Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e302e302f31382d3138203d3e203131393231.roa
File:                     3230312e34392e302e302f31382d3138203d3e203131393231.roa (raw, json)
Hash identifier:          ZxPbnYzFqe0Yi0nw24evNXfLjRzmIbig2WIyzcUi2Jo=
Subject key identifier:   8F:A9:97:F1:4F:AA:C9:C5:47:87:D4:A6:1E:3F:95:75:01:51:13:BC
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       02C6FA86B9896E685C8063F11B87B8A436ED9317
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e302e302f31382d3138203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:57 +0000
ROA not before:           Thu 28 Mar 2024 14:36:57 +0000
ROA not after:            Thu 27 Mar 2025 14:41:57 +0000
asID:                     11921
IP address blocks:        201.49.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c6:fa:86:b9:89:6e:68:5c:80:63:f1:1b:87:b8:a4:36:ed:93:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:57 2024 GMT
            Not After : Mar 27 14:41:57 2025 GMT
        Subject: CN=8FA997F14FAAC9C54787D4A61E3F9575015113BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:ac:50:4f:d1:b3:e9:08:1f:07:0a:b1:4f:
                    9d:c1:39:49:ce:ff:d2:e8:e9:f8:11:39:75:d5:26:
                    94:07:ff:8c:b4:2f:1d:42:10:f2:6f:21:41:71:13:
                    75:d7:d4:ee:e8:5d:eb:0b:22:44:22:26:e2:6b:5b:
                    7e:43:c8:c1:7e:8d:5c:0b:82:05:06:d6:45:04:45:
                    33:36:6e:fb:c7:98:0d:96:a8:6c:11:93:43:9b:eb:
                    92:8a:e1:b2:63:aa:db:88:2b:7c:71:72:08:6e:22:
                    d9:eb:05:06:8a:93:9b:a8:7f:65:ea:e5:79:98:82:
                    9b:1e:44:f2:b8:b6:82:87:75:38:9e:b4:a0:6a:25:
                    93:3d:c8:24:31:37:4f:c7:e3:92:bf:00:16:22:91:
                    62:3a:7b:5a:09:8f:2e:45:32:93:be:94:2d:ff:b4:
                    3a:97:cc:e8:18:94:4a:60:e5:c9:86:2a:5b:01:62:
                    07:de:9f:f9:fe:81:aa:5c:f3:f9:24:ba:d1:d0:25:
                    ed:95:0b:e2:04:02:3f:bb:a5:b9:0a:21:bf:6f:75:
                    a2:72:92:f7:fb:61:54:75:86:96:4c:71:04:a0:d4:
                    40:d9:91:66:bb:2d:34:14:c2:0f:3b:16:6c:db:f9:
                    23:7b:76:d3:46:b5:f0:ea:a2:78:18:4e:62:9f:c4:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A9:97:F1:4F:AA:C9:C5:47:87:D4:A6:1E:3F:95:75:01:51:13:BC
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e302e302f31382d3138203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1c:5d:fc:c3:4b:d2:11:09:eb:2f:af:98:6b:6b:71:04:a0:6d:
         b9:44:00:05:11:27:07:53:25:f7:6d:07:aa:b0:a5:c8:1d:77:
         fc:2d:aa:2d:bd:95:be:00:f8:ae:4a:ee:d9:81:1d:88:4b:03:
         9a:9c:fd:54:b8:4a:23:61:e9:c9:4f:e6:27:af:00:04:a8:d4:
         86:95:61:e4:d8:e8:71:e1:a1:3d:5a:83:ad:cc:e2:5c:83:6a:
         13:b5:07:3c:c9:81:80:c1:48:60:1f:0c:f6:a1:c1:5d:0e:80:
         3e:84:52:44:5e:23:54:db:7d:e6:97:86:3e:81:a9:7c:2c:73:
         af:9c:10:a2:ec:0d:1d:7e:55:e9:b1:11:c1:07:9a:e3:84:67:
         5b:0c:a7:fa:4d:dd:39:03:e1:fc:b5:f3:30:13:9b:1a:aa:a4:
         39:f7:e3:3a:8d:8e:3c:31:13:e7:d7:02:c5:7a:a2:3f:e8:f3:
         52:ab:ec:f7:30:30:50:91:6a:8e:9c:9f:39:d0:40:d3:19:9f:
         bf:a0:1d:99:79:4c:de:78:7b:1f:f6:85:e6:1d:dd:f4:e4:30:
         a9:9e:94:04:8b:c6:26:a9:53:7a:fa:a5:8f:92:39:c8:a7:3c:
         3e:16:7c:4f:ac:83:6a:6e:26:80:dc:5c:b9:9c:de:05:df:d6:
         12:11:7d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org