Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37322e302f32332d3233203d3e203131393231.roa
File:                     3230302e3233332e37322e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          8tC1RLfuTZ2nWGbM3d4no9vmcelRN3cxcdD9iIyCYhk=
Subject key identifier:   7F:7A:25:FA:C8:9D:1D:17:B0:8D:4D:80:EC:FC:83:5B:19:97:1E:52
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       3A14230C694E1A260222A7DB3FF59914EBD51E6D
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37322e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 17:41:58 +0000
ROA not before:           Thu 28 Mar 2024 17:36:58 +0000
ROA not after:            Thu 27 Mar 2025 17:41:58 +0000
asID:                     11921
IP address blocks:        200.233.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:14:23:0c:69:4e:1a:26:02:22:a7:db:3f:f5:99:14:eb:d5:1e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 17:36:58 2024 GMT
            Not After : Mar 27 17:41:58 2025 GMT
        Subject: CN=7F7A25FAC89D1D17B08D4D80ECFC835B19971E52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:dc:91:25:47:39:6f:16:75:58:05:6d:f6:
                    4c:03:95:e7:e3:49:13:69:3e:b6:86:d8:42:53:92:
                    e6:d6:c4:ff:3b:65:66:88:25:55:30:de:25:51:ee:
                    00:f5:6b:b8:05:79:3e:5d:ab:a7:46:62:78:78:b9:
                    eb:3d:a7:cb:02:0e:24:f7:be:af:df:97:76:a5:b0:
                    04:78:52:24:1c:fa:b7:50:61:c7:4b:3d:94:5e:95:
                    6a:c8:cd:5d:df:80:6c:88:9c:bf:80:ce:c0:96:41:
                    b3:b3:c5:b0:31:a0:10:64:6e:41:6b:1a:1a:b2:a3:
                    81:18:47:f7:98:95:eb:67:66:43:d3:29:7b:ac:4a:
                    14:94:5d:21:d9:b0:9c:6f:ed:8c:f9:a1:15:44:f6:
                    d4:2f:39:e4:04:85:17:70:6d:58:96:d4:5d:cd:52:
                    31:1e:fa:68:51:c4:97:c2:f9:fd:43:6d:73:e5:48:
                    9f:e9:7d:61:07:ad:d0:ee:30:ab:f2:31:5e:4c:83:
                    05:45:08:69:0b:fa:9e:38:6b:b0:3e:71:78:5f:02:
                    1c:e3:6f:ff:a4:13:4c:15:86:1d:4b:ec:ac:8f:9a:
                    ff:18:37:e6:43:2c:ce:25:10:22:60:b0:a6:b4:a2:
                    14:6f:ee:46:36:ba:9a:4b:fd:44:ed:c6:c5:99:f7:
                    6a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7A:25:FA:C8:9D:1D:17:B0:8D:4D:80:EC:FC:83:5B:19:97:1E:52
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37322e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:d8:c4:d1:9d:db:75:2d:f9:53:31:a4:d9:af:a2:63:a4:25:
         85:74:8f:6d:6a:3e:56:63:b8:32:92:27:f6:99:ec:24:0d:9c:
         bd:c8:b9:ae:bd:e1:e6:41:31:77:79:96:28:21:69:4e:b8:cd:
         2e:68:18:74:ae:3b:7e:6d:8c:e4:83:bf:46:18:ce:af:93:ff:
         d3:b5:8d:c8:4c:91:5d:6e:03:66:ac:57:b3:d0:97:32:11:f8:
         3e:84:dd:81:d5:08:b2:18:79:48:fd:7d:30:49:4b:e0:23:75:
         08:71:8a:12:57:b0:14:f4:bb:b5:35:97:1a:79:80:d5:c3:db:
         f5:d6:8b:f2:73:87:5e:72:87:b7:0e:10:45:5d:e9:cf:83:cc:
         da:d7:79:ea:36:82:27:8c:32:61:3b:34:b4:db:59:8e:8e:35:
         86:3b:0c:7f:2e:0c:5a:46:a3:4e:cd:fc:11:22:67:dd:c9:49:
         44:7c:72:c2:67:cc:c1:fe:07:f6:d0:29:b0:07:44:94:03:44:
         f6:84:ec:61:b8:6a:a1:40:ea:b2:5d:ea:fe:d8:b3:2a:02:f9:
         af:be:ec:e2:2d:d3:83:37:87:96:19:16:cd:03:c3:6f:72:d0:
         c1:7a:44:e9:9d:5b:9a:0a:c5:d3:f1:16:ac:df:d8:33:11:46:
         ee:92:8c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org