Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31302e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e31302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          E9xjEdlwyR0xMnyBcetp+n3BQxjAotM1adz//NiP9EU=
Subject key identifier:   1F:CF:22:75:DF:3C:32:B3:82:FD:53:4C:45:07:08:87:DC:11:BA:21
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       44D01D737164EB81B3BA611A77D1DAB6C02ED148
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:42:00 +0000
ROA not before:           Thu 28 Mar 2024 18:37:00 +0000
ROA not after:            Thu 27 Mar 2025 18:42:00 +0000
asID:                     11921
IP address blocks:        201.49.10.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d0:1d:73:71:64:eb:81:b3:ba:61:1a:77:d1:da:b6:c0:2e:d1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:37:00 2024 GMT
            Not After : Mar 27 18:42:00 2025 GMT
        Subject: CN=1FCF2275DF3C32B382FD534C45070887DC11BA21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:50:ed:06:a7:1f:fa:08:58:8e:61:3d:c2:23:
                    1f:0a:d0:da:c2:06:0f:3e:b9:db:34:28:d2:24:ee:
                    02:1c:a6:96:90:e1:fc:83:f2:06:ed:73:ad:3c:7a:
                    98:67:6e:b7:3d:9f:a7:25:90:30:ac:bf:ef:4f:e5:
                    d2:30:e8:a0:80:9f:fd:ac:05:9f:40:25:11:2d:09:
                    47:5e:fd:4f:2e:cb:72:65:ce:9e:a7:6b:12:dd:dd:
                    ba:2d:16:7e:26:89:1e:d0:c4:b1:56:0c:05:83:43:
                    44:e6:95:ce:fd:cd:77:5e:e0:e7:e0:d1:ba:97:ce:
                    9e:93:4c:33:85:16:26:66:69:58:8b:18:ba:e1:81:
                    a6:df:e9:a4:f0:94:28:15:6a:b4:b2:4e:c8:88:42:
                    86:b3:f8:00:8c:ca:cd:2f:4f:61:1d:c2:06:47:6e:
                    7e:b2:4f:1d:69:7b:d0:3a:01:93:33:87:3a:ae:6b:
                    12:2b:9e:e2:9e:bc:d1:4c:1c:ae:ee:e0:75:8d:60:
                    44:dc:8b:c5:01:d9:41:db:ea:90:e8:14:4e:f5:1a:
                    ea:ec:82:67:60:17:0b:05:cd:e0:4e:04:4e:e4:89:
                    cb:08:93:f6:48:ab:ff:10:55:29:5f:a4:28:1c:f6:
                    66:6b:d7:c9:27:1d:d1:5b:da:30:41:34:82:1b:7d:
                    59:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CF:22:75:DF:3C:32:B3:82:FD:53:4C:45:07:08:87:DC:11:BA:21
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:0d:a4:e6:07:c8:af:ee:73:5b:89:4f:92:21:ff:3f:07:ed:
         6c:97:2d:14:06:ce:77:43:50:39:e2:c1:40:d0:2f:81:3b:ef:
         ed:3e:45:4b:e7:62:18:c9:bd:a7:07:ff:d4:11:0e:6a:8a:81:
         c2:35:dd:76:a4:f9:4c:0e:aa:35:9c:8e:bf:d7:ad:c1:9b:2f:
         4c:94:f8:d4:86:d3:36:87:02:96:4d:e3:6b:26:4f:0f:31:c7:
         18:44:21:a5:14:4d:c0:e0:57:2d:71:d1:c8:08:bd:f1:3a:98:
         e1:74:2c:13:a3:93:77:49:99:aa:0b:67:fa:7e:3a:86:0f:5c:
         95:a1:70:31:ac:8b:cc:ab:e3:c9:44:81:f9:db:e6:9b:e8:af:
         d1:d6:f2:e7:3c:d8:a9:06:a6:ee:15:44:59:03:79:7e:22:2f:
         d3:94:c2:59:d4:fc:c7:4f:1e:56:0d:9b:c7:bd:df:9d:f7:d8:
         cc:60:30:f0:0b:b6:03:e3:e8:11:57:0f:8e:e0:5e:58:29:2e:
         6a:68:fe:13:40:cc:7e:c5:f4:6b:72:dc:f5:f6:f5:5b:69:48:
         2c:ec:ca:68:30:26:5d:01:b8:c1:b6:86:8a:1d:ee:b2:72:31:
         08:64:4e:8e:d8:5d:34:55:81:9e:cd:7c:b9:d8:77:bb:9b:82:
         6b:18:8b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:48 2025 by rpki-client