Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e36342e302f32332d3233203d3e203131393231.roa
File:                     3230302e3233332e36342e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          4C1TuHFm+M175cWwa2+DRYMimqGIWTKCjJeQKF1ZHaY=
Subject key identifier:   22:2C:86:82:D4:A5:77:37:CC:49:E2:65:7E:F9:90:EF:97:0E:22:CC
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       4509EFCFA8992680BE262CA2BE45BCB61E9FE68F
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e36342e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 17:41:58 +0000
ROA not before:           Thu 28 Mar 2024 17:36:58 +0000
ROA not after:            Thu 27 Mar 2025 17:41:58 +0000
asID:                     11921
IP address blocks:        200.233.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:09:ef:cf:a8:99:26:80:be:26:2c:a2:be:45:bc:b6:1e:9f:e6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 17:36:58 2024 GMT
            Not After : Mar 27 17:41:58 2025 GMT
        Subject: CN=222C8682D4A57737CC49E2657EF990EF970E22CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a6:3b:ff:b7:b7:d1:00:3c:03:77:58:99:0f:
                    05:74:a1:26:36:a3:34:41:5d:2f:51:91:52:6a:8d:
                    c7:18:0d:14:aa:5d:c5:cd:0b:de:7d:d4:6e:ea:72:
                    cf:7f:55:cf:7e:40:62:d9:09:16:69:57:a5:13:08:
                    00:d0:cf:03:99:16:54:63:d3:17:8d:ec:f1:c2:78:
                    44:d3:e9:0f:2a:39:f2:c0:ea:f5:c2:2d:ab:49:1b:
                    0e:e6:00:48:5c:6a:28:00:7d:88:66:68:ea:4d:15:
                    d6:5b:b1:73:db:b5:a8:ef:d5:2c:3b:09:e4:e1:67:
                    c4:83:f7:40:f7:9a:7a:37:03:fc:80:17:6c:a3:17:
                    21:85:bd:c7:d6:d8:43:2b:f3:f7:df:52:3e:7a:ae:
                    23:1a:82:80:06:a8:b6:52:92:99:89:f1:02:88:03:
                    5a:18:3a:6a:f4:9d:6c:58:81:14:20:3b:87:99:c7:
                    f2:a2:08:b3:b3:fd:d1:14:73:00:a2:c5:93:36:41:
                    1f:f6:bd:86:28:e2:5f:14:78:5d:a4:5d:2c:6f:7f:
                    b3:25:df:de:a8:78:3c:8e:9c:39:76:a1:ff:96:e2:
                    70:82:a4:b9:21:73:da:5b:d2:04:6c:f3:60:70:53:
                    10:94:42:47:70:a9:f9:29:29:3a:96:5c:78:26:e2:
                    5c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2C:86:82:D4:A5:77:37:CC:49:E2:65:7E:F9:90:EF:97:0E:22:CC
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e36342e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:9a:f2:27:ed:17:2a:8f:7f:5a:e4:60:3d:31:ad:51:7c:ac:
         a5:cf:29:59:da:55:89:e1:9a:05:ab:ea:54:88:09:80:52:17:
         76:f8:a2:c4:8c:40:a4:9d:96:e8:4a:9d:c8:83:4a:50:11:78:
         3b:a1:2a:fd:18:97:9c:65:3a:60:9f:1e:6b:16:94:38:87:1b:
         69:13:b2:24:28:ad:45:ba:a1:d0:ee:9e:d8:79:90:68:e4:60:
         4a:88:4c:ff:c4:99:3e:78:8a:f7:a1:04:3f:ac:b0:80:4b:ba:
         f0:ac:7d:d6:7a:a9:44:ce:42:f5:63:9f:7d:17:7a:90:dc:4b:
         2d:4a:ca:d9:3a:a3:19:12:16:ff:5d:d0:e5:75:9c:35:44:96:
         f0:e4:1e:61:f7:90:a1:87:a6:98:93:45:b9:7e:99:0c:ec:2e:
         88:1c:10:63:68:3a:bf:f4:31:74:e5:c0:4d:07:dc:2b:e4:bd:
         dd:41:65:50:21:34:68:14:ec:7b:3d:f1:65:b8:33:1c:69:64:
         60:9e:2c:55:60:35:85:2c:df:82:d2:02:c4:b5:f6:ec:ef:fa:
         22:41:71:f2:6f:0b:f5:c7:1c:32:cc:dc:9e:b5:d8:52:72:b5:
         98:46:2c:ec:d0:70:39:8f:8d:02:ba:04:fa:9e:ca:83:3d:f8:
         4e:ea:5d:1d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURQnvz6iZJoC+JiyivkW8th6f5o8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczMDYyNDQ0ODA2N0Q4M0U4MzRBRkQxMUU5NjU3REQ4
RTE5OTE5OTAeFw0yNDAzMjgxNzM2NThaFw0yNTAzMjcxNzQxNThaMDMxMTAvBgNV
BAMTKDIyMkM4NjgyRDRBNTc3MzdDQzQ5RTI2NTdFRjk5MEVGOTcwRTIyQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDopjv/t7fRADwDd1iZDwV0oSY2
ozRBXS9RkVJqjccYDRSqXcXNC9591G7qcs9/Vc9+QGLZCRZpV6UTCADQzwOZFlRj
0xeN7PHCeETT6Q8qOfLA6vXCLatJGw7mAEhcaigAfYhmaOpNFdZbsXPbtajv1Sw7
CeThZ8SD90D3mno3A/yAF2yjFyGFvcfW2EMr8/ffUj56riMagoAGqLZSkpmJ8QKI
A1oYOmr0nWxYgRQgO4eZx/KiCLOz/dEUcwCixZM2QR/2vYYo4l8UeF2kXSxvf7Ml
396oeDyOnDl2of+W4nCCpLkhc9pb0gRs82BwUxCUQkdwqfkpKTqWXHgm4lwnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIiyGgtSldzfMSeJlfvmQ75cOIswwHwYDVR0j
BBgwFoAUlzBiREgGfYPoNK/RHpZX3Y4ZkZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMC85NzMwNjI0NDQ4MDY3RDgzRTgzNEFGRDExRTk2NTdERDhFMTk5MTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MzA2MjQ0NDgwNjdEODNF
ODM0QUZEMTFFOTY1N0REOEUxOTkxOTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzAv
MzIzMDMwMmUzMjMzMzMyZTM2MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMTMx
MzkzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByOlAMA0GCSqGSIb3DQEBCwUAA4IBAQCvmvIn7Rcq
j39a5GA9Ma1RfKylzylZ2lWJ4ZoFq+pUiAmAUhd2+KLEjECknZboSp3Ig0pQEXg7
oSr9GJecZTpgnx5rFpQ4hxtpE7IkKK1FuqHQ7p7YeZBo5GBKiEz/xJk+eIr3oQQ/
rLCAS7rwrH3WeqlEzkL1Y599F3qQ3EstSsrZOqMZEhb/XdDldZw1RJbw5B5h95Ch
h6aYk0W5fpkM7C6IHBBjaDq/9DF05cBNB9wr5L3dQWVQITRoFOx7PfFluDMcaWRg
nixVYDWFLN+C0gLEtfbs7/oiQXHybwv1xxwyzNyetdhScrWYRizs0HA5j40CugT6
nsqDPfhO6l0d
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org