Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e36382e302f32332d3233203d3e203131393231.roa
File:                     3230302e3233332e36382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          1GC+BUvSUVMsl5Bq0pjnQbIg6t6OoFPLtISVeiG1l+o=
Subject key identifier:   35:5D:58:17:7F:B8:D3:86:C8:10:EA:B9:75:B1:C4:6A:EA:D1:42:E4
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       7BBBFFE2CF65A6823321CC5FD5FEC6EB32FAF3B9
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e36382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 17:41:58 +0000
ROA not before:           Thu 28 Mar 2024 17:36:58 +0000
ROA not after:            Thu 27 Mar 2025 17:41:58 +0000
asID:                     11921
IP address blocks:        200.233.68.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:bb:ff:e2:cf:65:a6:82:33:21:cc:5f:d5:fe:c6:eb:32:fa:f3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 17:36:58 2024 GMT
            Not After : Mar 27 17:41:58 2025 GMT
        Subject: CN=355D58177FB8D386C810EAB975B1C46AEAD142E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:21:4f:04:b7:13:51:35:37:55:f5:75:0f:
                    0c:67:05:bd:98:0e:a8:97:7f:89:02:d1:6a:64:72:
                    30:bc:88:ac:c7:f7:64:73:06:c6:b4:e9:80:6a:75:
                    e8:c4:4a:ed:0b:26:14:28:a1:ef:15:3b:f2:72:0a:
                    ad:a1:49:49:c8:6f:d7:fa:6b:d3:58:4c:b0:00:2f:
                    87:12:20:33:6e:0d:c7:a6:c8:60:7e:9e:fe:cb:0c:
                    d5:ee:da:92:a7:f0:95:03:cf:f5:80:ea:c5:44:9a:
                    f7:85:ab:88:d3:1e:9c:f2:de:41:57:3f:06:20:0c:
                    3e:98:34:55:59:9b:96:0b:4a:cc:91:06:51:6d:0a:
                    52:ce:5f:a8:aa:08:8b:30:08:35:21:68:c0:06:77:
                    8b:90:9c:d5:c3:04:d5:ce:88:c4:ed:71:97:17:6d:
                    83:9b:ee:d3:c1:01:c5:a0:3f:44:bd:cf:26:da:e4:
                    a9:bf:2d:a5:84:41:df:ef:7b:e5:fd:e9:d9:72:86:
                    70:e6:f8:dd:a0:c1:63:d8:46:14:0e:c3:4b:54:60:
                    42:ea:e0:6a:1b:15:c9:e6:0d:e8:ab:56:09:a3:2f:
                    19:f1:29:9e:ef:f5:3f:51:41:5e:e0:36:50:b4:12:
                    58:1f:04:14:01:c0:cc:01:de:e8:67:28:b3:f5:b8:
                    3d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5D:58:17:7F:B8:D3:86:C8:10:EA:B9:75:B1:C4:6A:EA:D1:42:E4
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e36382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:bd:31:9d:7d:9d:39:ff:e9:57:63:26:8f:56:ff:99:b8:ab:
         eb:cc:0d:27:e2:b8:57:e1:f4:7a:ae:7d:ea:07:69:25:ce:e7:
         9b:93:8c:3f:28:75:07:0d:ab:fb:c4:04:2c:4c:92:12:01:0a:
         63:4e:75:2a:30:de:08:b4:f3:1a:2d:e3:0c:fa:72:50:b4:e1:
         8c:34:80:1d:c7:fa:2a:75:92:22:7a:a0:f0:f5:98:1e:8a:b1:
         81:a8:de:5b:ed:b4:e8:e0:99:74:5c:92:b3:f6:ea:63:de:d6:
         6d:a4:7f:dd:fd:31:00:78:dc:17:bd:4f:0e:09:51:2e:74:af:
         0a:46:ea:77:5b:e4:43:85:73:e3:f3:02:0c:ae:1f:5d:9e:8a:
         31:d4:2f:47:39:c6:6e:e2:67:b0:ee:90:10:5c:6c:8d:40:d8:
         32:f4:0c:7f:d3:2b:87:2b:65:2a:aa:f9:78:54:e1:10:c2:fe:
         3b:68:30:6b:a5:57:28:ab:1b:25:0e:9b:0e:fd:97:39:99:4e:
         4c:53:ed:a8:11:62:b3:14:7f:de:32:5f:6c:57:8c:54:82:26:
         fc:f1:86:da:19:fa:57:26:c2:e0:41:f8:44:02:c6:ab:61:65:
         6e:7c:d5:17:f9:13:5e:23:16:02:a5:9b:9b:3d:42:bd:7b:5f:
         da:4a:87:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org