Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e32342e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e32342e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          PNxkZbz1F1sR29y8LEka0o36Ccfps0BaeUrlsBmrvpg=
Subject key identifier:   7C:4E:BC:80:BC:F1:38:9E:E9:E4:8F:B1:E8:92:B1:8D:78:2A:73:0C
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       03059E60A15D30263498AB1B57225899B54CF124
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e32342e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:42:00 +0000
ROA not before:           Thu 28 Mar 2024 18:37:00 +0000
ROA not after:            Thu 27 Mar 2025 18:42:00 +0000
asID:                     11921
IP address blocks:        201.49.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:05:9e:60:a1:5d:30:26:34:98:ab:1b:57:22:58:99:b5:4c:f1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:37:00 2024 GMT
            Not After : Mar 27 18:42:00 2025 GMT
        Subject: CN=7C4EBC80BCF1389EE9E48FB1E892B18D782A730C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:11:7b:67:bb:b3:08:dc:8e:72:33:5b:c8:
                    b2:c4:8c:c8:65:b3:49:f9:22:ba:05:7f:07:cc:11:
                    04:a0:e7:07:8c:d7:83:f4:36:6a:45:65:14:61:c0:
                    1b:22:09:12:32:56:e5:54:e8:b0:88:41:fd:5f:10:
                    b8:1a:59:4c:9d:50:1a:a3:5d:3a:f2:00:54:34:02:
                    cf:cc:50:09:a5:01:85:03:c8:89:90:0a:14:3a:70:
                    c1:88:29:be:c3:fb:68:ef:59:63:19:5f:01:84:50:
                    64:c9:11:2f:6d:97:6f:e6:c3:52:bb:19:0e:ff:9d:
                    5f:35:1a:68:f8:bb:a7:c8:62:e4:16:54:64:ff:27:
                    55:25:05:02:2c:5f:46:c9:f4:54:ba:5c:d8:53:1e:
                    7a:a0:27:90:4a:88:6c:ac:ad:6e:65:ca:52:be:cc:
                    7e:00:61:4e:b0:c1:90:52:33:16:f1:ab:d0:62:7d:
                    39:cf:fa:ed:52:a1:3a:f0:0a:ec:5b:28:15:fc:02:
                    d3:42:c5:0a:1e:71:be:23:f3:5a:c3:73:6f:81:53:
                    91:3e:2a:94:3e:29:31:f2:a9:63:ed:f3:01:3e:1e:
                    b9:79:ae:f1:e9:1e:52:15:21:83:22:ca:1d:9f:d9:
                    d9:cf:6d:2f:72:ee:fb:bf:5e:57:c5:4b:ed:b6:cd:
                    9b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4E:BC:80:BC:F1:38:9E:E9:E4:8F:B1:E8:92:B1:8D:78:2A:73:0C
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e32342e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:ae:1d:39:67:4d:89:89:5f:f3:ff:a5:2c:80:20:b3:e9:b4:
         04:2f:73:55:99:d0:f4:45:c0:79:34:a3:12:4a:bc:fc:5d:e1:
         93:2f:43:73:ef:a8:e4:7f:9b:63:65:7e:f2:9f:fc:2f:b2:e8:
         2b:b1:92:43:b3:89:a1:4a:d3:00:98:c1:0d:66:da:9e:9e:ab:
         4c:2b:b9:fb:63:f7:76:56:af:eb:a4:62:c3:28:6e:d7:99:0c:
         67:f5:b5:fe:3e:65:72:dd:31:32:46:bf:71:d3:49:0b:39:62:
         d9:45:e9:a0:e4:b6:10:fa:81:3f:aa:8f:84:3f:55:19:3f:10:
         89:56:a7:73:88:16:81:7e:88:39:48:cc:4d:1c:a1:76:df:84:
         e4:7b:9c:06:f5:d5:1e:25:dd:b5:06:a2:6c:e8:0c:5b:e2:de:
         a9:b9:75:a9:f5:ce:fc:29:85:21:5e:8b:a4:08:4d:1f:10:f8:
         19:2a:54:22:55:2d:61:b5:db:4a:0f:ba:c1:84:c6:fa:d6:31:
         a6:4b:b8:ae:6c:04:28:b5:68:00:e4:5a:62:50:d4:b9:07:9a:
         47:c8:73:00:48:8f:e8:70:7d:a1:2c:2e:9c:48:dc:aa:99:43:
         ce:d4:41:bc:b6:1f:25:84:64:cd:cc:01:f3:6d:68:90:c8:2a:
         c1:1f:3e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org