Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3133362e302f32312d3231203d3e203131393231.roa
File:                     3230302e3135302e3133362e302f32312d3231203d3e203131393231.roa (raw, json)
Hash identifier:          DIFD0AqNUFjodlvTm9DknvRo+5FTprW5PEZKAAkAvEQ=
Subject key identifier:   FF:13:F1:FF:D6:86:93:70:ED:F7:21:AD:3F:7F:ED:CC:D3:4E:40:5E
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       1B482487E7B69C894367132258ACFD962E170504
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3133362e302f32312d3231203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:58 +0000
ROA not before:           Thu 28 Mar 2024 14:36:58 +0000
ROA not after:            Thu 27 Mar 2025 14:41:58 +0000
asID:                     11921
IP address blocks:        200.150.136.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:48:24:87:e7:b6:9c:89:43:67:13:22:58:ac:fd:96:2e:17:05:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:58 2024 GMT
            Not After : Mar 27 14:41:58 2025 GMT
        Subject: CN=FF13F1FFD6869370EDF721AD3F7FEDCCD34E405E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:99:75:b6:f3:5f:9e:c4:4c:88:0a:98:f2:70:
                    54:2b:a6:57:33:c8:9a:8f:7a:3b:2d:3b:5c:5f:c1:
                    43:fb:a4:8f:3b:c5:3b:04:b8:2f:ea:a7:4f:d6:c6:
                    0e:bc:1c:1d:c8:45:f5:37:75:ab:38:2e:60:ae:d1:
                    24:77:2d:b7:23:0f:8b:10:32:1a:af:2b:9a:6f:01:
                    9b:3b:e3:bd:19:b5:da:b0:03:f6:ff:b5:1b:f5:16:
                    25:24:e6:fe:66:03:50:9b:63:39:b7:d5:93:8e:0a:
                    c9:96:14:ee:21:5c:04:55:af:19:05:a0:0e:5b:eb:
                    7f:61:2d:fc:ec:93:68:ab:b0:9e:4b:8f:d6:2d:c6:
                    1c:72:83:7c:c8:0b:d8:79:12:4a:49:d8:0c:a4:13:
                    39:fd:ad:3c:f4:c8:fc:da:94:44:45:e8:f9:fb:4c:
                    74:06:8d:b5:9b:dd:ed:07:6a:27:68:30:04:02:df:
                    05:cb:98:73:85:13:a1:c9:c5:97:53:88:ef:ec:80:
                    d3:5b:ec:2b:ef:ac:3e:14:6d:40:62:56:bd:5b:9c:
                    b7:3d:37:23:30:67:8a:99:3e:b0:31:39:92:ef:21:
                    ef:52:df:63:cb:9f:5e:56:60:0d:96:ac:d5:41:c8:
                    b0:d6:00:17:bd:81:d2:ef:00:58:8d:45:00:06:b0:
                    06:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:13:F1:FF:D6:86:93:70:ED:F7:21:AD:3F:7F:ED:CC:D3:4E:40:5E
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3133362e302f32312d3231203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:c2:a9:48:a9:5c:76:d4:22:9e:4c:aa:cd:67:c7:41:b2:98:
         33:b5:ba:8b:94:18:a9:cf:c3:e5:5d:5f:3d:a9:d4:ea:ff:c5:
         2b:92:1f:78:2d:ca:d3:33:54:f8:2c:9f:56:f2:55:59:c9:0f:
         a3:7e:df:37:ba:73:96:1f:43:75:4f:46:e5:82:3e:47:86:bc:
         b4:02:4a:18:40:9b:c4:d5:ce:c3:04:21:5c:8d:d7:01:66:7a:
         79:a9:7a:e5:19:9d:0e:3d:24:6d:ef:c9:90:51:a6:3b:4c:fa:
         0e:af:2a:93:d6:bb:a6:22:a6:b8:c3:69:f7:8f:3f:c8:09:47:
         d3:ab:ad:28:02:fa:c3:ba:32:e0:e0:37:1d:e5:9c:3d:6c:31:
         64:2d:a7:f7:43:59:1d:04:12:ac:0e:0e:7c:e6:19:53:79:1f:
         f6:6b:64:f4:f9:3e:be:63:5f:12:c2:9f:d5:42:11:29:75:39:
         e1:01:ea:cd:a9:01:5e:c3:7b:8b:53:a9:77:99:81:0c:47:31:
         3d:2b:56:ff:a7:bb:a0:6f:d9:49:8a:63:95:3a:08:c4:49:74:
         02:61:5b:00:00:f7:72:9c:29:89:5e:8f:a6:7f:94:79:65:79:
         f4:90:14:86:4d:d2:be:f2:02:d2:89:28:b0:41:df:93:9c:3a:
         1e:ea:51:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org