Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31342e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e31342e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          4OcxdOrMr5rLUUbGtdoAXJs0/0ePEuJ8A9sD4wlu8V0=
Subject key identifier:   F5:5B:A7:19:F9:66:7F:92:8B:05:7D:0B:F5:8D:BA:3D:FC:88:45:AE
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       513D6E5BDAF123C978A2FE88900B78934842F12D
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31342e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 13 Mar 2024 22:42:59 +0000
ROA not before:           Wed 13 Mar 2024 22:37:59 +0000
ROA not after:            Wed 12 Mar 2025 22:42:59 +0000
asID:                     11921
IP address blocks:        201.49.14.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3d:6e:5b:da:f1:23:c9:78:a2:fe:88:90:0b:78:93:48:42:f1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 13 22:37:59 2024 GMT
            Not After : Mar 12 22:42:59 2025 GMT
        Subject: CN=F55BA719F9667F928B057D0BF58DBA3DFC8845AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ac:cb:d6:60:ee:aa:f8:66:d4:5b:6a:d0:dc:
                    89:7a:1a:fa:4e:fe:93:f4:48:5f:78:4f:ff:dc:25:
                    cc:2e:b4:1f:b7:ba:c9:4b:0a:11:b7:7d:54:3b:91:
                    ad:88:62:89:ad:01:c1:0c:5f:2e:75:de:13:04:7f:
                    ca:4e:e7:82:70:d8:59:ab:fc:d9:13:e1:a6:2c:1a:
                    24:d8:f0:e7:34:50:55:ea:2b:9c:5f:73:49:82:bb:
                    4e:b3:0e:71:54:64:89:72:26:30:9d:92:f4:53:78:
                    d5:c0:53:18:be:ce:b4:4c:83:6a:ea:ad:3b:a7:87:
                    8c:f2:61:db:79:46:56:10:4d:b2:06:f7:37:72:95:
                    0e:3e:b2:21:e5:73:20:93:5e:c3:3f:b6:4b:a1:0c:
                    c7:db:38:2a:1e:57:e8:62:cb:95:7b:8b:ec:c1:d4:
                    01:8a:32:87:55:65:57:85:0e:e9:00:82:72:4e:a8:
                    92:25:54:74:52:13:68:1f:6c:35:e8:d8:b0:19:91:
                    46:84:59:0b:d6:59:2c:ef:89:4e:7b:a5:a8:58:e2:
                    49:09:19:60:65:22:9e:86:ad:63:ed:3f:d6:2b:35:
                    98:7f:ec:09:3c:38:e0:4f:c6:15:2a:be:fb:a6:5b:
                    7f:35:ff:68:40:29:b1:6a:af:68:a6:ca:f8:d5:04:
                    d0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5B:A7:19:F9:66:7F:92:8B:05:7D:0B:F5:8D:BA:3D:FC:88:45:AE
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31342e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:d0:30:32:ee:5c:c7:8f:d6:63:b9:3c:5e:3f:12:4c:27:b4:
         6e:07:d3:79:ef:f0:2e:c0:d4:f4:a6:91:51:7b:27:77:22:8c:
         d9:b3:8a:64:52:0e:f8:ee:cf:56:81:6c:85:48:ab:87:d4:e9:
         a5:36:4a:99:ce:2f:e4:8c:f9:19:e1:4e:0a:65:c1:62:c9:b2:
         34:17:f5:8d:1b:38:1c:ff:72:9b:e7:1d:11:76:70:b3:c1:68:
         28:9c:cb:db:85:0f:f8:c0:6e:65:c9:7b:cd:0c:2f:ac:42:a1:
         bc:47:74:b5:05:e2:64:73:d3:70:6f:54:01:6c:cc:ef:c1:94:
         54:39:72:df:18:fd:9a:47:d1:d8:d5:41:8e:1d:44:d2:26:4e:
         8c:ca:d7:0b:c6:79:dc:97:e9:88:fc:1a:65:52:68:e3:b3:a0:
         28:ba:18:78:59:f2:f5:bb:2f:63:49:15:09:cd:7a:60:e6:5e:
         0e:f3:fa:0c:8a:e1:77:91:ac:33:08:84:19:35:e3:14:65:b6:
         95:7d:76:be:9b:af:14:45:f2:5a:ac:70:83:01:14:77:c2:39:
         a4:4f:a3:80:f7:b4:05:bd:71:d7:14:24:bf:70:6e:cd:1d:1d:
         84:19:8a:0d:6a:88:c7:f3:3e:d0:a4:50:bc:71:ff:b0:29:1e:
         9a:8f:8b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org