Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e39362e302f32312d3231203d3e203131393231.roa
File:                     3230302e3139342e39362e302f32312d3231203d3e203131393231.roa (raw, json)
Hash identifier:          hDl6OBW/bCPQdEKBeZcfU4/nR5k8yhZaiilwW1Ug740=
Subject key identifier:   A5:A1:EA:AF:CE:48:3B:A6:72:1F:D5:F1:71:3B:51:2B:8D:62:6E:CE
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       3D1C59C9E54F3D1F22A216BA346CA993CD06EEA2
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e39362e302f32312d3231203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:58 +0000
ROA not before:           Thu 28 Mar 2024 14:36:58 +0000
ROA not after:            Thu 27 Mar 2025 14:41:58 +0000
asID:                     11921
IP address blocks:        200.194.96.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1c:59:c9:e5:4f:3d:1f:22:a2:16:ba:34:6c:a9:93:cd:06:ee:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:58 2024 GMT
            Not After : Mar 27 14:41:58 2025 GMT
        Subject: CN=A5A1EAAFCE483BA6721FD5F1713B512B8D626ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:72:b3:10:ae:fe:f8:e0:74:44:2d:42:31:9e:
                    6f:33:cb:48:f3:1b:d7:2b:34:4f:60:c2:08:a2:22:
                    53:90:b7:18:3e:22:16:d0:ef:fd:5c:08:a6:42:92:
                    5e:e9:ce:f0:ae:32:09:7f:1e:e9:1d:d2:fb:82:ed:
                    d3:7d:9b:24:26:9b:09:88:78:f8:0c:61:84:01:e8:
                    62:3c:ef:3f:b8:89:40:31:ad:2b:6b:29:78:2f:97:
                    60:f3:16:2d:c9:40:86:03:9e:8d:f9:21:0d:bf:f4:
                    0f:7d:ec:4a:90:d0:2e:97:b4:82:b1:c2:ba:fd:01:
                    b3:2e:7d:48:f9:e5:dc:db:6d:cd:35:87:7e:76:a1:
                    8a:42:46:85:3a:ab:ab:df:9b:a3:84:6c:f6:af:f2:
                    12:4f:0e:8b:bc:3e:cd:d2:77:6b:eb:ef:63:7d:b0:
                    1f:34:30:ea:55:d2:28:0f:c8:8c:d5:4d:28:cf:1c:
                    6e:75:67:17:60:06:39:e9:78:e0:81:e2:4c:ed:d0:
                    c5:07:29:a0:34:54:bd:6b:57:a4:09:1d:51:ba:4e:
                    f6:85:ba:6c:f2:31:2a:46:2c:c0:fa:fe:b5:a0:76:
                    eb:17:f0:c1:22:9e:8f:6d:02:74:98:07:97:3b:38:
                    84:23:6f:51:1c:a3:ec:88:e1:b4:fd:30:92:b3:8e:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A1:EA:AF:CE:48:3B:A6:72:1F:D5:F1:71:3B:51:2B:8D:62:6E:CE
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e39362e302f32312d3231203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:83:e4:fa:b2:a2:c8:fd:11:a8:92:1e:3b:3a:3f:a6:1a:63:
         cc:5f:df:7c:5c:8b:5c:2f:18:e1:7c:a5:8e:72:49:4b:cc:b7:
         26:ef:cb:28:6b:2b:81:5a:70:62:05:65:e9:2c:8d:8a:af:52:
         09:2e:44:2f:33:ce:a8:13:1d:14:b6:e3:37:37:24:8a:0c:73:
         e4:e1:14:46:8c:07:4a:b0:e8:bb:45:36:e3:85:69:5a:9b:8e:
         eb:3a:c0:44:7a:bc:41:cb:5c:2c:d4:68:91:32:34:7f:36:e2:
         91:e3:ce:19:be:40:71:0e:26:cd:de:fc:78:bd:ad:0e:b8:6d:
         c2:51:49:7d:de:2d:84:3c:11:9a:5d:2e:c8:22:06:58:f9:ac:
         a7:e5:d8:f2:9b:84:58:cf:b9:f9:7b:5c:4a:4e:b9:a4:94:26:
         ef:c6:b8:41:2f:b0:5e:cb:91:46:d4:58:bd:df:ce:e6:9b:83:
         8d:f0:b0:4b:76:9b:5a:48:7a:32:e6:1b:4b:10:44:12:40:6f:
         b7:bf:e2:98:a2:70:c1:cb:f8:17:91:86:d9:df:58:4e:ef:1d:
         d0:30:b1:28:c5:32:fc:a7:1f:8b:cc:33:17:fc:57:9b:58:0c:
         e2:95:3e:29:bb:d2:7b:9f:03:d4:50:3a:10:aa:97:c7:d8:58:
         d8:4d:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org