Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37382e302f32342d3234203d3e203131393231.roa
File:                     3230302e3233332e37382e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          LUmMIJ1eduLmndjp3ytVDVYWT+JcFmmauEZmGzqPOME=
Subject key identifier:   CC:AB:C9:63:2B:08:61:D0:46:EC:1A:F0:C6:57:0E:D8:CF:C8:41:30
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       019A3965EBD2B5278D5D0C50846ADB499C3A910E
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37382e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 13 Mar 2024 22:42:35 +0000
ROA not before:           Wed 13 Mar 2024 22:37:35 +0000
ROA not after:            Wed 12 Mar 2025 22:42:35 +0000
asID:                     11921
IP address blocks:        200.233.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:39:65:eb:d2:b5:27:8d:5d:0c:50:84:6a:db:49:9c:3a:91:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 13 22:37:35 2024 GMT
            Not After : Mar 12 22:42:35 2025 GMT
        Subject: CN=CCABC9632B0861D046EC1AF0C6570ED8CFC84130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7b:2b:98:60:95:1a:bd:32:33:ba:a5:30:f2:
                    01:b0:46:3a:1f:95:54:31:06:98:3b:a4:36:85:ed:
                    19:5c:22:25:b2:b2:c6:b7:e6:30:17:e1:5d:0e:04:
                    5d:cd:ef:35:61:1b:3d:ee:c1:18:49:40:00:a4:c2:
                    fa:29:c4:53:d9:04:0d:1d:0b:f7:8c:e9:e4:ca:91:
                    a2:5f:a6:37:41:c5:cf:f2:8c:22:39:68:40:b8:17:
                    b5:26:5d:87:4a:27:45:ae:28:19:88:4b:bf:e5:8d:
                    ef:8a:33:2c:12:d9:a9:bb:54:a2:e4:9c:a5:6a:b1:
                    89:cc:bb:10:ca:8b:17:fa:4d:31:bd:74:23:f8:58:
                    c5:ab:7f:24:99:6d:9c:0f:94:89:03:84:26:e8:99:
                    51:f6:b3:cf:3c:04:7e:4b:23:de:f8:0f:85:af:44:
                    b6:59:ea:e9:8e:3f:1c:b0:0f:0d:51:20:52:0c:31:
                    71:e5:ce:d9:36:4e:03:8a:b5:8a:c6:24:26:8b:45:
                    cb:ef:70:66:b5:21:fd:44:ff:90:96:69:64:1a:fb:
                    ba:df:6a:44:3f:de:1e:f2:d2:d6:a1:c3:a4:c0:0f:
                    94:0e:bb:80:9f:38:6a:19:57:9b:d6:71:62:b8:03:
                    fa:9d:62:50:00:5f:ff:e5:f0:00:f5:43:45:cc:cb:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AB:C9:63:2B:08:61:D0:46:EC:1A:F0:C6:57:0E:D8:CF:C8:41:30
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230302e3233332e37382e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:d2:33:cc:7d:c3:ee:cc:48:2b:83:5d:b5:30:7a:0b:ab:f1:
         27:e2:19:ce:2e:c1:af:a1:91:5d:1c:a7:39:30:9a:18:5e:e5:
         d7:c7:97:c7:f1:bb:68:5a:0c:00:5c:a3:cf:78:2f:01:56:22:
         1f:64:d1:ae:bf:ca:bc:6c:c4:83:e9:ce:88:fd:66:ba:df:3c:
         f4:55:ca:98:c8:25:40:c7:f7:84:e4:ec:e0:0d:2d:cb:4c:80:
         e1:0b:1f:70:0e:5e:58:1f:fd:44:3d:f9:93:85:44:50:13:4a:
         d6:19:95:51:ae:b8:cf:1b:d7:f9:25:78:33:48:4a:4b:c1:5c:
         c6:18:af:f5:94:c1:e5:0f:a9:7d:e4:40:25:a0:a3:c9:ba:c0:
         7d:04:66:06:77:02:d8:29:65:57:40:6c:d4:66:2c:48:30:23:
         91:63:f1:03:83:60:9b:9b:24:5a:ab:ba:e9:dc:64:66:18:ac:
         18:b0:f1:52:11:1c:08:5c:8b:b1:f4:f8:71:0d:6c:68:1b:61:
         1d:80:3d:4f:e6:17:b5:18:9f:d7:2a:df:e0:f0:9b:f5:5b:48:
         fa:14:5c:4d:43:34:d4:59:d4:c0:f4:70:54:ae:c5:53:85:be:
         9f:af:fe:d1:cf:59:cc:87:d3:67:0a:f5:3c:c0:66:02:41:6c:
         de:bf:54:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org