Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31322e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e31322e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          3yFHAXPo0NaiwE4SXSF7S5N8OHeH3wZr/7ngWHlCF8I=
Subject key identifier:   C8:A1:42:16:9C:1E:55:7F:22:51:D7:A8:0A:87:E8:9C:06:85:C6:32
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       2985B354036D08AC6347E8B6663D84538B9FEC32
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31322e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:42:00 +0000
ROA not before:           Thu 28 Mar 2024 18:37:00 +0000
ROA not after:            Thu 27 Mar 2025 18:42:00 +0000
asID:                     11921
IP address blocks:        201.49.12.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:85:b3:54:03:6d:08:ac:63:47:e8:b6:66:3d:84:53:8b:9f:ec:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:37:00 2024 GMT
            Not After : Mar 27 18:42:00 2025 GMT
        Subject: CN=C8A142169C1E557F2251D7A80A87E89C0685C632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fe:9f:d6:df:ab:13:a1:14:1d:06:07:10:0d:
                    d1:d7:64:01:4d:24:b8:f5:97:06:f2:f2:33:e6:76:
                    6d:e3:6b:50:22:8d:6c:6d:a5:11:22:e8:b6:a2:38:
                    c6:02:1b:fa:65:a3:fd:c2:1c:aa:5c:f4:e7:36:be:
                    43:3a:18:14:77:b6:35:59:5f:8a:08:8b:c1:bb:f4:
                    3e:8b:e0:e1:1d:11:d0:a3:95:be:6f:ec:5f:4e:80:
                    8e:a0:8c:dc:af:6c:bb:91:7b:8b:4b:3c:bc:b7:17:
                    e4:40:f6:08:24:76:be:05:b3:ba:84:f6:d3:7c:0d:
                    b8:69:6a:ca:9c:de:9a:f4:1c:29:56:f6:fb:ec:13:
                    4c:3e:7a:c4:2c:d4:1d:e0:1c:f3:2e:0a:4c:c1:19:
                    cc:4e:6a:46:01:c9:e8:13:85:fd:1d:01:fd:d5:c0:
                    ae:32:75:fc:e5:e8:8b:de:bd:86:dd:5c:78:90:2a:
                    21:c9:7b:f5:90:a9:63:33:18:9f:9a:4c:dd:c7:46:
                    da:a8:b9:92:db:fa:9a:63:1d:e3:ca:60:05:2b:21:
                    04:66:a2:30:b1:e9:29:73:f0:f2:08:e4:cc:d3:df:
                    ad:1a:d2:e7:f3:e5:35:8c:f2:88:fb:a6:b2:b0:e1:
                    c5:fb:8d:b1:23:63:66:70:50:22:b4:79:13:f2:57:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A1:42:16:9C:1E:55:7F:22:51:D7:A8:0A:87:E8:9C:06:85:C6:32
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31322e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:0e:4e:57:3c:1f:c1:95:2c:95:ee:ab:48:da:35:53:fe:be:
         bf:e5:61:c8:57:d3:44:07:d6:8a:d0:44:ad:68:a7:00:e8:83:
         8c:e1:cd:cc:dc:d7:86:47:55:eb:c8:1e:16:e5:6c:fa:d2:40:
         b2:c1:1f:70:fa:9b:5f:0f:e8:3f:66:b1:f3:de:6c:96:a7:f7:
         d5:40:94:eb:71:06:e6:3e:d4:0f:5e:aa:6b:08:7a:b6:cc:90:
         a1:51:8e:3c:59:cc:e7:a6:a2:c6:6c:d4:71:e9:9f:b6:ca:24:
         12:f9:14:71:7e:60:74:27:69:a9:34:43:b0:6a:17:cf:48:b9:
         9b:06:8c:c6:82:14:c1:81:2f:99:d1:aa:54:8d:df:b6:ad:54:
         c1:ae:94:40:28:34:68:d3:ea:90:7f:93:ff:89:82:8c:2e:7d:
         c9:f7:88:77:46:d6:b3:bd:d7:fd:d9:78:61:27:1b:86:8b:77:
         2a:2b:06:50:35:40:f7:89:7b:fc:e7:a8:a9:ab:05:f9:45:04:
         c6:0a:81:d4:94:ad:8e:e0:e3:28:38:53:b0:54:85:c5:f8:66:
         d5:73:f1:c4:31:5b:d0:8b:3b:24:80:27:59:0a:57:d0:96:34:
         a9:9b:82:eb:fb:47:e9:bd:24:ea:51:2e:fa:c1:1e:ba:bd:cb:
         bd:4e:f2:36
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUKYWzVANtCKxjR+i2Zj2EU4uf7DIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczMDYyNDQ0ODA2N0Q4M0U4MzRBRkQxMUU5NjU3REQ4
RTE5OTE5OTAeFw0yNDAzMjgxODM3MDBaFw0yNTAzMjcxODQyMDBaMDMxMTAvBgNV
BAMTKEM4QTE0MjE2OUMxRTU1N0YyMjUxRDdBODBBODdFODlDMDY4NUM2MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/p/W36sToRQdBgcQDdHXZAFN
JLj1lwby8jPmdm3ja1AijWxtpREi6LaiOMYCG/plo/3CHKpc9Oc2vkM6GBR3tjVZ
X4oIi8G79D6L4OEdEdCjlb5v7F9OgI6gjNyvbLuRe4tLPLy3F+RA9ggkdr4Fs7qE
9tN8Dbhpasqc3pr0HClW9vvsE0w+esQs1B3gHPMuCkzBGcxOakYByegThf0dAf3V
wK4ydfzl6IvevYbdXHiQKiHJe/WQqWMzGJ+aTN3HRtqouZLb+ppjHePKYAUrIQRm
ojCx6Slz8PII5MzT360a0ufz5TWM8oj7prKw4cX7jbEjY2ZwUCK0eRPyV8PFAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUyKFCFpweVX8iUdeoCofonAaFxjIwHwYDVR0j
BBgwFoAUlzBiREgGfYPoNK/RHpZX3Y4ZkZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMC85NzMwNjI0NDQ4MDY3RDgzRTgzNEFGRDExRTk2NTdERDhFMTk5MTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MzA2MjQ0NDgwNjdEODNF
ODM0QUZEMTFFOTY1N0REOEUxOTkxOTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzAv
MzIzMDMxMmUzNDM5MmUzMTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzMTM5
MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAckxDDANBgkqhkiG9w0BAQsFAAOCAQEAJw5OVzwfwZUs
le6rSNo1U/6+v+VhyFfTRAfWitBErWinAOiDjOHNzNzXhkdV68geFuVs+tJAssEf
cPqbXw/oP2ax895slqf31UCU63EG5j7UD16qawh6tsyQoVGOPFnM56aixmzUcemf
tsokEvkUcX5gdCdpqTRDsGoXz0i5mwaMxoIUwYEvmdGqVI3ftq1Uwa6UQCg0aNPq
kH+T/4mCjC59yfeId0bWs73X/dl4YScbhot3KisGUDVA94l7/OeoqasF+UUExgqB
1JStjuDjKDhTsFSFxfhm1XPxxDFb0Is7JIAnWQpX0JY0qZuC6/tH6b0k6lEu+sEe
ur3LvU7yNg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:48 2025 by rpki-client