Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37302e302f32332d3233203d3e203131393231.roa
File:                     3230302e3233332e37302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          zxcvH4uH6PekCIIFBPzu9RHgqjTyZdB9wb4hJKlz+kY=
Subject key identifier:   00:D9:0E:E2:1B:31:70:3F:5A:F4:B0:AC:0F:E4:F5:B2:BC:FB:C0:AE
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       63B28064937B285379060215B4135B52658C8D81
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 17:41:58 +0000
ROA not before:           Thu 28 Mar 2024 17:36:58 +0000
ROA not after:            Thu 27 Mar 2025 17:41:58 +0000
asID:                     11921
IP address blocks:        200.233.70.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b2:80:64:93:7b:28:53:79:06:02:15:b4:13:5b:52:65:8c:8d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 17:36:58 2024 GMT
            Not After : Mar 27 17:41:58 2025 GMT
        Subject: CN=00D90EE21B31703F5AF4B0AC0FE4F5B2BCFBC0AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:32:28:ba:8f:ec:24:9f:94:1f:c3:f5:c8:b7:
                    1d:4c:44:2e:c9:a2:e4:6d:56:ce:68:19:23:4f:f4:
                    44:61:29:04:93:51:ce:34:40:e0:e6:b5:94:45:74:
                    e3:69:83:13:fa:b6:7a:db:e0:b5:79:41:2d:4f:a5:
                    be:9d:89:2a:41:be:7e:36:ef:ee:c4:fb:be:ee:b3:
                    e3:cc:fa:fe:9c:f0:94:4a:f4:7d:69:97:0f:89:4d:
                    78:94:0d:f3:07:66:9e:93:d0:2c:27:d0:80:59:9a:
                    32:1a:c9:82:e8:75:a8:04:2f:05:39:4e:64:de:7b:
                    b7:2a:0a:46:da:f1:72:2b:e3:d2:de:ef:19:17:07:
                    d0:84:b5:b4:23:c8:26:f4:f6:5a:5e:d1:32:a9:dc:
                    00:1c:4e:10:aa:16:30:45:0a:26:2d:b8:c6:c7:54:
                    ba:bd:d9:33:b1:50:17:68:46:dd:96:d0:af:42:e5:
                    06:e7:73:bc:02:53:db:32:be:0c:77:c9:4b:90:c0:
                    35:2c:0a:d5:26:81:eb:f1:1b:fc:b7:bd:c8:da:31:
                    0b:fa:49:86:8f:01:5a:be:6f:aa:7f:cd:0d:b5:3e:
                    c7:9e:a9:6e:38:eb:0c:37:6a:52:0f:ad:e2:28:b2:
                    0f:6c:11:b2:8c:2f:63:1a:57:6c:72:d8:7c:96:1d:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D9:0E:E2:1B:31:70:3F:5A:F4:B0:AC:0F:E4:F5:B2:BC:FB:C0:AE
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:4e:0b:8b:80:61:07:35:0d:5b:73:87:57:70:63:7e:9b:bd:
         a8:5f:27:54:9e:84:4f:99:61:34:6a:ee:57:24:1b:d2:f4:9a:
         8e:d8:82:70:62:91:27:1e:5c:7c:af:90:d1:80:75:c7:89:8b:
         83:ab:1b:57:cb:7a:c3:8b:72:ef:ac:6a:e4:de:1d:c8:36:b9:
         ca:44:4a:1d:35:b6:f2:17:7b:72:50:ed:a8:77:29:62:7e:b7:
         d7:b6:99:88:24:d7:cc:66:09:19:ee:9f:e9:8e:13:be:58:b7:
         d8:f7:ae:dd:30:f9:71:80:2a:27:d7:76:9d:d3:74:ca:f1:d3:
         6b:c5:5d:04:96:f8:dd:13:72:4d:59:cf:7a:1b:09:20:8f:20:
         f2:d5:83:44:ad:10:37:53:64:0b:04:8f:cd:a0:4b:dc:7b:28:
         0d:8e:bd:bf:95:b4:6b:a2:d0:a3:0d:99:2b:fc:e0:f9:e4:ba:
         80:83:d4:a5:df:38:ca:55:dd:ea:fd:e6:46:94:0b:e3:ff:50:
         cb:45:f1:d9:55:a2:28:91:b6:19:4b:fc:49:6d:36:26:be:01:
         db:4e:00:16:65:a2:33:ec:5f:eb:e2:c8:e3:3c:45:94:d3:68:
         0c:be:41:bf:65:af:72:87:3d:4b:55:65:0f:6f:03:c2:ca:ff:
         5a:ab:13:3d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUY7KAZJN7KFN5BgIVtBNbUmWMjYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczMDYyNDQ0ODA2N0Q4M0U4MzRBRkQxMUU5NjU3REQ4
RTE5OTE5OTAeFw0yNDAzMjgxNzM2NThaFw0yNTAzMjcxNzQxNThaMDMxMTAvBgNV
BAMTKDAwRDkwRUUyMUIzMTcwM0Y1QUY0QjBBQzBGRTRGNUIyQkNGQkMwQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxMii6j+wkn5Qfw/XItx1MRC7J
ouRtVs5oGSNP9ERhKQSTUc40QODmtZRFdONpgxP6tnrb4LV5QS1Ppb6diSpBvn42
7+7E+77us+PM+v6c8JRK9H1plw+JTXiUDfMHZp6T0Cwn0IBZmjIayYLodagELwU5
TmTee7cqCkba8XIr49Le7xkXB9CEtbQjyCb09lpe0TKp3AAcThCqFjBFCiYtuMbH
VLq92TOxUBdoRt2W0K9C5Qbnc7wCU9syvgx3yUuQwDUsCtUmgevxG/y3vcjaMQv6
SYaPAVq+b6p/zQ21PseeqW446ww3alIPreIosg9sEbKML2MaV2xy2HyWHW/VAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUANkO4hsxcD9a9LCsD+T1srz7wK4wHwYDVR0j
BBgwFoAUlzBiREgGfYPoNK/RHpZX3Y4ZkZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMC85NzMwNjI0NDQ4MDY3RDgzRTgzNEFGRDExRTk2NTdERDhFMTk5MTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MzA2MjQ0NDgwNjdEODNF
ODM0QUZEMTFFOTY1N0REOEUxOTkxOTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzAv
MzIzMDMwMmUzMjMzMzMyZTM3MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMTMx
MzkzMjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByOlGMA0GCSqGSIb3DQEBCwUAA4IBAQAiTguLgGEH
NQ1bc4dXcGN+m72oXydUnoRPmWE0au5XJBvS9JqO2IJwYpEnHlx8r5DRgHXHiYuD
qxtXy3rDi3LvrGrk3h3INrnKREodNbbyF3tyUO2odylifrfXtpmIJNfMZgkZ7p/p
jhO+WLfY967dMPlxgCon13ad03TK8dNrxV0ElvjdE3JNWc96GwkgjyDy1YNErRA3
U2QLBI/NoEvceygNjr2/lbRrotCjDZkr/OD55LqAg9Sl3zjKVd3q/eZGlAvj/1DL
RfHZVaIokbYZS/xJbTYmvgHbTgAWZaIz7F/r4sjjPEWU02gMvkG/Za9yhz1LVWUP
bwPCyv9aqxM9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org