Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e32322e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e32322e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          kk1vyYqaQjFnPPBvpT/RkRKli9fCXwHNJ/4WRzv2TQA=
Subject key identifier:   F5:46:AB:EA:8D:0A:6E:09:FC:A5:FC:E6:D4:DB:93:A5:8C:05:3F:F0
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       4311D94ED85BD41303767B619CB91A9D0D9DA80E
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e32322e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:42:00 +0000
ROA not before:           Thu 28 Mar 2024 18:37:00 +0000
ROA not after:            Thu 27 Mar 2025 18:42:00 +0000
asID:                     11921
IP address blocks:        201.49.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:11:d9:4e:d8:5b:d4:13:03:76:7b:61:9c:b9:1a:9d:0d:9d:a8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:37:00 2024 GMT
            Not After : Mar 27 18:42:00 2025 GMT
        Subject: CN=F546ABEA8D0A6E09FCA5FCE6D4DB93A58C053FF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:2c:46:1f:60:0a:da:ac:a9:4a:4b:5d:b5:
                    30:66:6b:2f:40:e6:f9:3a:ee:2f:35:40:af:36:86:
                    98:d4:c5:98:86:8a:3e:2e:70:b6:6f:8f:25:12:45:
                    02:1a:b6:b9:63:d2:b5:70:62:72:5d:cf:5f:71:60:
                    d1:b4:84:f1:76:85:36:60:0d:49:d9:dd:c4:95:8f:
                    62:15:44:c2:66:39:fc:a7:43:bc:85:99:cc:f9:b6:
                    77:af:b5:9b:2a:19:84:45:4f:13:97:fc:4a:2c:e0:
                    73:48:35:6c:83:85:4c:3c:a3:15:1d:d7:a5:df:00:
                    7b:cf:33:a2:b0:bb:4e:99:99:10:4a:47:3c:d1:61:
                    68:c5:a3:d4:b9:41:d5:f8:13:8b:7a:f0:d6:e7:e8:
                    f0:62:57:3f:c7:a6:48:b5:f7:9a:9f:23:61:0d:9f:
                    95:eb:bb:da:b9:5d:c5:da:58:16:f3:61:93:03:a7:
                    0b:ae:82:04:cf:e9:3f:a5:67:58:41:a7:ed:98:19:
                    97:fe:cf:6e:da:d3:d9:50:95:75:8b:68:76:db:8a:
                    f1:b5:04:4a:b3:d1:71:0e:a3:1d:fb:8d:6f:08:62:
                    10:d8:13:05:8f:3f:2a:f7:f7:21:51:00:43:01:a4:
                    32:6f:63:dc:29:88:27:8b:a4:32:d9:af:70:db:d7:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:46:AB:EA:8D:0A:6E:09:FC:A5:FC:E6:D4:DB:93:A5:8C:05:3F:F0
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e32322e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:57:44:85:48:12:a4:8c:13:f4:14:78:cf:d8:75:89:64:2a:
         d9:c6:26:b2:6b:79:74:a3:28:57:00:f9:d1:1d:6d:b5:17:49:
         d3:10:55:25:0c:3b:29:53:c2:3f:fe:81:e2:7b:39:8e:93:1d:
         7a:ad:4d:b3:ed:b8:90:c4:7e:a0:6a:43:96:d4:74:2e:a9:9e:
         25:99:0c:7d:e6:7c:c7:fb:b3:30:65:38:fe:c9:e2:04:23:3a:
         30:55:1a:d1:91:a7:77:2c:97:5c:e0:26:bc:1d:44:18:b6:a6:
         83:a9:50:0c:f8:1b:86:95:5c:e0:ad:d2:c4:e0:15:65:69:0d:
         ea:a4:df:34:89:7d:dc:21:77:5f:fd:bf:53:a6:7e:6b:68:ce:
         63:a7:bf:bb:8b:1e:cc:c2:7d:9e:e4:22:6a:cf:7e:ea:e8:1c:
         ba:18:c6:f6:da:17:4a:3e:8b:59:b3:e6:fd:61:49:21:bd:9a:
         f5:22:13:5b:a4:cf:64:5d:cf:90:aa:8a:5d:9f:19:18:bc:fe:
         35:61:fa:67:05:55:de:ce:c8:93:1f:45:b4:13:1a:e2:57:c5:
         a9:59:35:07:ba:3c:2b:d8:da:90:40:5b:c5:be:83:b6:fa:ce:
         d7:6d:98:85:82:66:06:6f:fb:24:c1:3e:9f:2b:7f:48:d0:ed:
         c9:08:ea:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org