Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e36382e302f32322d3232203d3e203131393231.roa
File:                     3230302e3233332e36382e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier:          gut8y5B5KbcaZYtU7FH8jbRtNrEUi3EMEwLofboD3P8=
Subject key identifier:   58:B7:5C:0C:2A:D5:02:08:AB:A6:8C:9E:DF:E0:20:D7:87:74:61:32
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       1BC0A46253643A5335FB3EB08692F87605CA2361
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e36382e302f32322d3232203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:58 +0000
ROA not before:           Thu 28 Mar 2024 14:36:58 +0000
ROA not after:            Thu 27 Mar 2025 14:41:58 +0000
asID:                     11921
IP address blocks:        200.233.68.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c0:a4:62:53:64:3a:53:35:fb:3e:b0:86:92:f8:76:05:ca:23:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:58 2024 GMT
            Not After : Mar 27 14:41:58 2025 GMT
        Subject: CN=58B75C0C2AD50208ABA68C9EDFE020D787746132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:44:23:07:d5:d3:f4:0a:3b:97:05:5a:6d:a6:
                    79:d7:8a:94:42:50:72:d4:44:fd:e6:0e:42:4c:51:
                    6f:44:5c:b2:2c:5b:cb:88:25:f8:a8:10:92:72:2e:
                    9f:ec:c9:86:dd:53:f3:ae:dc:b6:fc:87:1a:81:a8:
                    e0:d8:28:c6:2b:6b:75:4e:91:f3:83:67:9d:af:6e:
                    3f:8c:35:db:40:a8:9b:33:84:bb:52:ff:5e:bc:bd:
                    62:54:8a:3e:29:ad:0e:5f:ff:23:e4:8e:1b:b1:47:
                    a0:36:0f:df:7e:c4:1c:ea:ef:94:f8:1e:4a:ee:dd:
                    ca:f9:4b:59:ad:39:c4:4c:10:a6:99:e3:47:5c:76:
                    82:7e:c3:05:bd:7d:44:e4:5e:df:ea:6f:36:75:99:
                    f0:bf:fd:88:a9:2b:e0:a2:52:5f:6c:77:f5:72:22:
                    c7:bd:a8:fa:99:93:84:0e:9a:3c:ec:d7:2e:ca:8b:
                    7b:93:b9:00:a0:b3:ce:e1:cf:e8:ce:07:48:e3:9d:
                    8c:bf:2a:04:1f:d9:42:2a:1d:de:89:1c:7d:d8:46:
                    d6:89:bf:e2:35:0e:5b:ee:50:99:7f:2b:03:83:7d:
                    e7:39:70:18:cb:30:37:11:cb:59:e2:a2:1c:89:80:
                    44:c8:3a:ea:ec:ee:ec:db:33:f6:3e:71:08:5b:ae:
                    9c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B7:5C:0C:2A:D5:02:08:AB:A6:8C:9E:DF:E0:20:D7:87:74:61:32
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e36382e302f32322d3232203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:9d:db:57:df:fe:ef:cf:80:ad:9d:c4:1c:74:c9:05:ea:4a:
         75:72:6f:5e:f9:72:00:12:b2:2c:9d:cd:70:d1:3c:85:d8:49:
         dc:2a:6d:db:2f:73:f6:23:23:e8:ea:fc:ae:ad:0b:06:6d:c2:
         12:75:fb:f4:06:46:c4:ad:a1:46:72:98:43:0d:80:6a:d7:31:
         89:68:df:fc:b0:9f:54:0c:7d:51:0b:d5:48:84:59:0d:52:d2:
         7e:86:57:03:0c:a9:c9:c4:7a:87:44:ed:ed:bd:5e:42:30:b6:
         ed:bf:ba:9e:41:ac:bf:27:6a:02:9e:6f:c1:a9:a7:88:26:e8:
         ec:83:e4:d6:b1:34:98:c0:45:87:a7:72:a1:2a:4b:8d:1f:91:
         b4:53:9f:0c:6a:04:0a:88:d8:29:bf:1f:68:5c:1c:7e:55:82:
         f5:c4:b6:8d:31:53:2b:fd:5f:b3:cb:c1:c3:06:72:bd:92:7c:
         ed:fc:cd:5d:9c:87:36:29:15:8a:a7:82:3a:64:93:e0:0b:96:
         b0:7c:b9:e9:0c:85:3a:68:32:e3:dc:4c:dd:08:44:34:04:14:
         8e:34:d1:62:fd:3b:14:12:35:dd:f6:f9:2b:5b:9a:96:13:84:
         ca:ab:c9:b6:64:ef:60:a8:ed:4c:29:53:b5:f3:93:7b:9a:46:
         20:cf:3f:f9
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG8CkYlNkOlM1+z6whpL4dgXKI2EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczMDYyNDQ0ODA2N0Q4M0U4MzRBRkQxMUU5NjU3REQ4
RTE5OTE5OTAeFw0yNDAzMjgxNDM2NThaFw0yNTAzMjcxNDQxNThaMDMxMTAvBgNV
BAMTKDU4Qjc1QzBDMkFENTAyMDhBQkE2OEM5RURGRTAyMEQ3ODc3NDYxMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRCMH1dP0CjuXBVptpnnXipRC
UHLURP3mDkJMUW9EXLIsW8uIJfioEJJyLp/syYbdU/Ou3Lb8hxqBqODYKMYra3VO
kfODZ52vbj+MNdtAqJszhLtS/168vWJUij4prQ5f/yPkjhuxR6A2D99+xBzq75T4
Hkru3cr5S1mtOcRMEKaZ40dcdoJ+wwW9fUTkXt/qbzZ1mfC//YipK+CiUl9sd/Vy
Ise9qPqZk4QOmjzs1y7Ki3uTuQCgs87hz+jOB0jjnYy/KgQf2UIqHd6JHH3YRtaJ
v+I1DlvuUJl/KwODfec5cBjLMDcRy1niohyJgETIOurs7uzbM/Y+cQhbrpzjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWLdcDCrVAgirpoye3+Ag14d0YTIwHwYDVR0j
BBgwFoAUlzBiREgGfYPoNK/RHpZX3Y4ZkZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMC85NzMwNjI0NDQ4MDY3RDgzRTgzNEFGRDExRTk2NTdERDhFMTk5MTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MzA2MjQ0NDgwNjdEODNF
ODM0QUZEMTFFOTY1N0REOEUxOTkxOTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzAv
MzIzMDMwMmUzMjMzMzMyZTM2MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMTMx
MzkzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyOlEMA0GCSqGSIb3DQEBCwUAA4IBAQCxndtX3/7v
z4CtncQcdMkF6kp1cm9e+XIAErIsnc1w0TyF2EncKm3bL3P2IyPo6vyurQsGbcIS
dfv0BkbEraFGcphDDYBq1zGJaN/8sJ9UDH1RC9VIhFkNUtJ+hlcDDKnJxHqHRO3t
vV5CMLbtv7qeQay/J2oCnm/BqaeIJujsg+TWsTSYwEWHp3KhKkuNH5G0U58MagQK
iNgpvx9oXBx+VYL1xLaNMVMr/V+zy8HDBnK9knzt/M1dnIc2KRWKp4I6ZJPgC5aw
fLnpDIU6aDLj3EzdCEQ0BBSONNFi/TsUEjXd9vkrW5qWE4TKq8m2ZO9gqO1MKVO1
85N7mkYgzz/5
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org