Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e302e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          DoIlK6GCT4mGH32IYFpKIeanX4gS9zVqzsSuKi4DNFI=
Subject key identifier:   6C:E5:F2:43:17:02:DC:B1:07:C5:EE:E9:A3:9B:B6:E3:57:79:9A:62
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       6A385A26C945A1DB57DA60BBC44B428D2607B128
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 17:41:58 +0000
ROA not before:           Thu 28 Mar 2024 17:36:58 +0000
ROA not after:            Thu 27 Mar 2025 17:41:58 +0000
asID:                     11921
IP address blocks:        201.49.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:38:5a:26:c9:45:a1:db:57:da:60:bb:c4:4b:42:8d:26:07:b1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 17:36:58 2024 GMT
            Not After : Mar 27 17:41:58 2025 GMT
        Subject: CN=6CE5F2431702DCB107C5EEE9A39BB6E357799A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1f:1c:a9:2a:51:e4:a2:ab:d7:ce:2b:8d:f8:
                    8c:d6:b2:d3:7d:c1:95:8a:73:2d:67:74:c0:95:e2:
                    1a:dc:17:b7:43:1a:b9:4e:6b:94:b8:40:91:74:9e:
                    c2:8f:e0:66:0a:79:e8:8a:88:6e:d6:ad:46:59:04:
                    fd:aa:5c:41:c5:1a:20:c1:2d:3c:d2:77:a3:0e:d2:
                    06:48:43:00:c0:8b:02:f9:de:bb:c7:ed:f3:90:44:
                    c1:0c:3b:9d:aa:52:2e:05:e6:7c:39:ae:a3:a4:d8:
                    9b:91:49:5b:99:28:39:62:f7:f7:ff:52:b6:6b:10:
                    90:69:b2:6b:1a:d6:9b:26:32:86:01:08:fe:0c:07:
                    fa:58:46:62:11:30:b7:43:5d:5a:f1:b2:d0:a0:b5:
                    c1:bd:1a:88:ad:08:54:61:f3:9b:10:b2:a5:23:41:
                    8e:d1:8b:ea:a1:95:78:cd:b7:51:59:23:00:d6:37:
                    d1:43:e7:e0:4a:29:f5:94:f0:cc:6e:ef:ec:50:08:
                    ac:a2:80:c6:c2:ea:cd:3f:ff:b2:0f:f0:23:03:45:
                    e5:e5:39:df:18:0b:33:9f:de:e7:92:8a:06:19:f7:
                    3c:02:a1:4a:ce:45:52:9a:37:1a:17:ae:be:fa:5e:
                    38:35:40:dd:cb:0e:65:09:0e:45:8d:42:da:37:e6:
                    3b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E5:F2:43:17:02:DC:B1:07:C5:EE:E9:A3:9B:B6:E3:57:79:9A:62
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:c0:58:ac:bf:73:40:0f:b3:20:a8:f6:0f:90:50:b2:6e:ed:
         bb:7f:00:ac:d4:78:dd:a5:d2:07:a3:38:be:a3:be:6a:d6:d7:
         45:a7:50:9a:f8:cf:d3:88:2b:7f:c7:59:90:45:5c:1d:92:ba:
         d9:5e:1a:3e:f5:e2:70:3a:61:f6:b3:6c:ae:c6:d3:fa:c8:da:
         86:71:bf:b1:00:d2:ee:89:b9:08:da:27:e1:34:bd:94:20:67:
         be:5f:8c:e9:3c:26:fa:86:c9:b3:e0:e1:5e:ab:69:ea:1b:c0:
         f4:ed:0b:ae:51:c0:40:97:89:58:47:5d:5d:f6:e5:87:39:76:
         3d:d4:bf:65:41:a5:46:7a:40:5c:b8:cf:e1:35:90:99:1e:a7:
         3b:7b:25:29:48:aa:7b:8b:31:40:07:02:9f:bb:fe:c5:b5:61:
         98:f2:b2:8b:2c:ba:c1:93:74:6b:4a:b2:cd:61:7e:66:79:a0:
         ac:c8:1e:79:6b:b9:09:7e:ec:70:3b:0e:e6:8e:91:2b:c4:b6:
         90:ff:5c:bc:c7:95:4b:e3:e0:33:b6:12:f0:fb:61:18:b8:66:
         d4:8e:8f:42:85:2a:fe:68:d1:88:5e:5a:ab:aa:0f:6f:51:44:
         37:ac:8e:67:76:62:47:f0:cc:7e:cb:f7:74:15:ae:f3:16:c4:
         a9:3d:0b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org