Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e39362e302f32332d3233203d3e203131393231.roa
File:                     3230302e3139342e39362e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          I4313WyoH3lQBlCewh/KbEZOBIHZHfCekaeCVOkXi0o=
Subject key identifier:   21:C5:C1:C9:D7:53:8E:4B:42:B3:9D:09:FD:5E:92:C3:39:99:66:C1
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       0DC2ACAD78C5A950E17FFB08695654977504D75C
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e39362e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:57 +0000
ROA not before:           Thu 28 Mar 2024 14:36:57 +0000
ROA not after:            Thu 27 Mar 2025 14:41:57 +0000
asID:                     11921
IP address blocks:        200.194.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:c2:ac:ad:78:c5:a9:50:e1:7f:fb:08:69:56:54:97:75:04:d7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:57 2024 GMT
            Not After : Mar 27 14:41:57 2025 GMT
        Subject: CN=21C5C1C9D7538E4B42B39D09FD5E92C3399966C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:da:09:19:9f:07:59:9e:f4:4b:99:93:0b:cb:
                    45:e7:c0:45:f5:de:5b:23:8c:2b:d7:49:34:07:cc:
                    11:78:a4:13:a4:28:fd:3c:37:26:73:9b:b4:37:1e:
                    cd:aa:11:2f:04:70:ba:5a:52:fa:2f:25:ae:27:c1:
                    0e:7a:b8:9d:34:8d:87:71:f8:28:91:3f:4c:bd:00:
                    fb:12:90:c6:25:f8:27:05:3e:9e:21:6b:4d:b3:52:
                    ae:47:ec:ed:34:45:0d:2b:1d:1f:71:a6:86:8f:18:
                    7f:39:e1:e2:4d:06:b8:f3:e7:75:a6:45:5e:1d:94:
                    86:d4:3f:b6:83:5b:b6:b1:a5:81:0d:59:79:21:85:
                    ee:a2:fc:3e:bf:db:c9:13:9f:20:fb:e3:f8:c8:29:
                    74:b1:64:01:b8:9f:b2:e8:84:a6:f8:16:f6:f2:80:
                    8b:cc:24:ad:34:68:1d:72:b8:ca:cb:42:5c:c3:1f:
                    96:51:5c:e7:ec:59:76:24:10:d8:19:6b:8d:41:0e:
                    c9:97:a2:84:c1:38:c2:80:f0:cd:61:68:c4:74:31:
                    54:de:5f:63:15:8c:6a:3b:74:7b:f7:ae:92:1e:8e:
                    81:06:63:3a:4b:f5:6a:82:75:eb:1c:a8:d2:6e:d4:
                    5a:c4:26:5f:e5:38:1f:bd:f0:3b:0f:39:6d:aa:c9:
                    08:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C5:C1:C9:D7:53:8E:4B:42:B3:9D:09:FD:5E:92:C3:39:99:66:C1
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3139342e39362e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.194.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:f6:b3:96:b5:7a:0a:48:98:11:40:dd:26:2a:d0:10:e1:8c:
         06:88:63:dd:a6:1e:5c:71:f4:9c:db:bf:2e:03:7c:24:80:20:
         21:76:e9:bf:37:e3:7c:09:bf:ab:0c:2d:c1:e7:bc:ae:27:fc:
         98:10:c7:4f:a6:21:8c:25:f0:f2:98:2a:7a:5b:89:e0:90:92:
         c8:e3:6b:1c:35:da:f6:c4:f5:14:11:a3:92:5f:3e:93:f4:c1:
         96:f8:a0:6c:d6:8c:44:21:07:a8:dc:dd:cf:1f:44:13:9e:e4:
         d9:35:9f:88:74:7d:5c:b0:60:30:5a:04:25:74:41:bd:a8:ea:
         8a:40:79:d4:06:1d:7e:33:fc:b1:1c:d4:8d:4b:41:77:32:83:
         0d:80:08:e2:dd:72:db:b2:32:87:93:30:51:e3:ac:0a:5d:51:
         a5:d8:b5:65:77:c7:3c:19:42:29:84:d8:91:4e:81:b4:e6:79:
         28:70:f5:4d:20:93:dc:3f:b5:de:f5:93:6e:b5:35:d0:d1:23:
         87:5c:16:10:8c:2a:5a:0a:73:ca:80:83:d7:f5:83:d4:e2:17:
         fe:35:fb:e9:61:d2:49:22:f8:fb:b9:08:89:f7:96:93:9f:bf:
         be:d3:0e:8c:f8:ac:ca:d0:7f:c9:ca:c8:df:bd:c9:c2:a5:5c:
         59:37:47:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org