Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37362e302f32322d3232203d3e203131393231.roa
File:                     3230302e3233332e37362e302f32322d3232203d3e203131393231.roa (raw, json)
Hash identifier:          HfqRdV8PNbWrKlekGbCmFpZqjAf/icbr6yx5f2D7vSM=
Subject key identifier:   29:81:05:DA:00:87:C7:39:92:CA:D0:B1:19:3F:7A:54:B8:92:44:5B
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       2DB993E8A7C681C23F26D751B3713C0907077D34
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37362e302f32322d3232203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:56 +0000
ROA not before:           Thu 28 Mar 2024 14:36:56 +0000
ROA not after:            Thu 27 Mar 2025 14:41:56 +0000
asID:                     11921
IP address blocks:        200.233.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b9:93:e8:a7:c6:81:c2:3f:26:d7:51:b3:71:3c:09:07:07:7d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:56 2024 GMT
            Not After : Mar 27 14:41:56 2025 GMT
        Subject: CN=298105DA0087C73992CAD0B1193F7A54B892445B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:97:23:c3:df:10:a5:22:f0:c2:a7:94:fa:e9:
                    cd:ef:22:c0:d4:3e:a3:47:3e:4d:9f:cc:8f:a3:b4:
                    06:79:53:38:d3:23:1f:64:68:73:f3:59:b6:5a:33:
                    41:3a:23:40:91:81:05:63:ee:13:84:5b:b2:a1:30:
                    8f:cf:0a:59:39:d7:62:9d:f5:3a:aa:1b:24:03:be:
                    47:e3:f3:05:89:b1:8a:d0:b0:f9:aa:a5:5c:8d:15:
                    2f:38:85:46:f2:70:40:61:2a:f3:dc:15:76:60:93:
                    b3:11:61:02:fd:b1:d6:31:1f:f9:a1:5b:56:b3:d7:
                    3b:0c:9c:e0:0c:7b:e1:28:c3:6b:3c:3e:7a:69:69:
                    85:a9:7d:d8:85:aa:75:e7:4f:6b:a5:05:b1:8e:a8:
                    f1:11:de:72:d5:c1:8a:b2:45:4e:99:7a:35:f8:64:
                    b2:a2:0f:98:cf:0a:43:29:7b:de:aa:d8:f8:59:84:
                    34:cf:9a:00:a6:5c:c8:a3:28:11:37:e2:81:5c:d7:
                    b8:14:b4:b1:51:82:63:3c:c7:b0:39:1e:11:5f:db:
                    76:88:ee:9f:03:c6:44:62:ad:63:7a:81:5e:18:18:
                    dc:94:18:1a:c0:c5:4d:39:c3:63:28:1a:3b:74:b4:
                    1e:12:ae:66:ca:b7:b5:ba:7d:59:dd:85:7c:1c:6d:
                    6c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:81:05:DA:00:87:C7:39:92:CA:D0:B1:19:3F:7A:54:B8:92:44:5B
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37362e302f32322d3232203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:ad:56:99:91:2b:56:19:44:c6:10:3a:85:b7:47:7d:e3:1a:
         b0:fd:8f:f8:61:2b:9a:28:39:4e:94:a1:56:b5:68:fc:16:a7:
         52:18:10:57:5f:bc:2d:22:df:4a:3e:d6:ce:89:5a:36:d5:38:
         bd:f2:e4:8b:e9:3d:65:dc:43:f9:d6:09:99:b7:52:9f:68:cb:
         da:ab:b5:8b:fa:9f:5b:11:6b:3d:77:59:cb:98:87:82:99:21:
         ea:77:d5:32:79:68:17:4c:48:cd:bb:a1:0a:eb:a0:35:3a:4d:
         15:b5:94:0d:2e:ab:8f:46:0b:af:45:9a:1a:1e:f1:50:cd:41:
         de:ca:f2:ec:ff:32:33:e5:b5:3d:18:0b:f1:5c:0b:58:58:19:
         9b:42:8a:3a:51:62:05:6c:80:4e:74:e9:21:0d:f6:4d:10:8b:
         a1:bb:5f:fe:c1:a4:c8:86:5c:4d:44:71:ab:75:b8:d3:ad:ee:
         ad:24:38:ed:a0:cb:01:40:68:e1:fc:91:4a:43:93:14:98:6f:
         0b:6d:90:ae:d4:5f:c6:5b:99:e1:d4:58:2f:a9:b7:49:a4:55:
         8c:21:cb:0d:dd:35:7d:40:61:f5:81:4f:ac:b7:32:3b:6c:62:
         8b:f1:c6:53:84:0d:0e:62:a0:03:63:f9:05:22:cc:7c:04:09:
         42:8f:8a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org