Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e39362e302f32322d3232203d3e203131393231.roa
File:                     3230302e3139342e39362e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier:          vHxrlbYa24hIjfITcRsWssFbmhy4lbuKuZeOUOXa/j8=
Subject key identifier:   17:70:46:68:C3:B6:9B:63:B9:36:C4:23:6F:9D:96:8B:5D:D3:64:4E
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       59D35CE975DD35BBCE67C99E95335AB8BFABDDB7
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e39362e302f32322d3232203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:57 +0000
ROA not before:           Thu 28 Mar 2024 14:36:57 +0000
ROA not after:            Thu 27 Mar 2025 14:41:57 +0000
asID:                     11921
IP address blocks:        200.194.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d3:5c:e9:75:dd:35:bb:ce:67:c9:9e:95:33:5a:b8:bf:ab:dd:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:57 2024 GMT
            Not After : Mar 27 14:41:57 2025 GMT
        Subject: CN=17704668C3B69B63B936C4236F9D968B5DD3644E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:15:ce:63:ec:c2:ca:26:2b:e7:09:a6:a3:
                    9c:78:a4:37:62:04:b6:cc:af:3d:66:c6:3c:4f:78:
                    1a:c1:45:48:4f:89:2d:a0:62:3e:49:27:52:6d:11:
                    c3:ce:41:50:6b:04:57:e9:f2:a7:8d:7f:c2:4c:4e:
                    6a:fb:21:23:6b:00:3f:1f:be:3b:eb:7f:8a:5f:f4:
                    12:49:8c:3d:e1:dd:9c:31:48:36:3d:92:d1:fa:a7:
                    ce:1c:80:fb:82:c8:0b:c0:5b:62:30:52:13:aa:47:
                    c5:cc:b0:4f:44:97:16:38:b7:01:c2:a0:f8:c9:bd:
                    0c:97:26:f7:ae:41:b3:06:88:8d:5e:3b:35:4a:d9:
                    7c:4e:c6:d3:97:9d:1d:bc:3c:bf:08:8a:eb:1e:6e:
                    f1:ef:c5:1a:d6:94:8e:48:b9:0c:05:6e:63:df:f4:
                    99:92:b8:2c:d9:4e:7e:1d:e7:97:13:b5:d0:70:bb:
                    3d:b0:88:14:24:b8:b4:2c:40:f7:69:ac:0d:dc:8c:
                    05:36:5b:3a:b3:eb:79:06:b3:7a:7e:b9:1e:56:f3:
                    1b:4c:4c:b7:f8:78:61:b7:ac:63:78:e2:8f:aa:b0:
                    49:b6:2f:9f:6b:ba:e6:27:7e:9d:81:cd:9b:78:ee:
                    1a:ab:bf:35:f6:77:3b:e7:08:0d:43:df:52:88:cb:
                    c4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:70:46:68:C3:B6:9B:63:B9:36:C4:23:6F:9D:96:8B:5D:D3:64:4E
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e39362e302f32322d3232203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:06:4a:9d:1e:98:85:7e:06:64:a5:55:f2:53:46:b0:35:a3:
         27:fa:54:e9:4b:49:c7:f2:f8:7a:49:61:a6:a8:05:a2:dc:11:
         4e:bc:6e:93:d4:48:08:84:69:99:57:bd:de:72:69:e0:28:12:
         6e:8a:92:2b:3e:e3:c0:8c:8d:af:8e:0d:36:5d:66:55:9b:ea:
         55:93:33:2d:7d:08:b6:7e:ab:c6:16:e3:1c:ba:8b:50:af:2b:
         15:e9:8e:8f:61:9a:76:7f:b4:f2:c7:41:0f:72:72:64:c5:a5:
         0e:38:87:19:da:73:0c:e0:d9:fe:20:44:01:6e:fe:71:da:6b:
         6f:68:d2:84:29:e5:d9:a4:3e:fc:aa:df:72:01:e9:27:05:e3:
         32:38:70:23:eb:70:6a:c9:34:e6:cb:7f:b6:67:a2:8d:2b:1f:
         a2:96:d9:04:50:56:d0:10:2e:33:4c:bd:e9:3a:e4:6b:d8:7a:
         68:7d:e8:3d:0a:a8:34:e4:90:1d:56:44:2c:f7:af:be:6a:eb:
         14:c2:51:af:e8:62:85:36:9c:97:f6:0a:31:eb:66:df:55:05:
         bb:38:a7:96:97:68:07:34:40:8a:89:db:2e:2c:3f:d6:01:e5:
         20:65:f3:5a:b9:49:d1:fe:2e:5e:90:ad:f0:3c:b3:59:9d:29:
         f0:d8:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org