Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e32332e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e32332e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          +9+gQcZEU1wYKOrjxHRxT2bS74W21mc1ckHc34/gsFo=
Subject key identifier:   76:FA:0B:52:D9:01:73:65:E1:C4:4C:34:91:10:22:19:9E:AB:53:D7
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       29656EE725DCBA4F6A720CE3A7C2A8D2C282397A
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e32332e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 01 Nov 2023 21:04:18 +0000
ROA not before:           Wed 01 Nov 2023 20:59:18 +0000
ROA not after:            Wed 30 Oct 2024 21:04:18 +0000
asID:                     11921
IP address blocks:        201.49.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:65:6e:e7:25:dc:ba:4f:6a:72:0c:e3:a7:c2:a8:d2:c2:82:39:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Nov  1 20:59:18 2023 GMT
            Not After : Oct 30 21:04:18 2024 GMT
        Subject: CN=76FA0B52D9017365E1C44C34911022199EAB53D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:4f:41:48:27:db:fe:b6:0b:1d:be:c7:91:
                    3c:d3:89:5a:e3:48:80:75:70:25:21:95:23:80:57:
                    8f:3b:b2:e8:84:ec:35:43:37:1a:dc:71:58:70:52:
                    45:49:9b:b0:a6:9c:11:9d:0b:10:14:fb:a1:4c:49:
                    4b:2e:d1:df:f5:2a:c7:fb:96:3a:c1:16:f1:27:23:
                    bd:f1:29:ba:37:71:16:3a:27:89:bf:fa:10:d0:f8:
                    2f:b2:f1:5b:56:c9:ef:2f:5c:65:c3:fb:48:0f:9f:
                    1f:f0:f6:c0:e1:d6:93:0e:97:db:84:db:03:67:0a:
                    b9:cc:c2:37:d2:55:c2:e9:86:16:c1:4f:03:c9:20:
                    a2:02:66:3d:74:88:eb:79:3a:e1:1c:00:97:83:63:
                    c0:af:f4:cd:2b:c2:9c:9f:24:8b:0d:1c:8a:ae:34:
                    a2:81:c8:69:c3:94:d5:05:10:7f:40:3c:7e:06:f9:
                    7f:4f:fe:cc:92:36:4a:f2:20:10:05:20:6b:0b:6e:
                    4c:d2:31:42:7f:68:3b:b1:d6:f5:61:06:3e:c4:06:
                    7e:f2:e7:cd:74:19:c0:d3:11:4f:52:02:b2:7b:ba:
                    42:6a:cd:06:92:c5:a2:cb:44:f8:c3:57:07:10:a3:
                    86:6d:4b:69:bf:f3:0c:e0:3e:e4:8a:c2:94:e3:78:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FA:0B:52:D9:01:73:65:E1:C4:4C:34:91:10:22:19:9E:AB:53:D7
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e32332e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e6:f4:58:18:d3:94:00:c0:96:10:04:75:01:33:c3:d2:6d:
         de:9f:b5:32:55:9f:bb:2a:77:ae:ec:df:0c:4a:a9:62:aa:ec:
         9b:07:19:df:8d:03:04:74:99:5f:20:bd:c5:c7:da:02:5a:6f:
         04:43:9f:c2:f6:93:1a:bd:8c:ff:12:03:cd:6c:fb:82:b6:0e:
         62:3e:ee:ef:e1:b6:77:a9:a7:39:56:57:b4:b4:70:ee:fa:80:
         7d:3e:69:32:2e:99:fd:fb:60:d5:cd:ab:db:9c:51:e5:fa:d8:
         c4:0b:5b:e1:39:85:e7:3e:93:61:6e:9c:d2:e6:02:bc:4c:a5:
         ec:cd:2b:26:2c:94:27:66:ad:ff:39:2b:e3:40:f0:40:21:96:
         4e:8b:18:20:b4:ed:a4:75:9d:8e:c3:8e:c9:3c:04:8e:94:8d:
         67:8b:76:bc:4d:0e:f8:32:c8:e6:f3:d9:78:ab:5e:27:34:7f:
         c5:58:ac:bb:04:1e:75:c6:a2:99:dd:94:41:6d:60:04:70:a7:
         17:19:26:36:aa:4e:04:e8:2b:4c:18:9c:f5:ee:7a:84:d3:c4:
         83:2c:cb:ba:da:db:5d:25:ce:fa:cc:06:42:3d:92:65:2a:08:
         64:9c:ad:3a:8f:e1:96:81:d7:07:4d:e5:c9:4e:90:61:03:c8:
         2a:b0:0c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org