Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3134322e302f32332d3233203d3e203131393231.roa
File:                     3230302e3135302e3134322e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          oBvJxhqd1loSu7BikxjmPYjhIAXRx+0NteFsGkFtqYA=
Subject key identifier:   3F:02:EE:64:3F:C9:03:AC:99:19:8C:71:40:45:1E:42:06:2D:99:71
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       3D37849819382399BC4C045FBDC89BDA30CB6817
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3134322e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 17:41:58 +0000
ROA not before:           Thu 28 Mar 2024 17:36:58 +0000
ROA not after:            Thu 27 Mar 2025 17:41:58 +0000
asID:                     11921
IP address blocks:        200.150.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:37:84:98:19:38:23:99:bc:4c:04:5f:bd:c8:9b:da:30:cb:68:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 17:36:58 2024 GMT
            Not After : Mar 27 17:41:58 2025 GMT
        Subject: CN=3F02EE643FC903AC99198C7140451E42062D9971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:65:12:89:20:4b:7d:0c:d8:d7:11:89:0e:61:
                    b1:e4:31:1d:34:2c:f1:82:41:f9:90:37:d3:97:ea:
                    af:3a:38:35:b5:48:1e:59:42:a7:78:4b:37:65:b7:
                    73:02:97:ad:40:05:af:9d:ba:55:f6:58:4c:39:49:
                    cc:ec:9d:14:19:fc:b8:1b:83:c1:5b:9c:84:6c:ae:
                    52:7e:c8:e4:f6:be:9c:88:66:69:2a:8b:70:34:74:
                    4b:68:95:6f:b0:b9:3a:90:97:61:c3:33:a3:4c:ba:
                    73:eb:a1:58:f4:9b:a2:a1:1c:18:f1:36:4c:ca:c2:
                    01:3a:18:9c:5f:61:71:c0:08:c0:a4:be:20:4a:14:
                    07:01:23:9d:91:43:53:77:48:1f:d1:5f:9b:4a:aa:
                    83:06:5a:88:7b:67:61:6d:fb:21:d8:c3:92:44:5d:
                    65:96:23:b4:f1:a6:ad:79:c2:8c:5d:fd:c1:c9:9a:
                    6b:9f:05:3e:05:d7:7f:70:c7:b9:d1:e1:0e:a3:a9:
                    9f:54:4c:55:9f:e5:aa:ac:1d:57:b6:ec:d3:85:b7:
                    cf:8f:f5:e8:be:b4:f4:06:61:c3:31:98:36:69:ca:
                    9a:77:4b:3c:c8:1d:72:3c:1e:19:06:b3:77:6d:0d:
                    61:a9:ee:bb:92:0c:34:92:fd:2f:68:b9:fb:2d:8f:
                    b1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:02:EE:64:3F:C9:03:AC:99:19:8C:71:40:45:1E:42:06:2D:99:71
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3135302e3134322e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.150.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:54:50:c3:96:9f:34:1a:20:cc:50:2f:3e:ae:0e:dd:4c:4a:
         94:c4:91:a4:ce:a3:3b:64:6f:86:9a:ea:ba:d2:79:77:11:a1:
         dc:cd:c3:48:ca:3e:9c:7f:7a:c3:e3:4a:de:e4:51:f4:c5:64:
         c9:fa:1b:1b:6d:1c:ad:f5:cf:53:a6:36:b0:fd:fb:28:28:5c:
         10:99:d4:87:7a:5a:24:63:55:0b:d1:37:56:59:0e:98:a6:81:
         fa:98:94:73:a3:5b:54:e5:6b:94:2f:dd:4b:bd:c6:8f:5f:26:
         dc:b2:04:0b:4e:4e:45:7b:6d:ad:de:4e:37:4e:6b:6a:32:5d:
         6e:74:0d:24:c8:c0:77:c2:b3:1b:25:af:40:db:ce:77:b4:51:
         43:aa:19:1c:42:57:bc:dc:51:34:3f:85:3d:ed:0e:fc:97:8f:
         fd:5f:5c:f5:0f:65:f5:4a:be:e9:c9:e8:31:3a:08:b3:6f:10:
         45:f4:9f:29:64:5e:30:aa:9c:3b:56:98:41:a4:8d:34:45:a9:
         d2:0d:85:52:73:41:dd:ca:e5:72:ca:c3:45:62:fb:ae:b0:3a:
         e4:fa:67:66:88:ac:ab:1c:04:e4:be:82:bf:e0:4c:fb:6b:5f:
         66:fb:a6:0f:8e:1f:3a:db:f3:e6:a8:c6:da:4e:f0:d4:04:c3:
         af:47:58:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org