Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e302e302f32302d3230203d3e203131393231.roa
File:                     3230312e34392e302e302f32302d3230203d3e203131393231.roa (raw, json)
Hash identifier:          FrvUV7OyTvrEIX8a2dsE0udrxD0o6TyMQ6Q59mRYS1E=
Subject key identifier:   72:50:AC:EC:FE:46:2A:64:9A:47:EC:37:50:5E:29:E2:72:E3:D8:EE
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       46F97CB8364C1E553A5B7D393AF3F44795206FFA
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e302e302f32302d3230203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:57 +0000
ROA not before:           Thu 28 Mar 2024 14:36:57 +0000
ROA not after:            Thu 27 Mar 2025 14:41:57 +0000
asID:                     11921
IP address blocks:        201.49.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f9:7c:b8:36:4c:1e:55:3a:5b:7d:39:3a:f3:f4:47:95:20:6f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:57 2024 GMT
            Not After : Mar 27 14:41:57 2025 GMT
        Subject: CN=7250ACECFE462A649A47EC37505E29E272E3D8EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:db:f0:97:93:fd:5c:54:c6:f8:d4:05:02:2a:
                    f4:79:f2:5c:29:ed:70:98:0d:c2:5d:c7:29:62:1d:
                    ff:1f:ab:43:0d:75:be:cd:9e:16:96:e4:52:6d:ea:
                    96:00:62:5e:02:a6:49:a0:7f:a5:22:c1:40:c3:45:
                    47:3f:1f:ac:f9:16:e4:7b:59:8b:e4:50:ca:94:ad:
                    30:09:f2:b3:3e:04:8f:6c:fe:53:bb:1f:5f:89:40:
                    64:c9:b9:b6:5a:b1:38:47:7e:e0:f9:f5:a9:11:01:
                    5a:1f:ea:7f:c2:56:ff:18:34:37:29:f4:9f:5c:b6:
                    6b:62:32:bb:b0:2d:5b:33:b6:db:9a:9c:02:6e:16:
                    92:2f:46:5a:92:2d:ef:5c:17:52:94:b0:dd:6a:6e:
                    17:4c:d8:f8:c2:0d:86:9f:51:11:33:56:12:44:e1:
                    ba:49:cf:0b:9d:45:24:ed:fa:b0:f7:1c:1d:fc:a1:
                    a9:6c:bd:9f:49:77:50:96:45:f1:31:68:fe:82:a8:
                    4b:b0:c1:3b:d7:c2:9e:3e:b7:ac:5a:fb:d0:ad:96:
                    5e:27:43:12:d5:ae:9b:dc:c5:69:c4:df:5c:44:8a:
                    20:e6:80:6e:5a:bd:3d:6c:51:db:cd:d8:11:63:55:
                    56:43:07:79:ac:92:ba:ee:2e:8e:b3:8c:fa:61:6c:
                    49:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:50:AC:EC:FE:46:2A:64:9A:47:EC:37:50:5E:29:E2:72:E3:D8:EE
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e302e302f32302d3230203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:2f:2a:8a:74:4f:42:63:fb:6e:02:77:27:f8:ba:91:14:ae:
         58:96:82:ae:de:34:f9:9b:a4:57:00:a8:dd:35:75:90:a4:a5:
         ea:7f:15:13:64:34:d1:c6:d2:5c:c1:e6:2e:b9:25:0a:5d:0f:
         ed:be:71:7f:96:1b:68:86:35:3a:de:72:9a:52:1f:c8:d0:f6:
         cd:5f:a4:21:d3:83:07:04:1f:49:91:f8:ef:76:51:d7:9c:e8:
         50:1f:5a:81:93:a8:36:c1:85:7e:19:06:5a:40:78:c0:75:0a:
         98:17:38:c0:41:81:77:4c:6f:0e:53:39:6a:f1:da:22:48:fe:
         ab:b1:91:1d:d0:82:69:6a:23:b4:0b:21:60:92:d1:53:0c:f7:
         1b:99:3e:c3:02:dc:8b:84:ca:ab:c5:0e:d3:cc:ed:40:e8:f2:
         d0:61:57:6d:3f:fb:71:1b:dc:92:a0:2e:33:dd:09:2e:04:ce:
         65:ea:7c:7b:93:e5:8a:21:ea:27:ae:1e:2e:7f:ac:ea:f3:44:
         92:f0:b3:6e:83:4a:f6:00:1e:71:7f:81:ea:9e:60:57:87:c6:
         dc:d9:5a:87:98:c4:49:7e:15:1c:37:4b:70:12:e5:69:d1:98:
         40:5e:34:f1:2f:3b:81:d5:f7:08:47:f8:45:38:75:a1:85:24:
         ec:df:3e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org