Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130342e302f32332d3233203d3e203131393231.roa
File:                     3230302e3139342e3130342e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          C/IicpSy0m5Xp4wck9dzvzSxbs+ooic6+5bMhP+u2uw=
Subject key identifier:   8C:38:6C:9C:56:68:F1:AD:00:68:E1:C9:28:71:D6:C3:57:CC:80:D6
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       2FF884F1D6368B27A93CE2E2EE50B22816D46A2D
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130342e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:56 +0000
ROA not before:           Thu 28 Mar 2024 14:36:56 +0000
ROA not after:            Thu 27 Mar 2025 14:41:56 +0000
asID:                     11921
IP address blocks:        200.194.104.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f8:84:f1:d6:36:8b:27:a9:3c:e2:e2:ee:50:b2:28:16:d4:6a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:56 2024 GMT
            Not After : Mar 27 14:41:56 2025 GMT
        Subject: CN=8C386C9C5668F1AD0068E1C92871D6C357CC80D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:74:db:81:f0:9d:3b:f2:32:66:0f:ce:15:
                    a8:46:21:4c:d5:d1:75:6f:fe:67:81:e3:4a:79:7b:
                    56:5f:01:64:2d:16:8a:70:90:55:85:55:a0:dc:74:
                    7b:05:45:88:c1:43:f8:9b:d8:36:82:36:95:cf:d2:
                    03:a0:6f:d4:04:2f:0e:07:04:f3:77:84:64:b5:ce:
                    48:75:3e:40:47:e2:cf:1a:73:bd:4d:26:30:da:7f:
                    ed:2b:0c:39:7d:ac:e0:de:40:fd:52:5a:08:af:26:
                    b8:98:12:fb:b9:0e:fb:74:ad:fd:28:91:fc:2c:72:
                    a3:7a:c5:4b:09:ef:d0:5e:c2:15:92:ed:b5:e9:9c:
                    2a:7a:3d:80:d9:70:86:96:90:da:d1:52:40:cd:e9:
                    8a:98:a8:b1:4f:38:03:a7:1b:10:9e:a9:83:63:30:
                    de:b7:cc:36:15:f8:21:57:c9:04:4e:31:7d:0a:6e:
                    d6:a1:1d:d6:ec:88:df:69:68:53:9a:d5:8d:85:34:
                    c3:23:05:9d:b5:40:63:dc:d5:6e:ba:bc:59:82:1b:
                    42:cf:f6:f7:3c:50:48:d9:e7:dc:d5:20:8b:0a:3b:
                    12:0d:eb:06:c5:0b:65:eb:5e:f7:bc:77:85:ef:01:
                    48:dd:5f:f3:de:4c:23:58:00:5f:29:7a:6e:4b:15:
                    ac:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:38:6C:9C:56:68:F1:AD:00:68:E1:C9:28:71:D6:C3:57:CC:80:D6
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130342e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:eb:1f:07:5b:69:6c:eb:71:66:dd:3b:f8:fb:41:17:04:07:
         a2:4c:b1:03:5e:a4:0d:4a:92:4a:88:b8:0a:aa:71:f3:87:03:
         65:17:ee:05:0f:42:e4:be:33:3e:60:b5:d4:5f:98:36:ae:2a:
         0f:aa:84:ef:b5:e4:25:4c:57:c9:4c:04:59:e5:2b:9e:49:a3:
         4b:a2:a4:7d:5c:3f:2e:f4:cf:2c:b8:c2:1b:a4:c3:b3:f2:f6:
         fb:c4:ce:11:28:a0:06:91:03:8d:2b:2a:0d:b8:6c:72:99:80:
         2c:f8:bc:17:98:b6:68:68:4f:d6:5c:15:31:21:44:dc:09:1b:
         32:2e:4f:24:25:ba:90:9c:38:b0:c5:4a:d1:0e:61:90:15:8b:
         c7:f0:68:af:8c:c9:08:78:7f:dc:d9:36:68:49:d6:ff:58:32:
         af:08:bd:b1:79:d2:0f:5b:28:28:24:88:61:17:23:e2:d1:eb:
         b0:ab:ae:e2:fb:28:6c:5c:4d:33:c3:ca:37:c8:69:8d:d2:c0:
         e6:9e:91:1c:8e:ea:08:8c:59:99:a1:a5:a9:15:41:d6:85:5c:
         8f:7a:bb:de:a6:a9:7b:be:c7:9a:a6:79:2f:b7:09:67:ca:44:
         1c:34:7a:fd:09:9a:8c:82:2c:2f:0c:76:b0:c0:5f:c6:3b:e1:
         d4:47:73:ec
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUL/iE8dY2iyepPOLi7lCyKBbUai0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczMDYyNDQ0ODA2N0Q4M0U4MzRBRkQxMUU5NjU3REQ4
RTE5OTE5OTAeFw0yNDAzMjgxNDM2NTZaFw0yNTAzMjcxNDQxNTZaMDMxMTAvBgNV
BAMTKDhDMzg2QzlDNTY2OEYxQUQwMDY4RTFDOTI4NzFENkMzNTdDQzgwRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkXTbgfCdO/IyZg/OFahGIUzV
0XVv/meB40p5e1ZfAWQtFopwkFWFVaDcdHsFRYjBQ/ib2DaCNpXP0gOgb9QELw4H
BPN3hGS1zkh1PkBH4s8ac71NJjDaf+0rDDl9rODeQP1SWgivJriYEvu5Dvt0rf0o
kfwscqN6xUsJ79BewhWS7bXpnCp6PYDZcIaWkNrRUkDN6YqYqLFPOAOnGxCeqYNj
MN63zDYV+CFXyQROMX0KbtahHdbsiN9paFOa1Y2FNMMjBZ21QGPc1W66vFmCG0LP
9vc8UEjZ59zVIIsKOxIN6wbFC2XrXve8d4XvAUjdX/PeTCNYAF8pem5LFaxVAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjDhsnFZo8a0AaOHJKHHWw1fMgNYwHwYDVR0j
BBgwFoAUlzBiREgGfYPoNK/RHpZX3Y4ZkZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMC85NzMwNjI0NDQ4MDY3RDgzRTgzNEFGRDExRTk2NTdERDhFMTk5MTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MzA2MjQ0NDgwNjdEODNF
ODM0QUZEMTFFOTY1N0REOEUxOTkxOTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzAv
MzIzMDMwMmUzMTM5MzQyZTMxMzAzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMx
MzEzOTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAHIwmgwDQYJKoZIhvcNAQELBQADggEBAAXrHwdb
aWzrcWbdO/j7QRcEB6JMsQNepA1KkkqIuAqqcfOHA2UX7gUPQuS+Mz5gtdRfmDau
Kg+qhO+15CVMV8lMBFnlK55Jo0uipH1cPy70zyy4whukw7Py9vvEzhEooAaRA40r
Kg24bHKZgCz4vBeYtmhoT9ZcFTEhRNwJGzIuTyQlupCcOLDFStEOYZAVi8fwaK+M
yQh4f9zZNmhJ1v9YMq8IvbF50g9bKCgkiGEXI+LR67CrruL7KGxcTTPDyjfIaY3S
wOaekRyO6giMWZmhpakVQdaFXI96u96mqXu+x5qmeS+3CWfKRBw0ev0JmoyCLC8M
drDAX8Y74dRHc+w=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org