3RTY3MDc2NzQ5QkZBRENDOTUxMzY3MkU4NDg0MURGRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUZRdPqm8AMRYe7pcw2xvWgZ5I
h6bPvSOxkiPyvXLT7wqYFuOBjd2/cnyokeQ7hA6pw/oIDDPO9P8kwrmYI6DBadWh
9eOikqj3nsidG2K6zMDjMPeoXGue5436gMY74HqLtRmY+b/S9LAg80TLbEArCUPC
85f6CCy4fz7fPSQsDsdvOBnpNxVm7bfZUMM6dT7GPneUgcEB29rYz1Hcpm4i9+vx
HNHeC8qhY0v9S8zTw0vhZ6aTf1fLw3/gdaEpg2rv+rslrew2rwtvg+OofwiyczIo
q/mREaQDwYJWr+TGB1XTXB1RLsl9H5+42pKHvKiIQM7KjgpCdc9MSulbgn+ZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUX1J/p+ZwdnSb+tzJUTZy6EhB3+wwHwYDVR0j
BBgwFoAUlzBiREgGfYPoNK/RHpZX3Y4ZkZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMC85NzMwNjI0NDQ4MDY3RDgzRTgzNEFGRDExRTk2NTdERDhFMTk5MTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MzA2MjQ0NDgwNjdEODNF
ODM0QUZEMTFFOTY1N0REOEUxOTkxOTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzAv
MzIzMDMwMmUzMTM1MzAyZTMxMzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMx
MzEzOTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHIloAwDQYJKoZIhvcNAQELBQADggEBAGTE6nfJ
2q7d8Jidyq0Hlca335CT7dfbacmt2wJedy2jX2pLnAzt66S3Dp+1ayVlKYBLJFLX
xzSXlZqSEmnFSLT4Ut+wwwEFC8PTrymptb6Sj08iVFUfbSn6E+VrdALSFQ9RjKAo
UOs3CFpFTdbd45tP8DvJMk0CyqE/wAmBIDhPcyjc4NsGFwCvTfywz5gqyWYZOrD2
vjua2xxi60dOPAXB3o4siIhpj9ox78wIpq9NvDDkLEBzef8dviBG58g4pieAmnDx
sYLmmq/E9wFQSvuKhrAXtZBSgnH85gAPOat57sBr+qY20oG3vEpLpTPYHmECxSjt
hMgE3a3xP990TTg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org