Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e32382e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e32382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          bsf8PQsuHdW7xbpU47q9yNWN9LT/+n4fCm5TfJZ/n5k=
Subject key identifier:   A1:84:E9:F2:6E:EC:7F:72:C3:02:14:AA:2A:E9:DA:01:7B:62:1E:C2
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       778DA7A8C6C49C1E1BEAE66DF0DA77C017D07007
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e32382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:42:00 +0000
ROA not before:           Thu 28 Mar 2024 18:37:00 +0000
ROA not after:            Thu 27 Mar 2025 18:42:00 +0000
asID:                     11921
IP address blocks:        201.49.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8d:a7:a8:c6:c4:9c:1e:1b:ea:e6:6d:f0:da:77:c0:17:d0:70:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:37:00 2024 GMT
            Not After : Mar 27 18:42:00 2025 GMT
        Subject: CN=A184E9F26EEC7F72C30214AA2AE9DA017B621EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:53:d7:39:99:a2:0f:77:0e:2b:d3:12:e3:
                    82:6f:e2:b3:9a:1f:1d:c1:4a:8e:86:6b:bb:07:fb:
                    6e:a1:08:a4:dd:df:9e:a5:87:b3:73:e8:d9:83:71:
                    17:d0:51:f5:4a:59:cb:8b:15:e8:46:a8:b7:84:17:
                    31:e5:c2:11:5e:0a:b5:c2:d8:24:59:fe:65:e4:60:
                    ec:d5:ed:0e:2c:5b:07:8e:ba:06:68:4e:1a:bd:6f:
                    77:22:68:33:3c:51:77:17:fe:78:b4:1e:b9:13:55:
                    b8:0a:2c:df:13:fa:6e:b7:58:57:e9:88:ec:59:55:
                    ce:d6:6e:8c:7d:56:1c:1f:24:5a:7f:42:42:c4:56:
                    f1:90:22:58:92:1e:87:18:e9:c3:31:70:da:bf:b5:
                    b3:0e:1b:06:d9:46:9a:5b:59:3d:f9:f5:01:f3:8a:
                    66:4e:4a:20:56:3f:39:2f:20:22:1c:9a:a1:26:89:
                    22:76:25:26:0f:a9:6a:6d:55:24:7f:ec:39:e4:ca:
                    18:71:fc:e7:10:5b:37:6d:6c:2d:b3:c9:50:a7:da:
                    52:60:53:70:77:2a:fa:71:ad:53:61:83:12:0b:8b:
                    24:d0:3f:27:0f:12:1a:21:d6:0f:a7:9f:11:ce:3a:
                    6b:eb:c3:38:4a:7d:75:1d:8d:70:63:44:a6:7a:81:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:84:E9:F2:6E:EC:7F:72:C3:02:14:AA:2A:E9:DA:01:7B:62:1E:C2
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e32382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:33:cb:a3:de:e3:4d:1a:5b:4d:fd:3c:b1:27:bd:8d:57:bf:
         7e:9b:2c:37:a3:43:fa:89:f7:12:c9:44:a8:63:f3:50:f6:3a:
         f0:2d:69:22:2c:39:2f:9c:f2:9d:29:02:7e:98:28:24:b9:ce:
         b6:ef:fe:64:f8:e8:b7:02:b3:9d:d3:c2:ec:50:ce:da:9f:04:
         4b:96:8c:b3:df:24:65:32:b2:ee:5d:f7:50:4a:1d:c1:bf:79:
         78:20:89:5c:d2:40:79:5e:ff:73:a0:ae:7c:39:5f:e7:bf:56:
         2a:71:2c:de:d0:0b:81:6f:fc:64:de:c6:07:4d:7e:45:e8:ef:
         95:ea:0e:7f:95:d3:cf:9a:2a:16:54:08:01:e2:f1:1f:f3:1f:
         0e:32:e3:11:4e:80:11:24:c7:8a:4f:64:cb:dc:22:b4:90:d1:
         3e:13:06:26:4e:f8:94:44:13:13:29:8b:a3:26:6b:1e:d3:3d:
         5b:4c:c5:c1:fb:b2:1a:1a:7b:56:2f:15:28:c6:9c:9b:fd:a4:
         b2:08:82:c5:71:8a:96:4e:94:de:f9:88:9b:01:94:8f:5e:c2:
         83:e0:6d:ba:e6:4a:a7:70:10:76:48:60:6b:0d:d7:93:be:02:
         09:65:92:f1:fe:27:6c:93:98:d9:a4:c8:f1:18:4e:54:ef:dc:
         89:f2:7d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org