Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e302e302f31392d3139203d3e203131393231.roa
File:                     3230312e34392e302e302f31392d3139203d3e203131393231.roa (raw, json)
Hash identifier:          bcKBLYvNLaEZcDjAalKcrhGLSUpzxS7vQRkgh+E2cnI=
Subject key identifier:   07:6E:C2:CE:F8:BB:DD:98:0A:2B:73:8C:C0:7C:3E:2B:71:9B:BB:C0
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       1188218AD237BB4AF7F613AD2CD98E06E83B40F0
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e302e302f31392d3139203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:56 +0000
ROA not before:           Thu 28 Mar 2024 14:36:56 +0000
ROA not after:            Thu 27 Mar 2025 14:41:56 +0000
asID:                     11921
IP address blocks:        201.49.0.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:88:21:8a:d2:37:bb:4a:f7:f6:13:ad:2c:d9:8e:06:e8:3b:40:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:56 2024 GMT
            Not After : Mar 27 14:41:56 2025 GMT
        Subject: CN=076EC2CEF8BBDD980A2B738CC07C3E2B719BBBC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:86:e5:b5:6e:4c:35:40:e1:d2:79:83:3c:64:
                    e0:16:71:d8:32:09:7c:08:22:d4:ac:0e:38:8c:c2:
                    07:2a:60:83:d6:88:26:92:4a:ef:1d:22:c3:e8:c2:
                    d0:08:4a:99:be:68:74:94:aa:04:37:d6:93:c8:66:
                    58:ec:db:46:51:e0:a5:56:b0:c4:de:e1:47:10:8a:
                    9f:4a:a7:83:20:ad:db:9d:dc:02:d0:f6:74:78:d8:
                    33:86:8d:13:9f:91:63:b8:7b:a3:84:e3:f4:6e:5c:
                    c1:e1:13:eb:a8:49:df:31:9f:8c:48:ed:8a:89:fa:
                    ee:49:28:89:8d:cb:f5:d7:fe:ab:1b:1a:f6:6e:d7:
                    15:d3:42:05:8d:58:0e:35:b0:4f:00:00:81:3c:88:
                    3a:bb:64:4e:8e:04:7f:75:1d:16:78:93:ce:d8:e7:
                    21:00:c9:37:d4:65:e4:03:0b:f8:60:f7:73:e5:7d:
                    f9:81:55:7e:ee:d8:d1:f3:f9:80:ae:c9:65:9a:af:
                    ed:6c:30:1a:01:ae:6a:86:4f:e7:6c:74:b3:b2:89:
                    e3:61:62:b7:3f:70:45:59:13:8a:5a:c2:14:62:c7:
                    0d:51:38:50:b0:1a:25:c9:22:74:e9:e5:0c:f4:8f:
                    8d:49:ee:f7:d9:dc:e8:61:50:9b:a2:b4:7f:70:62:
                    84:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6E:C2:CE:F8:BB:DD:98:0A:2B:73:8C:C0:7C:3E:2B:71:9B:BB:C0
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e302e302f31392d3139203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         93:0a:d0:06:a8:a1:e6:52:da:80:76:a8:19:cd:d2:40:fd:2f:
         ad:e5:35:7a:c3:0f:87:71:66:1a:cf:5e:4e:bf:74:99:4b:7f:
         fc:58:f4:01:9e:4b:fb:95:c6:e1:79:b2:68:7d:00:d5:0c:31:
         a0:15:c8:ae:5e:d1:ce:d0:82:ab:ea:be:0e:3e:c4:bd:2f:c5:
         aa:0f:e8:f7:80:69:38:92:cf:46:04:d3:4c:65:be:7b:fb:fc:
         1d:ad:7b:29:1e:92:84:11:92:fd:6f:fc:59:1d:56:92:d2:a4:
         9e:6c:b2:c2:2f:39:03:0e:f2:e2:40:c5:91:02:18:36:cd:5a:
         aa:5f:f0:b9:59:04:5c:80:c8:56:b3:75:a7:24:1f:80:35:45:
         05:09:1f:6a:68:5a:f0:83:d7:ca:c0:cb:9b:d7:92:5a:58:78:
         23:da:06:f7:ba:e8:f3:df:20:8c:27:77:99:87:fe:e0:f2:d8:
         c1:fc:cb:fd:79:9e:a7:10:55:fe:04:6e:95:67:a5:b7:32:c8:
         c4:c6:69:53:cc:81:6c:47:75:64:64:70:2b:76:73:18:19:08:
         f0:53:1d:59:f0:0c:fe:b5:cb:dd:0c:49:e5:bb:45:fe:2c:2c:
         73:b7:10:87:55:05:1d:76:4c:a1:49:0c:cf:ad:f9:4b:1b:eb:
         6c:4e:25:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org