Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3133302e302f32332d3233203d3e203131393231.roa
File:                     3230302e3135302e3133302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          GtbvLPcjvOIPn84Tfiww3CJ2mL9bcOULBKa9Omjpspw=
Subject key identifier:   55:ED:0B:10:A1:EA:AA:24:D2:5B:F8:03:D7:86:E0:B7:D7:59:2F:60
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       4EFDD01E7E0A4989B5E091270508A3940701B40A
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3133302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 17:41:58 +0000
ROA not before:           Thu 28 Mar 2024 17:36:58 +0000
ROA not after:            Thu 27 Mar 2025 17:41:58 +0000
asID:                     11921
IP address blocks:        200.150.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fd:d0:1e:7e:0a:49:89:b5:e0:91:27:05:08:a3:94:07:01:b4:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 17:36:58 2024 GMT
            Not After : Mar 27 17:41:58 2025 GMT
        Subject: CN=55ED0B10A1EAAA24D25BF803D786E0B7D7592F60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:36:e2:83:8a:09:ef:47:22:1a:7f:fc:2f:75:
                    3d:3f:c9:2f:4b:46:b4:6f:d2:d3:9c:86:0d:e6:72:
                    e5:dc:42:24:41:c8:2b:bb:9e:fe:e9:04:58:10:66:
                    c7:5d:b0:56:62:8b:6c:89:3d:4d:7b:97:99:49:8d:
                    76:39:1c:67:d8:a3:29:3a:93:41:68:93:09:0c:35:
                    4c:bb:3a:ee:f7:b7:48:d1:b3:68:f9:d2:2b:7e:e7:
                    d2:37:ce:60:3a:b1:0b:cb:7e:22:59:9d:02:fa:11:
                    69:bc:fa:40:ac:df:2a:33:2e:19:98:c0:fb:33:4e:
                    77:ed:15:bf:b4:d0:36:cd:e7:e0:dd:a4:67:87:8c:
                    dd:d8:09:ea:b7:80:06:9a:ea:df:96:ff:61:39:0f:
                    fa:ef:1e:64:f2:eb:48:f2:7e:44:4b:b5:3a:b3:55:
                    26:9a:c4:8e:0b:bb:fd:56:a3:59:49:1d:20:9a:93:
                    64:79:2d:34:76:ff:77:65:57:9a:7f:92:40:c4:88:
                    e5:8a:ff:ae:64:bb:27:71:d4:37:22:00:e0:c1:cb:
                    b0:ff:37:80:33:95:55:c8:1d:51:90:53:77:84:cc:
                    c5:60:e2:59:16:7f:0f:a4:03:e7:58:8a:e4:72:d9:
                    9d:69:14:a7:81:8f:8f:00:cc:d8:79:8e:35:a4:b8:
                    31:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:ED:0B:10:A1:EA:AA:24:D2:5B:F8:03:D7:86:E0:B7:D7:59:2F:60
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3133302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:b5:7c:8b:a3:37:50:ca:09:8a:f7:c8:37:fd:b2:bb:0b:74:
         a5:27:e3:56:f1:a9:7e:3a:c2:1b:4a:0e:2e:15:1e:73:6e:de:
         b7:2a:3e:fe:5d:c2:7c:5f:49:63:15:d2:02:4b:c4:6b:7d:a1:
         62:91:1f:36:78:1e:66:b6:8e:45:7b:e5:15:95:b4:be:9e:55:
         ba:e4:3b:74:7c:1d:fb:c0:55:a2:c6:2e:32:5c:bc:60:05:0a:
         87:84:92:36:7f:34:35:fb:9b:7d:27:e3:dd:72:60:4d:c9:c5:
         97:bd:c6:0d:08:12:b9:93:58:f7:31:de:92:2a:ab:04:7a:a7:
         ba:69:b3:d2:01:44:64:7d:37:82:56:44:ff:3e:c4:56:e3:7e:
         3c:a4:80:59:c4:28:2b:6f:34:83:32:36:fe:8f:a5:7b:c6:b1:
         f7:30:88:b9:ad:cd:01:db:a0:44:43:a6:7a:49:fd:75:46:b3:
         68:14:42:f7:66:f9:bd:bc:82:e9:cb:01:90:d3:3d:df:87:eb:
         1e:94:d2:b1:70:20:d9:72:e2:8b:2d:1d:f8:bb:8b:be:e1:e6:
         d4:e6:6e:5a:8a:89:00:5e:26:44:0e:52:bd:a1:ba:7d:be:ee:
         ad:2e:c9:47:45:c5:57:28:cc:08:e4:e9:d2:86:1d:d8:2c:ec:
         9e:d7:1b:43
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTv3QHn4KSYm14JEnBQijlAcBtAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczMDYyNDQ0ODA2N0Q4M0U4MzRBRkQxMUU5NjU3REQ4
RTE5OTE5OTAeFw0yNDAzMjgxNzM2NThaFw0yNTAzMjcxNzQxNThaMDMxMTAvBgNV
BAMTKDU1RUQwQjEwQTFFQUFBMjREMjVCRjgwM0Q3ODZFMEI3RDc1OTJGNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NuKDignvRyIaf/wvdT0/yS9L
RrRv0tOchg3mcuXcQiRByCu7nv7pBFgQZsddsFZii2yJPU17l5lJjXY5HGfYoyk6
k0FokwkMNUy7Ou73t0jRs2j50it+59I3zmA6sQvLfiJZnQL6EWm8+kCs3yozLhmY
wPszTnftFb+00DbN5+DdpGeHjN3YCeq3gAaa6t+W/2E5D/rvHmTy60jyfkRLtTqz
VSaaxI4Lu/1Wo1lJHSCak2R5LTR2/3dlV5p/kkDEiOWK/65kuydx1DciAODBy7D/
N4AzlVXIHVGQU3eEzMVg4lkWfw+kA+dYiuRy2Z1pFKeBj48AzNh5jjWkuDEPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUVe0LEKHqqiTSW/gD14bgt9dZL2AwHwYDVR0j
BBgwFoAUlzBiREgGfYPoNK/RHpZX3Y4ZkZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMC85NzMwNjI0NDQ4MDY3RDgzRTgzNEFGRDExRTk2NTdERDhFMTk5MTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MzA2MjQ0NDgwNjdEODNF
ODM0QUZEMTFFOTY1N0REOEUxOTkxOTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzAv
MzIzMDMwMmUzMTM1MzAyZTMxMzMzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMx
MzEzOTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHIloIwDQYJKoZIhvcNAQELBQADggEBAJW1fIuj
N1DKCYr3yDf9srsLdKUn41bxqX46whtKDi4VHnNu3rcqPv5dwnxfSWMV0gJLxGt9
oWKRHzZ4Hma2jkV75RWVtL6eVbrkO3R8HfvAVaLGLjJcvGAFCoeEkjZ/NDX7m30n
491yYE3JxZe9xg0IErmTWPcx3pIqqwR6p7pps9IBRGR9N4JWRP8+xFbjfjykgFnE
KCtvNIMyNv6PpXvGsfcwiLmtzQHboERDpnpJ/XVGs2gUQvdm+b28gunLAZDTPd+H
6x6U0rFwINly4ostHfi7i77h5tTmblqKiQBeJkQOUr2hun2+7q0uyUdFxVcozAjk
6dKGHdgs7J7XG0M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org