Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31342e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e31342e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          EytPmE35ZotdCVn/C+i5yNlYMk/jg04i0AwbwzxSPg0=
Subject key identifier:   30:00:2D:37:7F:E6:DC:2F:8B:72:BB:1C:FA:83:83:BC:AF:DA:EE:2F
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       36EA71CA3E6528B53EC8951E414D7BBC431264FB
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31342e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:42:00 +0000
ROA not before:           Thu 28 Mar 2024 18:37:00 +0000
ROA not after:            Thu 27 Mar 2025 18:42:00 +0000
asID:                     11921
IP address blocks:        201.49.14.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ea:71:ca:3e:65:28:b5:3e:c8:95:1e:41:4d:7b:bc:43:12:64:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:37:00 2024 GMT
            Not After : Mar 27 18:42:00 2025 GMT
        Subject: CN=30002D377FE6DC2F8B72BB1CFA8383BCAFDAEE2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:f8:77:1e:80:35:a6:97:aa:c5:ce:4f:a5:
                    68:ab:01:ca:94:3e:69:5d:d8:49:97:ee:2e:5b:22:
                    42:a4:c8:bd:89:f4:95:1e:47:97:6c:bc:b9:1f:28:
                    d7:76:f9:10:29:61:ff:b8:22:83:05:94:57:41:40:
                    c1:a6:9e:f1:d2:21:bd:3d:94:9a:5b:cd:4a:cd:1d:
                    a3:7a:16:e9:6c:9c:60:c3:ce:16:5a:b4:ca:c6:a6:
                    b2:8e:c8:74:4b:1d:7d:99:79:27:a0:95:2f:35:dc:
                    8e:f7:3b:89:2a:e6:b2:47:58:30:5c:84:b9:48:ad:
                    aa:e0:19:36:0b:f1:c3:92:78:11:86:ec:92:52:fc:
                    5d:ac:87:25:f0:0b:be:f7:52:83:26:60:a9:d5:7f:
                    7d:bf:a1:7f:f1:05:2c:b4:a8:dc:fc:7f:a2:bd:48:
                    a3:63:a0:cc:47:62:cd:86:87:71:02:66:55:16:80:
                    58:4e:fb:e9:97:11:1f:af:57:89:d1:7a:ed:a9:9f:
                    d2:21:f4:88:84:2a:64:ae:65:f8:5a:79:ad:e0:c8:
                    7f:9a:90:65:f2:9e:64:92:4c:6d:38:f0:74:52:8d:
                    b4:a4:16:3f:ee:9b:7e:11:f2:5f:87:a3:de:92:ae:
                    5f:9c:7a:39:8a:21:5c:d2:55:7b:50:91:67:44:39:
                    29:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:00:2D:37:7F:E6:DC:2F:8B:72:BB:1C:FA:83:83:BC:AF:DA:EE:2F
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31342e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:12:a1:2a:de:23:75:7f:88:30:4b:2e:77:70:26:94:7e:c0:
         6e:66:b0:30:d9:e2:21:d4:cf:ed:d5:7a:ea:75:1a:b0:ab:ab:
         98:55:2e:22:ff:43:c2:64:b8:df:e4:68:5c:5d:7f:a4:3c:7a:
         37:72:0e:1e:e9:7b:77:89:9e:2a:9d:8c:1e:f5:64:61:07:db:
         7a:78:b3:94:b9:0f:3c:93:a1:4f:34:43:42:b1:40:97:c9:ad:
         c6:36:e2:f4:c5:32:c7:f4:82:e0:b1:e7:fb:6a:41:57:74:0a:
         06:75:53:06:87:e2:5a:2c:66:ed:0c:ca:99:57:41:11:cd:0f:
         47:52:fc:2f:f9:c4:03:de:db:f3:01:c7:c3:a0:6c:be:03:fb:
         c7:90:65:af:61:16:62:40:60:8e:ff:3c:b6:41:20:1c:e7:c7:
         3c:f4:a9:a7:37:2e:17:63:ff:25:b0:0c:5c:c4:76:cf:54:8b:
         85:9a:bf:06:3a:22:3f:c5:32:69:7c:c2:4e:ac:37:dd:c3:28:
         d0:0c:d0:08:7e:b4:01:f4:be:b6:de:76:83:d5:54:0c:3b:35:
         f6:67:9a:49:5d:e1:a7:14:dc:ff:f1:37:f9:96:53:04:da:e5:
         79:c1:0a:9a:18:8f:22:2f:b6:a8:42:4b:20:61:65:4f:8f:a1:
         04:7d:9f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org