Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130302e302f32322d3232203d3e203131393231.roa
File:                     3230302e3139342e3130302e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier:          jswQc6CijumyF6YCfjs6aKDyJTYUKolBISzG4puP7Uo=
Subject key identifier:   2C:FF:80:41:5E:6B:BE:56:57:C0:85:77:38:C2:5C:C1:69:7C:64:3A
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       3323F11CDC46245C155017977DCAE2CE8904A428
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130302e302f32322d3232203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:56 +0000
ROA not before:           Thu 28 Mar 2024 14:36:56 +0000
ROA not after:            Thu 27 Mar 2025 14:41:56 +0000
asID:                     11921
IP address blocks:        200.194.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:23:f1:1c:dc:46:24:5c:15:50:17:97:7d:ca:e2:ce:89:04:a4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:56 2024 GMT
            Not After : Mar 27 14:41:56 2025 GMT
        Subject: CN=2CFF80415E6BBE5657C0857738C25CC1697C643A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:35:58:c2:8c:7e:57:7a:82:85:9d:9a:e5:ab:
                    7b:bd:89:f6:7a:4b:2e:59:b6:5f:99:c8:72:62:e4:
                    64:8b:58:c4:c8:ec:11:60:bd:d7:b2:45:5d:55:60:
                    a6:eb:8a:9b:f8:69:05:ae:c6:d0:da:77:98:70:6f:
                    34:de:a4:d2:4b:a1:8a:87:84:6d:5c:2f:52:23:da:
                    f4:3c:c1:d7:56:5a:b8:12:df:0a:c0:13:95:13:4f:
                    1d:c6:84:85:91:a5:2f:74:85:18:e2:22:42:f3:b5:
                    af:92:b3:d6:0b:48:54:8a:7b:b1:67:42:c8:dc:40:
                    d4:ef:db:63:b5:43:ff:a8:5e:95:7e:cf:5d:3d:5a:
                    87:cc:7f:23:37:5c:5d:b6:45:40:41:4d:b9:30:b0:
                    50:a0:c4:db:9f:f8:c9:a1:ea:d3:2f:f4:3a:03:bd:
                    58:b2:0a:12:7a:aa:56:76:d9:84:f5:32:ec:ec:23:
                    87:cd:b5:e1:7f:98:0b:73:6b:f0:2d:f9:48:50:d1:
                    5e:45:04:4c:c0:56:51:67:ce:11:d9:f8:59:1a:ff:
                    37:13:3f:d1:63:be:f4:87:87:1a:75:49:c2:9f:8f:
                    21:d7:cd:0a:dd:5a:3f:51:07:f3:f7:50:5f:c3:ce:
                    94:57:b6:67:80:2e:29:67:44:3c:d4:b2:38:98:10:
                    47:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FF:80:41:5E:6B:BE:56:57:C0:85:77:38:C2:5C:C1:69:7C:64:3A
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130302e302f32322d3232203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:6a:3d:6c:36:eb:aa:40:5c:13:81:6a:33:44:df:a4:ad:af:
         c4:93:8a:0a:f8:28:e5:23:44:86:34:c5:c4:30:cd:4e:69:98:
         86:bb:c4:f3:7e:8a:f0:d5:dc:18:f5:ee:d1:a5:d0:f0:c2:3a:
         8e:59:73:f5:1a:e3:2d:a5:a0:fb:f0:d6:c8:19:82:3e:0a:d7:
         a1:f2:04:2d:b3:4f:06:25:55:dc:af:26:41:41:84:19:98:39:
         81:84:de:b3:33:4b:5c:81:c5:19:e9:9d:05:48:e3:85:10:b1:
         42:07:5b:c4:8f:6c:58:8a:72:83:a9:24:df:b1:da:fe:a4:43:
         69:40:be:96:d0:59:f6:a2:ec:84:b3:98:41:e5:b0:c0:d1:24:
         f1:8f:93:e5:09:b8:c3:f5:78:99:90:1b:77:61:a8:e2:e5:95:
         3e:9a:40:f7:44:45:73:6c:f6:fa:36:40:e8:0f:28:e0:de:94:
         4f:8b:c6:5e:3a:d8:24:b3:f9:e2:d0:17:c5:de:fe:7b:48:db:
         49:a9:30:37:fe:7c:10:cb:d9:2e:3a:01:48:35:c9:a0:1b:a4:
         e6:8a:25:70:12:9b:c7:e8:85:ea:64:86:53:00:bc:e1:46:a3:
         c6:bf:12:40:fc:10:27:46:ea:1e:ec:2d:26:da:1a:5a:c5:f5:
         0e:75:59:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org