Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33302e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e33302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          edvYdfkE40odHl7ieBMd06cKRHp/AHQF+p+I7CgFkbI=
Subject key identifier:   C7:CF:AA:E4:36:EC:54:8B:73:D8:F9:48:C4:D4:A7:59:CD:40:F3:98
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       25F5B78C70CE3084731F28361C40BB2DF8E6F0D7
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:42:00 +0000
ROA not before:           Thu 28 Mar 2024 18:37:00 +0000
ROA not after:            Thu 27 Mar 2025 18:42:00 +0000
asID:                     11921
IP address blocks:        201.49.30.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f5:b7:8c:70:ce:30:84:73:1f:28:36:1c:40:bb:2d:f8:e6:f0:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:37:00 2024 GMT
            Not After : Mar 27 18:42:00 2025 GMT
        Subject: CN=C7CFAAE436EC548B73D8F948C4D4A759CD40F398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:09:db:04:e0:88:c7:82:e1:19:4d:e8:a2:
                    09:62:c0:3a:ef:be:28:0e:c0:b3:90:34:5a:23:61:
                    7d:89:fb:ea:fe:51:be:93:4b:34:ae:4d:a6:20:69:
                    ea:a1:7e:9e:da:41:c1:e1:9f:b8:9f:c2:56:d9:8e:
                    24:68:9c:f7:7c:73:32:9f:a2:94:07:b7:fb:de:dc:
                    1f:71:11:d3:5f:65:88:16:73:ed:84:f7:8f:ba:05:
                    1a:4a:ff:db:aa:d6:c6:2a:a2:5a:c1:44:e5:97:ae:
                    18:a6:e9:8a:ef:11:c4:72:78:91:05:de:61:74:d7:
                    a9:de:0d:5e:9c:09:af:f0:5f:cc:26:bb:12:6a:b6:
                    0e:f2:e1:c3:06:23:06:52:d9:63:ba:80:d7:9b:7c:
                    d4:96:dd:f6:a8:06:65:b3:cb:1c:48:89:67:30:75:
                    c7:58:41:e4:92:e8:db:71:b7:59:d6:ee:b5:36:d4:
                    e4:7c:b8:f8:e0:3c:32:1c:05:f5:aa:92:02:39:e0:
                    ed:a8:57:d7:9c:68:2d:a8:97:a5:46:93:f1:1a:ad:
                    80:fe:e0:e9:1b:6c:69:3c:26:5b:77:e6:fd:5c:51:
                    0a:78:34:0c:9e:ac:c4:ed:41:37:6d:79:47:0c:b7:
                    c4:28:e5:70:89:2a:5b:5c:11:be:77:5e:19:21:e1:
                    45:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CF:AA:E4:36:EC:54:8B:73:D8:F9:48:C4:D4:A7:59:CD:40:F3:98
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:d3:ab:7f:d6:f3:6d:29:fb:2a:04:7c:0f:22:a1:13:32:ab:
         04:5e:ae:72:0b:b2:63:1d:f9:13:57:7b:81:5c:e2:d6:5a:8d:
         0c:3d:08:b9:59:bf:36:d8:57:74:17:99:f9:7b:27:fc:80:7a:
         99:5a:00:7b:58:9c:47:9c:df:78:ab:18:17:7b:b4:02:38:6f:
         f0:81:d2:2c:4a:7c:0a:81:0b:5c:d7:81:d4:48:e5:0f:c5:50:
         6b:be:36:fe:f5:66:b9:ed:d0:aa:c6:d8:3d:1b:68:c6:6e:12:
         8c:26:42:fa:2f:14:81:87:66:78:df:27:dc:10:9a:91:7b:68:
         60:be:55:60:7a:78:02:80:75:c0:af:fe:5d:72:3b:bb:0f:19:
         2c:28:a8:fd:57:37:3b:a7:b7:e8:08:09:1e:6e:af:90:42:c2:
         39:59:e9:3d:43:70:99:d9:ed:38:c0:d7:8f:64:95:04:dd:44:
         17:47:48:3d:b2:20:a5:bc:df:7d:ee:3d:ad:90:be:98:f7:62:
         49:0c:3e:fe:e2:65:e1:0a:9c:d3:ad:84:ff:e5:86:f7:4c:a7:
         6d:89:d2:fe:7b:79:4e:9f:20:d5:83:19:fb:8c:cd:a0:23:78:
         3c:66:57:20:bc:3c:a8:41:e3:53:58:c4:85:d3:c3:9e:9a:a4:
         c4:5e:18:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org