Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e322e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e322e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          1qdreTuocsqZBg9XBY1sejwBaq7/LbkVSOkYvRUcui4=
Subject key identifier:   78:D8:50:7B:CC:56:E6:85:2C:56:DF:46:23:FE:3D:E7:12:BB:84:B9
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       0A2F7B272D3EE892E75F8595CFAEBF05F34A93C2
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e322e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 17:41:58 +0000
ROA not before:           Thu 28 Mar 2024 17:36:58 +0000
ROA not after:            Thu 27 Mar 2025 17:41:58 +0000
asID:                     11921
IP address blocks:        201.49.2.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2f:7b:27:2d:3e:e8:92:e7:5f:85:95:cf:ae:bf:05:f3:4a:93:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 17:36:58 2024 GMT
            Not After : Mar 27 17:41:58 2025 GMT
        Subject: CN=78D8507BCC56E6852C56DF4623FE3DE712BB84B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e2:9b:9a:00:45:8b:61:dd:71:13:d7:47:b0:
                    df:a2:fa:3e:5f:8e:f1:ca:02:cd:c6:ec:70:5e:b1:
                    40:5b:5d:f8:90:33:1c:c2:6c:34:9e:e1:6e:08:75:
                    d4:1e:83:8d:34:10:22:ea:38:af:3e:15:d6:a5:32:
                    9b:90:b6:43:05:a1:b7:f5:f7:e5:87:60:b5:9e:17:
                    69:78:68:d0:5c:07:34:11:84:0b:74:a6:78:ac:cb:
                    24:21:c2:77:84:e8:46:c8:1e:10:77:7d:3f:8b:6e:
                    ff:ce:2f:08:67:30:d4:9d:1c:87:04:10:e4:59:43:
                    93:fc:ff:9f:91:ea:bb:4a:06:78:c2:39:5b:2e:3d:
                    6c:fc:fe:a8:93:be:44:c5:b3:25:e2:3d:ac:48:f3:
                    79:2c:5d:3a:3e:2f:fc:b9:30:3c:20:86:32:c9:f4:
                    b7:48:51:b9:0c:9f:15:3f:b4:7e:90:41:44:50:62:
                    2e:4f:98:b5:82:13:ef:0b:08:71:3f:a5:97:64:9e:
                    85:15:99:c4:48:9f:88:3f:8a:34:f5:f2:12:e0:5d:
                    0e:ef:74:db:19:0d:4b:37:7a:21:02:db:fd:dd:99:
                    6e:ca:d3:5a:bb:3f:9b:05:c8:7d:e6:8a:7c:57:c9:
                    06:17:d9:04:75:ab:e0:14:b4:d7:55:96:a7:67:f1:
                    3f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D8:50:7B:CC:56:E6:85:2C:56:DF:46:23:FE:3D:E7:12:BB:84:B9
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e322e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a4:22:17:54:42:97:ff:e9:f3:62:f6:1d:fd:2f:34:a3:10:06:
         8d:43:46:a5:97:83:0d:86:a6:4c:a6:1e:86:bc:b3:3e:55:47:
         4e:6d:3e:dd:8f:08:dc:37:48:41:15:ab:90:d8:27:44:51:26:
         29:4a:af:99:08:fe:30:a5:09:f4:14:6f:c3:17:64:81:c4:88:
         e1:2b:73:b8:1c:be:cc:ad:8c:f2:20:d6:6f:c3:a8:80:e7:94:
         10:a3:17:c0:01:7d:ff:9b:02:47:fb:a5:45:9c:bd:3e:bc:cd:
         9d:35:f5:4c:de:d3:ea:07:dd:b7:cd:3e:ff:3c:bb:fa:d5:15:
         2e:ec:44:ae:56:f5:76:7a:d1:e3:77:da:d8:0a:e4:0b:45:0d:
         ea:ed:fe:ff:65:e6:76:d2:dc:93:73:7f:20:ee:52:bb:ec:ca:
         ed:c3:71:85:07:93:78:92:0f:cd:32:22:d5:54:22:95:3a:7a:
         7c:e4:5f:ed:cc:1b:be:e3:78:e4:05:4c:ea:06:93:08:7b:1f:
         41:47:ff:21:ce:8e:5d:d9:47:df:95:6e:b6:f2:c5:53:eb:63:
         25:de:6c:d1:e2:38:8b:23:c8:6b:42:ca:0d:b5:85:71:cc:20:
         64:bb:37:e4:66:e3:be:d9:66:13:89:59:5e:de:1c:b3:63:3f:
         f5:8c:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org