Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37362e302f32332d3233203d3e203131393231.roa
File:                     3230302e3233332e37362e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          BklJf42ecld00P/7f5p6EAqeLY7qeOGGk+jyeLeq8T8=
Subject key identifier:   F2:8D:A6:8E:7C:30:7F:42:B9:AB:90:28:5B:56:B5:BB:00:34:60:09
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       4AFC6E8B397234FE7972C7954F895519F929C9F2
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37362e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 17:41:58 +0000
ROA not before:           Thu 28 Mar 2024 17:36:58 +0000
ROA not after:            Thu 27 Mar 2025 17:41:58 +0000
asID:                     11921
IP address blocks:        200.233.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fc:6e:8b:39:72:34:fe:79:72:c7:95:4f:89:55:19:f9:29:c9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 17:36:58 2024 GMT
            Not After : Mar 27 17:41:58 2025 GMT
        Subject: CN=F28DA68E7C307F42B9AB90285B56B5BB00346009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:71:43:c7:cd:de:8f:22:b0:c5:50:69:71:
                    31:36:3b:eb:7c:04:d0:9c:a2:3a:34:bd:04:44:26:
                    6e:b4:fd:40:70:32:bb:c3:11:5c:2d:85:a7:e6:ef:
                    c4:4f:01:82:8f:96:f7:d2:65:d8:6b:f0:96:a0:9b:
                    91:ba:1c:59:2f:6b:de:22:e8:a9:b3:0f:8e:b8:64:
                    f3:f1:f7:d2:45:fd:cd:96:78:1c:9c:f6:1e:5f:0c:
                    06:2b:85:48:84:88:7d:01:69:07:90:7f:fc:27:ba:
                    b1:be:b0:88:5f:11:4e:57:6d:0e:31:1b:b2:c5:a0:
                    ff:87:1a:5f:19:65:98:76:ba:b1:5c:f0:16:e0:8a:
                    e3:b4:b8:4c:a8:5b:8e:d7:e0:01:b1:ed:81:8f:6a:
                    64:a9:b6:4b:2d:b1:38:00:46:fa:c1:84:b9:dd:65:
                    7e:90:10:e9:09:7e:18:80:c8:db:8d:28:8b:6f:14:
                    e2:af:a2:87:60:df:1f:fe:40:f7:b7:d7:83:2a:3e:
                    e7:cd:64:11:42:3e:d6:c9:ae:d6:18:3e:ec:30:92:
                    44:ab:02:4a:b6:56:ea:29:60:39:ec:15:07:18:d7:
                    cb:68:73:6e:36:ee:1b:42:0c:25:03:4c:5e:d4:8b:
                    37:1d:d9:a9:7b:57:48:b9:4e:cd:30:28:a9:cb:26:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8D:A6:8E:7C:30:7F:42:B9:AB:90:28:5B:56:B5:BB:00:34:60:09
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37362e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:05:36:86:8a:56:a7:09:79:f0:d7:79:8f:53:b1:93:04:dd:
         2d:9e:a9:18:30:b8:3c:56:91:af:ba:6a:fb:32:3c:ee:a9:c2:
         24:b3:fd:8f:fe:65:b6:bb:ce:e7:5a:63:27:10:55:10:9f:8d:
         d6:1c:91:09:1a:21:6b:e0:bc:f2:bb:bc:0d:92:e8:46:37:2c:
         02:b2:32:f0:8d:1d:ec:bb:9e:72:aa:e7:6b:58:33:53:b4:7a:
         52:67:8d:7f:cf:c4:11:7d:58:cc:a4:84:80:8b:9d:fb:02:8a:
         5c:0c:98:56:36:39:84:77:c0:29:3f:15:9d:bd:3a:14:83:76:
         be:c8:06:49:f0:2b:34:96:ce:1d:6d:6e:f4:89:e3:f2:b7:2d:
         2b:88:e8:ee:23:e6:8a:70:29:43:1a:84:27:06:a4:01:fb:e5:
         41:30:77:13:17:5a:42:eb:2e:23:3a:8c:05:41:7d:f1:3b:6c:
         2f:c3:12:a0:c6:d5:46:ff:5e:33:7d:a4:cc:42:eb:de:0f:b5:
         5f:dc:32:0f:3e:de:d9:8a:cb:69:71:e3:48:fc:15:90:26:3f:
         b0:3a:84:14:4d:1c:04:c7:56:00:d8:fb:34:fc:05:ca:a2:72:
         38:7d:20:76:95:da:cb:1a:1d:c9:18:5f:15:69:29:95:39:66:
         d9:b2:01:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org