Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31362e302f32302d3230203d3e203131393231.roa
File:                     3230312e34392e31362e302f32302d3230203d3e203131393231.roa (raw, json)
Hash identifier:          UW9B25mmx724r7RF0a9tAn9up7C9+YzDQI5ST4OlV/I=
Subject key identifier:   C0:11:DB:C3:BA:91:CF:C6:E3:34:4B:50:8A:54:7B:55:1C:07:5F:85
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       0BAEC09981B69B2FE85CE6398545897BBCA9D333
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31362e302f32302d3230203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:57 +0000
ROA not before:           Thu 28 Mar 2024 14:36:57 +0000
ROA not after:            Thu 27 Mar 2025 14:41:57 +0000
asID:                     11921
IP address blocks:        201.49.16.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ae:c0:99:81:b6:9b:2f:e8:5c:e6:39:85:45:89:7b:bc:a9:d3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:57 2024 GMT
            Not After : Mar 27 14:41:57 2025 GMT
        Subject: CN=C011DBC3BA91CFC6E3344B508A547B551C075F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:c1:38:b1:cb:eb:84:be:f1:a3:a7:7f:90:
                    53:e7:df:5f:49:a9:0e:b4:2e:09:f1:d1:fe:f9:24:
                    a5:16:f8:24:09:70:77:bb:6e:ad:de:47:1c:cb:76:
                    d8:e4:ad:ca:7d:a3:de:b9:0c:2f:25:c1:80:52:44:
                    b7:a2:00:69:d1:14:4d:53:e1:57:59:a4:cd:1a:66:
                    5b:83:84:af:ad:ef:fc:49:06:c2:19:db:7c:1a:3c:
                    8b:9b:55:9c:38:3c:0f:9d:85:bc:b1:93:85:09:f3:
                    a9:f6:06:b5:08:ed:83:04:57:30:a0:03:ea:ab:76:
                    d8:1c:99:68:9a:c5:5d:ef:ae:60:14:e1:33:d2:f5:
                    26:5f:73:96:10:85:75:04:92:ae:21:76:04:43:c2:
                    1e:df:16:cb:a5:a8:a5:7d:6d:04:de:4e:74:83:6d:
                    0d:f9:93:59:61:57:78:4d:a9:c2:ce:8f:b9:80:14:
                    7e:6a:8c:c3:b6:04:62:f3:b5:03:9b:d8:be:a7:99:
                    11:ca:c2:e9:c2:e6:7a:92:c8:d7:f2:62:4c:5f:f2:
                    03:f2:92:b1:7e:47:8d:f9:df:0e:ab:00:4f:ab:fd:
                    df:92:7f:c1:03:e6:d1:a5:87:89:67:9d:ee:72:b3:
                    8a:66:bd:7c:1c:f1:bb:db:43:e0:69:1a:6e:00:e1:
                    e6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:11:DB:C3:BA:91:CF:C6:E3:34:4B:50:8A:54:7B:55:1C:07:5F:85
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e31362e302f32302d3230203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b4:65:a7:f9:a2:c6:e2:6f:c9:1b:4b:b2:d8:bd:56:5e:50:43:
         39:66:31:ef:cc:6f:34:45:06:5b:8d:78:24:75:c1:7e:12:69:
         c0:a0:47:71:d5:9d:56:e4:09:94:e2:2e:7f:34:e6:ec:ad:60:
         bb:a8:90:f3:6e:ec:c7:a5:14:2f:5e:f5:7e:8c:b3:e0:ad:5e:
         c3:65:79:e5:cd:8e:ef:48:b0:cf:e6:a6:f9:35:40:0d:13:5f:
         79:a1:2d:a7:f7:89:f1:23:b2:67:93:9a:6b:84:06:e3:64:a1:
         30:19:65:67:10:68:9b:46:50:99:70:02:a4:ec:4f:e4:84:11:
         b9:9c:e9:76:61:44:29:3d:9b:d3:7a:9f:66:84:88:b2:15:90:
         39:f1:f4:19:2c:0a:db:85:78:1d:d3:dc:15:5a:ba:0f:82:ed:
         10:d4:8c:4b:b3:73:ac:4c:68:ae:7d:56:42:16:12:5c:35:7a:
         55:ac:18:96:99:51:f0:b9:c1:04:b4:2f:93:23:31:96:0c:fa:
         58:3f:29:79:52:01:dd:57:42:74:b6:b6:75:48:46:5b:01:ec:
         2e:c9:b0:81:2e:09:fd:42:7c:fc:5e:6a:07:61:f2:f1:97:d6:
         c5:f0:0f:60:11:09:bc:b6:bf:12:33:2f:8b:85:0a:1a:e7:31:
         5b:ee:74:91
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUC67AmYG2my/oXOY5hUWJe7yp0zMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczMDYyNDQ0ODA2N0Q4M0U4MzRBRkQxMUU5NjU3REQ4
RTE5OTE5OTAeFw0yNDAzMjgxNDM2NTdaFw0yNTAzMjcxNDQxNTdaMDMxMTAvBgNV
BAMTKEMwMTFEQkMzQkE5MUNGQzZFMzM0NEI1MDhBNTQ3QjU1MUMwNzVGODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuCsE4scvrhL7xo6d/kFPn319J
qQ60Lgnx0f75JKUW+CQJcHe7bq3eRxzLdtjkrcp9o965DC8lwYBSRLeiAGnRFE1T
4VdZpM0aZluDhK+t7/xJBsIZ23waPIubVZw4PA+dhbyxk4UJ86n2BrUI7YMEVzCg
A+qrdtgcmWiaxV3vrmAU4TPS9SZfc5YQhXUEkq4hdgRDwh7fFsulqKV9bQTeTnSD
bQ35k1lhV3hNqcLOj7mAFH5qjMO2BGLztQOb2L6nmRHKwunC5nqSyNfyYkxf8gPy
krF+R4353w6rAE+r/d+Sf8ED5tGlh4lnne5ys4pmvXwc8bvbQ+BpGm4A4eZpAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUwBHbw7qRz8bjNEtQilR7VRwHX4UwHwYDVR0j
BBgwFoAUlzBiREgGfYPoNK/RHpZX3Y4ZkZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMC85NzMwNjI0NDQ4MDY3RDgzRTgzNEFGRDExRTk2NTdERDhFMTk5MTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MzA2MjQ0NDgwNjdEODNF
ODM0QUZEMTFFOTY1N0REOEUxOTkxOTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzAv
MzIzMDMxMmUzNDM5MmUzMTM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzMTM5
MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBMkxEDANBgkqhkiG9w0BAQsFAAOCAQEAtGWn+aLG4m/J
G0uy2L1WXlBDOWYx78xvNEUGW414JHXBfhJpwKBHcdWdVuQJlOIufzTm7K1gu6iQ
827sx6UUL171foyz4K1ew2V55c2O70iwz+am+TVADRNfeaEtp/eJ8SOyZ5Oaa4QG
42ShMBllZxBom0ZQmXACpOxP5IQRuZzpdmFEKT2b03qfZoSIshWQOfH0GSwK24V4
HdPcFVq6D4LtENSMS7NzrExorn1WQhYSXDV6VawYlplR8LnBBLQvkyMxlgz6WD8p
eVIB3VdCdLa2dUhGWwHsLsmwgS4J/UJ8/F5qB2Hy8ZfWxfAPYBEJvLa/EjMvi4UK
GucxW+50kQ==
-----END CERTIFICATE-----