Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33322e302f31392d3139203d3e203131393231.roa
File:                     3230312e34392e33322e302f31392d3139203d3e203131393231.roa (raw, json)
Hash identifier:          KyWkQq+2Jwt9guOzlyV7KmMCAg6XBJEDosXsfaIGdSs=
Subject key identifier:   F4:36:0D:AE:98:38:F0:6E:D6:AF:D9:76:A6:D1:C9:90:0B:CD:98:0D
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       36C7B3AAF4BB61C39861245775F753F6E540CC0B
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33322e302f31392d3139203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:57 +0000
ROA not before:           Thu 28 Mar 2024 14:36:57 +0000
ROA not after:            Thu 27 Mar 2025 14:41:57 +0000
asID:                     11921
IP address blocks:        201.49.32.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c7:b3:aa:f4:bb:61:c3:98:61:24:57:75:f7:53:f6:e5:40:cc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:57 2024 GMT
            Not After : Mar 27 14:41:57 2025 GMT
        Subject: CN=F4360DAE9838F06ED6AFD976A6D1C9900BCD980D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e7:0b:88:d5:6f:56:eb:c0:4e:34:ed:2c:a4:
                    0e:e8:3a:59:7c:5a:98:52:5a:9c:1b:ef:ab:ed:ef:
                    b3:c1:78:57:1b:60:38:a6:44:37:88:c4:df:f5:77:
                    2d:d4:c1:e1:a6:36:a6:ad:5f:2c:d0:bf:26:60:ca:
                    d5:f8:ef:a3:5e:78:15:c4:c5:02:af:4e:93:37:5f:
                    26:c2:72:08:18:8f:eb:37:bc:22:2b:4a:74:a6:48:
                    55:9d:7a:0e:e6:7c:3d:35:a2:cd:60:6d:97:ac:7f:
                    ca:6c:9c:f3:48:eb:db:c4:cf:de:3e:1b:12:cb:24:
                    16:bb:21:16:71:16:2e:49:64:7b:e0:a6:67:71:71:
                    5c:45:7b:a1:3f:8a:73:f9:fd:46:01:bf:6d:07:c9:
                    93:47:b1:38:30:4e:04:2b:b2:72:15:af:79:d3:ef:
                    e5:aa:3a:a9:18:de:5f:b1:21:64:72:13:b5:8c:d0:
                    48:23:8c:32:d0:e0:b3:15:d6:b0:17:1f:ec:21:42:
                    43:a1:94:a9:cc:2d:2f:10:a2:59:b1:08:29:95:3e:
                    98:34:b4:b2:66:c0:da:b7:bf:9d:bd:0e:2d:e3:d4:
                    39:ad:87:29:5c:f5:b7:b4:d3:7f:67:50:8e:5f:ed:
                    8d:f1:98:63:03:4e:16:f4:d6:48:5d:b6:af:e2:b3:
                    95:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:36:0D:AE:98:38:F0:6E:D6:AF:D9:76:A6:D1:C9:90:0B:CD:98:0D
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33322e302f31392d3139203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:a5:b7:c1:7b:c4:32:5c:3c:7b:c5:23:5a:ca:34:9d:56:c0:
         ea:ca:e8:5a:a3:29:b2:c1:43:b3:e9:73:39:e9:54:a4:6d:49:
         8b:a0:80:25:43:6c:e2:e4:41:cf:23:84:3c:5d:3c:6a:19:34:
         04:1e:db:73:a6:0a:8d:ec:86:cd:54:e9:7d:36:d6:e7:0f:60:
         7c:7e:cd:14:66:07:a2:28:a8:72:37:08:dc:43:1c:58:8f:24:
         6b:3d:ea:ba:75:8d:85:eb:a1:f8:c5:e6:8a:12:39:47:a3:d6:
         6a:3e:57:09:37:cb:a3:97:6f:81:ae:43:07:17:36:d0:5e:c1:
         5c:d0:72:7c:78:32:ea:0f:60:e3:34:cb:4c:1b:19:72:d9:ca:
         82:6a:91:23:45:92:98:6f:26:38:a9:ff:15:2b:c3:30:3d:74:
         45:a8:0d:c0:cf:08:ed:ad:78:99:f8:a8:6a:dd:00:29:ff:a1:
         80:ee:40:62:88:6e:05:3f:4b:2d:86:69:2c:35:75:c3:0f:8b:
         73:62:ac:21:ed:2e:bb:83:b6:6b:c1:bb:9c:2f:24:99:d4:22:
         68:84:7d:4c:c1:c9:73:61:bd:ec:2f:ed:56:d3:cd:f3:02:12:
         bb:86:f4:60:0d:c9:e3:24:cf:f7:d1:83:cd:aa:e5:1f:8c:de:
         d5:5e:3b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org