Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130382e302f32322d3232203d3e203131393231.roa
File:                     3230302e3139342e3130382e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier:          v1LbDLNfyfi1XbNoZfTsGyWS+PdXY0r5P2rlpG2nMCA=
Subject key identifier:   38:9E:11:64:15:CF:AD:0E:BF:D5:3F:6E:D3:76:C7:68:C0:A9:FC:45
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       46BFD90E3152215E85196ED11F57FF6AA35A8C60
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130382e302f32322d3232203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:56 +0000
ROA not before:           Thu 28 Mar 2024 14:36:56 +0000
ROA not after:            Thu 27 Mar 2025 14:41:56 +0000
asID:                     11921
IP address blocks:        200.194.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bf:d9:0e:31:52:21:5e:85:19:6e:d1:1f:57:ff:6a:a3:5a:8c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:56 2024 GMT
            Not After : Mar 27 14:41:56 2025 GMT
        Subject: CN=389E116415CFAD0EBFD53F6ED376C768C0A9FC45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e5:60:fc:f8:cf:6d:28:c2:c2:32:37:0f:4a:
                    67:9a:67:ef:9d:6d:a0:4c:6f:32:00:db:71:a6:75:
                    34:e5:06:2d:6c:46:6a:22:ac:3e:fc:d2:78:6a:a5:
                    92:e2:0c:7f:cf:05:46:bd:ea:ac:8f:f4:91:3e:94:
                    5d:c6:7c:a9:a4:37:18:20:7a:85:2f:05:73:b3:a4:
                    e5:02:5b:38:99:bf:33:87:ee:80:a0:77:6d:ed:5d:
                    c0:06:2b:87:c3:4f:fa:f5:b6:e8:27:47:af:30:8d:
                    5f:52:55:13:52:fc:2e:4c:ec:6b:18:fb:f4:45:79:
                    5a:c9:f6:34:00:8f:37:60:f8:d8:59:5e:c6:fe:59:
                    ac:ee:ac:b3:f4:2a:c0:70:bc:21:3c:97:a6:43:48:
                    99:70:30:75:db:6a:19:01:e9:48:78:ec:bb:54:41:
                    eb:04:a1:93:26:3e:f8:ca:fe:a6:b4:41:67:89:1b:
                    98:27:16:74:99:6e:a7:53:67:d3:bb:c8:bb:a9:03:
                    36:4e:b1:22:6f:5b:14:2e:53:7b:eb:bb:96:01:fb:
                    35:0e:ad:c5:9e:61:55:de:b7:50:b5:b6:fd:0c:1c:
                    17:9c:35:fb:30:99:d8:a7:58:c2:8a:4b:01:0c:56:
                    5f:b4:c5:4b:23:7d:12:12:59:9d:b7:48:22:f9:8d:
                    ed:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9E:11:64:15:CF:AD:0E:BF:D5:3F:6E:D3:76:C7:68:C0:A9:FC:45
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130382e302f32322d3232203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:cd:59:b4:55:6b:fe:1a:7a:b0:fe:ab:ca:6c:d8:7c:70:bb:
         44:a8:b6:26:5c:8d:25:c5:8b:e1:1d:46:e8:74:e9:2d:3f:85:
         05:00:fc:8d:56:32:6d:44:3c:6f:1e:be:ca:22:c9:03:df:df:
         f0:d4:af:96:a3:48:fd:af:87:c5:e5:d4:d4:2f:4b:75:69:37:
         75:03:2e:00:7d:90:13:c3:8b:b6:78:9a:9b:74:8b:83:c0:9a:
         7b:20:02:dc:fa:be:4e:37:1c:da:7a:c2:88:5e:0b:cb:a5:89:
         af:83:ad:d1:6f:30:35:dd:15:9a:f7:9f:be:f0:94:ea:ab:12:
         32:94:99:d6:a1:c8:56:72:eb:be:55:d3:64:bb:fe:af:f0:2e:
         49:a1:d8:4b:46:01:c3:ce:a2:6d:4a:ae:78:63:66:ee:b8:a9:
         ed:2e:47:f3:a5:91:55:b4:61:fe:7f:0a:51:99:e0:75:49:8b:
         2b:ce:2a:b4:85:3d:e2:5b:bb:d5:4a:73:27:8a:d2:0e:f6:9c:
         ca:16:32:c2:95:43:e4:d5:09:ab:f7:b6:2c:9d:21:bf:3b:59:
         f4:8d:3b:71:b2:b9:30:5e:6c:32:09:b8:be:07:9f:a0:0e:e8:
         bf:0a:4f:01:ce:26:d2:12:f4:9b:f0:89:d7:39:fd:51:c2:73:
         9d:3c:cc:47
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURr/ZDjFSIV6FGW7RH1f/aqNajGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczMDYyNDQ0ODA2N0Q4M0U4MzRBRkQxMUU5NjU3REQ4
RTE5OTE5OTAeFw0yNDAzMjgxNDM2NTZaFw0yNTAzMjcxNDQxNTZaMDMxMTAvBgNV
BAMTKDM4OUUxMTY0MTVDRkFEMEVCRkQ1M0Y2RUQzNzZDNzY4QzBBOUZDNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX5WD8+M9tKMLCMjcPSmeaZ++d
baBMbzIA23GmdTTlBi1sRmoirD780nhqpZLiDH/PBUa96qyP9JE+lF3GfKmkNxgg
eoUvBXOzpOUCWziZvzOH7oCgd23tXcAGK4fDT/r1tugnR68wjV9SVRNS/C5M7GsY
+/RFeVrJ9jQAjzdg+NhZXsb+WazurLP0KsBwvCE8l6ZDSJlwMHXbahkB6Uh47LtU
QesEoZMmPvjK/qa0QWeJG5gnFnSZbqdTZ9O7yLupAzZOsSJvWxQuU3vru5YB+zUO
rcWeYVXet1C1tv0MHBecNfswmdinWMKKSwEMVl+0xUsjfRISWZ23SCL5je1ZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOJ4RZBXPrQ6/1T9u03bHaMCp/EUwHwYDVR0j
BBgwFoAUlzBiREgGfYPoNK/RHpZX3Y4ZkZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMC85NzMwNjI0NDQ4MDY3RDgzRTgzNEFGRDExRTk2NTdERDhFMTk5MTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MzA2MjQ0NDgwNjdEODNF
ODM0QUZEMTFFOTY1N0REOEUxOTkxOTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzAv
MzIzMDMwMmUzMTM5MzQyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMx
MzEzOTMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBALIwmwwDQYJKoZIhvcNAQELBQADggEBAI7NWbRV
a/4aerD+q8ps2Hxwu0SotiZcjSXFi+EdRuh06S0/hQUA/I1WMm1EPG8evsoiyQPf
3/DUr5ajSP2vh8Xl1NQvS3VpN3UDLgB9kBPDi7Z4mpt0i4PAmnsgAtz6vk43HNp6
woheC8ulia+DrdFvMDXdFZr3n77wlOqrEjKUmdahyFZy675V02S7/q/wLkmh2EtG
AcPOom1KrnhjZu64qe0uR/OlkVW0Yf5/ClGZ4HVJiyvOKrSFPeJbu9VKcyeK0g72
nMoWMsKVQ+TVCav3tiydIb87WfSNO3GyuTBebDIJuL4Hn6AO6L8KTwHOJtIS9Jvw
idc5/VHCc508zEc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org