Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37382e302f32332d3233203d3e203131393231.roa
File:                     3230302e3233332e37382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          +7KTX3f5AS8KsIM9d1VjNaPp3HM/lBiLvZZo/yE/Ug0=
Subject key identifier:   29:52:B9:9D:2B:76:04:08:C7:AD:22:06:51:22:43:2E:63:A9:59:25
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       0C9EA10A76715BF7B3F8A3B1C6D2F5AD60C0D587
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 17:41:58 +0000
ROA not before:           Thu 28 Mar 2024 17:36:58 +0000
ROA not after:            Thu 27 Mar 2025 17:41:58 +0000
asID:                     11921
IP address blocks:        200.233.78.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:9e:a1:0a:76:71:5b:f7:b3:f8:a3:b1:c6:d2:f5:ad:60:c0:d5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 17:36:58 2024 GMT
            Not After : Mar 27 17:41:58 2025 GMT
        Subject: CN=2952B99D2B760408C7AD22065122432E63A95925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:aa:66:c8:1b:bd:c3:d2:af:e6:50:b2:75:
                    7f:97:81:17:24:82:2d:47:85:e1:3a:0d:e1:a0:82:
                    a0:8d:30:a9:b1:10:8f:5b:c7:28:c1:9f:71:a6:7a:
                    65:a1:34:55:67:27:ff:4a:0e:94:1e:ee:f6:7c:57:
                    20:6b:64:fb:2e:40:93:7e:02:d9:02:3d:98:e6:45:
                    e8:e9:7b:7b:73:8a:0b:75:79:62:48:6a:55:ed:08:
                    a9:8d:90:2f:32:6a:cf:15:f7:d4:42:b5:75:d2:7a:
                    af:0d:58:b4:65:b5:a7:44:ff:20:c8:58:11:e5:fe:
                    39:35:f5:f6:7d:9c:64:2a:f6:52:7c:ae:5a:66:7d:
                    ad:f5:1f:d9:a0:8d:06:87:25:b2:f0:30:d6:82:a6:
                    56:26:94:ea:04:d2:0b:89:8d:8c:77:1c:c8:3d:6b:
                    b5:0e:e6:89:72:41:77:c3:c6:6a:fa:06:e4:af:5e:
                    0b:8d:11:09:15:12:d5:d6:92:cc:9c:9b:42:94:df:
                    22:c9:74:2f:d1:89:7b:85:c5:e1:44:26:51:7b:64:
                    40:e1:5a:85:7c:0c:5d:b2:34:c3:3a:c1:43:b6:97:
                    50:ae:d0:af:84:a9:a8:47:6b:41:07:a7:1f:a5:97:
                    a2:d2:10:2c:10:16:ee:2b:00:ca:99:8b:bc:ca:38:
                    09:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:52:B9:9D:2B:76:04:08:C7:AD:22:06:51:22:43:2E:63:A9:59:25
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:65:30:bc:d9:9a:25:18:98:79:28:d5:9f:4e:57:04:7b:cd:
         db:5e:cb:36:56:3c:41:cc:1e:33:f4:27:f4:43:c2:5d:2f:2a:
         a1:43:9c:f8:9a:96:d0:73:d8:a3:8b:86:07:15:a0:6f:7f:7b:
         c6:7f:fb:63:87:92:9d:e1:bd:09:ac:e4:4c:c6:ac:ab:11:82:
         c2:55:3e:fb:c3:27:84:66:16:ce:53:cf:43:22:33:b0:09:e0:
         bb:7e:b7:37:14:e7:ce:0d:d5:c9:03:79:02:c5:5d:d8:8b:94:
         ac:b9:bc:a1:f1:af:f9:6d:9b:bc:75:06:94:b0:57:e3:df:9e:
         3e:96:0c:c1:64:1d:b5:7a:71:3e:d0:60:a9:60:0c:92:d7:42:
         d9:83:0b:84:f1:e0:9c:39:bf:4b:38:97:87:67:55:e4:ab:fb:
         bd:ae:96:fb:ac:4f:4b:73:35:24:c6:a0:4c:74:c0:8f:e9:15:
         0e:80:c2:de:83:6a:4b:38:cb:0e:67:d6:3c:64:b6:4f:e1:f9:
         fc:af:4f:49:9c:63:a5:2c:43:d9:e7:58:15:1d:11:c2:5a:37:
         cd:6f:ca:d4:20:40:ca:2c:26:32:84:3b:89:91:61:ae:12:cd:
         a7:ef:fe:28:f3:71:bd:a5:cf:52:8e:ce:e0:01:f1:6f:22:4f:
         be:81:77:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org