Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130382e302f32332d3233203d3e203131393231.roa
File:                     3230302e3139342e3130382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          QUN0OPnQ8RV4lP5ZHxx24AuhKnyCg1mtG7Q4k02buEY=
Subject key identifier:   43:F0:A2:DA:3F:A2:C8:31:E9:20:1A:66:E3:B7:DE:78:6E:53:A2:B5
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       0E0B98FEDBA105B275FC7273BEF967ECC1C8F1CF
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:57 +0000
ROA not before:           Thu 28 Mar 2024 14:36:57 +0000
ROA not after:            Thu 27 Mar 2025 14:41:57 +0000
asID:                     11921
IP address blocks:        200.194.108.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:0b:98:fe:db:a1:05:b2:75:fc:72:73:be:f9:67:ec:c1:c8:f1:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:57 2024 GMT
            Not After : Mar 27 14:41:57 2025 GMT
        Subject: CN=43F0A2DA3FA2C831E9201A66E3B7DE786E53A2B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:52:8b:40:e6:fc:36:e7:39:5c:2d:09:41:
                    28:7b:2a:8d:a8:b9:dc:b4:50:6d:71:16:6c:1a:18:
                    6d:27:9e:b2:de:10:ca:d5:e0:40:bc:36:7e:a1:26:
                    c8:41:20:5b:ba:5e:e3:ce:02:1f:32:59:00:d8:da:
                    24:fc:dd:ac:64:dc:e9:3c:f8:f2:41:ca:9f:08:1b:
                    fd:80:4b:d6:ef:64:c9:57:96:0d:4a:1b:88:56:8b:
                    aa:a0:c4:18:fb:35:a0:d9:89:4d:e1:fb:d9:19:93:
                    ca:20:c0:31:0b:cd:2c:1c:0d:91:40:01:a9:90:f4:
                    9e:d6:0e:24:80:f9:5e:2d:86:dd:0b:0a:f6:d1:12:
                    71:4a:8b:a1:84:d0:ae:77:14:34:ae:e8:b6:54:43:
                    c5:f7:ae:80:d0:0f:82:6a:36:17:85:5c:fd:9e:cf:
                    54:fe:83:59:f3:7e:d3:5e:1b:6e:67:b8:82:d7:b6:
                    28:9d:9f:63:e6:57:d5:56:6d:d2:0c:89:4e:2d:8d:
                    c7:11:1f:a4:b5:37:8d:b0:c1:11:7c:3e:04:90:d4:
                    52:60:e9:7b:f5:22:7b:a3:b6:32:67:32:92:ff:7c:
                    21:23:ee:55:39:f9:3f:d1:0b:2e:da:95:58:17:a7:
                    61:8e:24:b1:05:22:a5:d0:cc:39:56:33:64:ba:a1:
                    06:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F0:A2:DA:3F:A2:C8:31:E9:20:1A:66:E3:B7:DE:78:6E:53:A2:B5
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e3130382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:2e:98:7b:e5:45:c5:87:87:82:95:2a:1d:95:27:c2:00:5d:
         e3:95:7c:ae:dd:62:92:13:a4:ee:aa:cc:cb:db:d6:1a:d0:a0:
         20:71:31:db:2c:67:df:6e:a4:ca:68:02:77:2a:1c:af:56:f8:
         5c:7b:6f:1c:9b:0c:f6:d0:f2:0f:dd:82:5b:c0:54:8c:f5:3d:
         ee:66:8e:41:27:46:58:f9:67:19:52:f1:c8:20:5a:c2:a3:6e:
         56:43:94:0d:0d:47:30:55:20:49:e6:eb:a1:40:52:fd:98:cf:
         d4:5f:8e:7b:d9:2c:99:23:b5:11:f7:bd:e0:8d:d1:8c:5b:16:
         a6:86:68:79:47:a5:d7:ed:21:e7:2f:32:2f:c8:fd:cc:70:03:
         06:81:ec:e4:49:47:8e:5d:7b:d2:96:0e:78:31:3f:15:1c:d8:
         09:8c:7c:c8:1b:af:30:db:ef:7b:77:35:4d:0b:18:b0:0b:39:
         b5:54:70:17:57:bf:73:83:3f:85:9f:32:7b:7f:19:ba:30:4b:
         1a:d5:b4:a2:09:ae:2c:10:87:cd:f0:41:a9:d3:9d:28:37:46:
         92:99:a6:41:d4:01:22:a5:35:15:95:09:9d:3c:ca:53:db:f6:
         63:34:10:fa:3b:ce:58:5d:22:74:d9:f0:02:09:1e:2f:78:e8:
         7a:46:12:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org