Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3134302e302f32322d3232203d3e203131393231.roa
File:                     3230302e3135302e3134302e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier:          HRXImZcac8AKq9RCW/Wn0fSY8/ZHVc61Qxep7DfrJq8=
Subject key identifier:   A2:A6:84:15:36:8C:1F:89:14:58:19:9E:B9:F9:CE:B0:5A:C7:54:66
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       37CBB712BBAFBD70ED2889630C9859DE8DC1745C
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3134302e302f32322d3232203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:56 +0000
ROA not before:           Thu 28 Mar 2024 14:36:56 +0000
ROA not after:            Thu 27 Mar 2025 14:41:56 +0000
asID:                     11921
IP address blocks:        200.150.140.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:cb:b7:12:bb:af:bd:70:ed:28:89:63:0c:98:59:de:8d:c1:74:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:56 2024 GMT
            Not After : Mar 27 14:41:56 2025 GMT
        Subject: CN=A2A68415368C1F891458199EB9F9CEB05AC75466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0b:f5:52:f0:f4:f5:78:92:b9:84:b9:00:2e:
                    31:8f:ce:6d:41:b9:8f:d7:97:af:a0:19:d5:ad:85:
                    51:c6:41:a9:6f:0b:32:b8:69:2e:83:44:92:37:d8:
                    fe:79:95:ce:5c:ab:90:f7:62:da:b0:1e:e9:1a:98:
                    37:a6:d0:93:91:90:d5:10:21:61:97:38:ec:c3:cf:
                    66:1a:95:11:a4:81:5d:e5:e2:5f:bb:3c:d6:e1:7c:
                    73:bd:e0:22:6a:8f:d8:8e:d9:81:57:23:57:06:83:
                    31:cd:76:c0:b1:38:f7:94:ba:ea:69:d8:88:e1:59:
                    ab:ab:7f:ab:23:d4:0a:d2:9f:b7:c0:ea:99:c6:e4:
                    b1:7b:b1:cc:cb:69:f2:1b:f7:17:c8:11:28:bd:62:
                    9d:b1:35:0e:6b:77:2d:eb:86:3d:70:94:b0:d8:6f:
                    60:d8:fd:79:ff:0c:70:f7:2c:90:17:92:45:3a:fc:
                    75:ae:bc:b3:e4:0c:1e:e3:de:42:c4:87:a4:c8:15:
                    48:59:4c:6d:41:d2:d2:fe:e9:74:66:13:eb:5a:8e:
                    d7:7e:1b:79:29:a2:07:83:38:fd:b6:65:37:19:65:
                    49:6f:84:ae:66:f9:65:3a:bb:2e:3c:9d:f1:eb:92:
                    4b:eb:71:dd:f8:5e:63:9f:73:53:46:a3:67:f9:c5:
                    0c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A6:84:15:36:8C:1F:89:14:58:19:9E:B9:F9:CE:B0:5A:C7:54:66
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3134302e302f32322d3232203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:73:a1:5a:4a:0c:dd:26:80:5b:9c:54:a3:97:e4:3c:49:15:
         a7:26:7e:59:f9:67:47:84:b3:d7:a4:1e:f1:ad:a6:11:2a:75:
         06:73:fe:ae:13:ae:ee:c1:c0:4b:e1:a0:d9:59:f5:de:9c:c3:
         c6:32:f4:45:d1:97:68:b5:d5:c2:dd:fe:e2:fa:dc:75:f7:0b:
         f5:7c:d9:e9:59:19:12:92:34:e7:a4:4f:f7:bd:7d:79:50:ec:
         0d:8b:fc:d4:64:4e:90:b0:a9:04:b8:cd:9a:fe:b3:6d:fc:47:
         fa:31:0c:c1:b1:6a:17:79:03:15:54:7a:a3:c2:a1:57:0a:da:
         49:04:70:79:ec:7b:4d:8e:bb:c5:0e:05:4b:da:8b:bf:8a:69:
         e8:ec:3f:aa:de:70:c1:4f:a4:07:cf:ea:0e:87:03:5c:7b:35:
         24:a9:62:9d:f8:a5:57:49:f9:dc:57:0d:bc:fd:74:b7:e6:5a:
         44:16:98:f1:60:4c:b5:fc:c4:fd:67:48:c4:86:15:6d:aa:96:
         a4:5e:1e:57:c3:b5:44:9d:8f:08:bc:6d:73:49:39:44:e3:e5:
         37:29:63:e3:f6:77:a9:54:9a:bb:2d:32:2a:97:2a:10:bd:45:
         27:17:93:16:f6:6b:25:62:58:5b:c1:19:92:a2:fd:b4:ac:96:
         2e:33:38:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org