Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31352e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e31352e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          FxTRh9I8zDij6rruOpqQjHNChw28wslS2L4sf/ZT0ww=
Subject key identifier:   10:68:96:5C:63:79:3B:BE:F7:87:56:4B:5B:DE:08:85:00:62:70:84
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       34722775232CF233B7F718ADF4ECF20F527464E3
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31352e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 13 Mar 2024 22:43:11 +0000
ROA not before:           Wed 13 Mar 2024 22:38:11 +0000
ROA not after:            Wed 12 Mar 2025 22:43:11 +0000
asID:                     11921
IP address blocks:        201.49.15.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:72:27:75:23:2c:f2:33:b7:f7:18:ad:f4:ec:f2:0f:52:74:64:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 13 22:38:11 2024 GMT
            Not After : Mar 12 22:43:11 2025 GMT
        Subject: CN=1068965C63793BBEF787564B5BDE088500627084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:d7:dd:1f:2e:f9:f6:95:46:f9:f4:57:19:
                    a6:db:d0:7c:1d:5c:b9:6d:98:63:5c:ae:a6:a1:5a:
                    e7:81:d6:40:c5:ec:44:f1:37:58:2a:2f:bd:53:94:
                    b2:56:48:73:e3:d5:96:f3:b1:82:1d:7c:a9:b9:fd:
                    b6:92:70:d5:4c:af:7b:e1:1b:e0:96:ee:9c:50:57:
                    60:8f:8a:32:9a:57:a9:2b:af:93:0f:d4:8c:8d:2d:
                    68:3c:f2:4c:a0:b0:f8:5d:be:a0:fb:10:57:1e:c9:
                    3f:c8:b1:ab:6f:e1:d7:7a:9f:e8:47:45:19:a2:fe:
                    72:44:fb:4e:c8:56:23:67:d0:bf:ea:0b:71:a1:55:
                    9c:25:c6:3c:e8:7e:6e:3a:cd:be:cd:88:af:68:d9:
                    b4:44:b1:47:ae:29:bf:95:cb:c7:f1:20:dc:91:bf:
                    98:63:89:9a:dd:bc:42:33:01:c3:d8:87:0e:ee:94:
                    5f:f5:64:e6:51:e3:0f:a1:df:b6:62:a5:52:b9:31:
                    cc:0b:7f:96:59:cc:fd:7c:96:84:e8:0d:b8:a5:3d:
                    ec:ac:5a:08:e4:e8:fd:c4:68:6c:a3:dc:fc:6e:c3:
                    62:74:9b:3b:66:70:18:6f:4e:cf:e0:2c:23:25:97:
                    d8:d0:6b:fd:70:ef:39:e1:30:37:af:47:e1:12:a9:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:68:96:5C:63:79:3B:BE:F7:87:56:4B:5B:DE:08:85:00:62:70:84
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31352e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:0d:10:d8:1f:26:fd:fa:b5:3c:d5:d5:79:49:87:3b:e5:82:
         08:5a:7f:0e:2e:d2:ca:54:fa:5e:fc:99:5e:25:ee:7b:68:95:
         e0:e8:34:92:04:a6:82:bc:56:95:13:f3:72:81:14:0f:77:31:
         f5:20:ed:4b:e7:62:f7:6c:22:f7:45:3b:7f:0c:ec:f0:d6:5c:
         3c:8d:aa:60:2e:76:bd:90:a2:a5:52:30:31:8b:5f:27:bd:36:
         cc:78:b3:c8:4d:af:d1:a9:cd:59:e6:0e:67:7d:e0:44:41:eb:
         66:d5:43:8b:55:bf:3e:51:f8:f3:80:48:5b:82:ca:ab:12:5f:
         e1:f3:5a:82:23:d1:4d:a4:78:05:e6:2c:0f:94:5c:48:1a:64:
         84:d3:22:e1:ff:b2:76:11:0e:db:05:08:4a:36:5f:00:91:0f:
         2f:94:3e:fd:b4:1d:13:76:15:46:23:be:ca:4b:46:45:04:00:
         f9:be:df:82:3f:ea:be:06:b9:b3:a3:1f:1c:6a:32:57:84:95:
         15:1c:50:aa:2e:f2:79:fb:98:a3:59:6e:92:cb:ac:3a:35:2e:
         b3:c6:ca:4f:ed:ab:b0:11:85:3e:69:82:bf:c5:3d:16:85:34:
         e3:43:66:b6:ad:37:9d:4f:75:e7:06:02:60:df:b4:1c:68:63:
         37:ac:0a:6c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNHIndSMs8jO39xit9OzyD1J0ZOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczMDYyNDQ0ODA2N0Q4M0U4MzRBRkQxMUU5NjU3REQ4
RTE5OTE5OTAeFw0yNDAzMTMyMjM4MTFaFw0yNTAzMTIyMjQzMTFaMDMxMTAvBgNV
BAMTKDEwNjg5NjVDNjM3OTNCQkVGNzg3NTY0QjVCREUwODg1MDA2MjcwODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJwtfdHy759pVG+fRXGabb0Hwd
XLltmGNcrqahWueB1kDF7ETxN1gqL71TlLJWSHPj1ZbzsYIdfKm5/baScNVMr3vh
G+CW7pxQV2CPijKaV6krr5MP1IyNLWg88kygsPhdvqD7EFceyT/Isatv4dd6n+hH
RRmi/nJE+07IViNn0L/qC3GhVZwlxjzofm46zb7NiK9o2bREsUeuKb+Vy8fxINyR
v5hjiZrdvEIzAcPYhw7ulF/1ZOZR4w+h37ZipVK5McwLf5ZZzP18loToDbilPeys
Wgjk6P3EaGyj3Pxuw2J0mztmcBhvTs/gLCMll9jQa/1w7znhMDevR+ESqTzZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUEGiWXGN5O773h1ZLW94IhQBicIQwHwYDVR0j
BBgwFoAUlzBiREgGfYPoNK/RHpZX3Y4ZkZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMC85NzMwNjI0NDQ4MDY3RDgzRTgzNEFGRDExRTk2NTdERDhFMTk5MTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MzA2MjQ0NDgwNjdEODNF
ODM0QUZEMTFFOTY1N0REOEUxOTkxOTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzAv
MzIzMDMxMmUzNDM5MmUzMTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMTM5
MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAMkxDzANBgkqhkiG9w0BAQsFAAOCAQEAhg0Q2B8m/fq1
PNXVeUmHO+WCCFp/Di7SylT6XvyZXiXue2iV4Og0kgSmgrxWlRPzcoEUD3cx9SDt
S+di92wi90U7fwzs8NZcPI2qYC52vZCipVIwMYtfJ702zHizyE2v0anNWeYOZ33g
REHrZtVDi1W/PlH484BIW4LKqxJf4fNagiPRTaR4BeYsD5RcSBpkhNMi4f+ydhEO
2wUISjZfAJEPL5Q+/bQdE3YVRiO+yktGRQQA+b7fgj/qvga5s6MfHGoyV4SVFRxQ
qi7yefuYo1luksusOjUus8bKT+2rsBGFPmmCv8U9FoU040Nmtq03nU915wYCYN+0
HGhjN6wKbA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org