Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33322e302f32302d3230203d3e203131393231.roa
File:                     3230312e34392e33322e302f32302d3230203d3e203131393231.roa (raw, json)
Hash identifier:          ZkRHD4/6Xmsa0wzhmYk0SzEcnnG137RhDDwvDidqfsE=
Subject key identifier:   39:9B:04:A6:D1:5F:FB:69:45:4D:B5:DE:96:69:CF:73:65:EC:E1:4C
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       6809FE9AD4BAE5B4D626FFD673429096A8DEF75B
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33322e302f32302d3230203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:57 +0000
ROA not before:           Thu 28 Mar 2024 14:36:57 +0000
ROA not after:            Thu 27 Mar 2025 14:41:57 +0000
asID:                     11921
IP address blocks:        201.49.32.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:09:fe:9a:d4:ba:e5:b4:d6:26:ff:d6:73:42:90:96:a8:de:f7:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:57 2024 GMT
            Not After : Mar 27 14:41:57 2025 GMT
        Subject: CN=399B04A6D15FFB69454DB5DE9669CF7365ECE14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:39:85:cd:cf:d2:fe:fb:05:eb:f3:24:4a:c0:
                    7b:f0:5f:21:e2:6f:16:89:f1:6d:55:4b:7b:58:98:
                    f3:d3:40:26:b2:45:95:df:19:da:6d:fc:cc:5b:a3:
                    52:23:70:f5:d7:da:1a:2e:cf:d1:a8:88:fb:6a:f3:
                    2b:6c:5f:46:0f:a7:74:ef:79:68:69:5d:a2:e2:f6:
                    3c:1b:f8:f7:7c:6f:fd:da:97:30:13:e3:de:a4:e4:
                    10:d6:31:ee:c2:31:44:65:74:78:61:5c:a9:ff:95:
                    cb:05:98:1c:d3:fb:8b:33:7c:35:8d:85:7c:59:f5:
                    89:c7:a9:26:72:bb:c9:97:f2:cf:36:c6:ae:c3:7c:
                    02:7e:94:ff:f6:e6:ae:d9:fc:f2:45:a4:b1:3f:3a:
                    9a:cd:b4:4e:93:5c:87:d1:38:cb:c8:fb:a1:31:89:
                    7f:d2:bc:8b:84:e0:bc:5f:51:e3:c2:c4:fc:d5:78:
                    f2:41:40:e1:1c:d0:b1:72:16:65:ee:d0:96:2e:90:
                    0c:29:9d:57:79:a8:3f:9c:1f:4f:91:32:db:f8:46:
                    de:96:0e:f3:cf:55:29:e5:48:51:65:49:a3:f6:02:
                    b5:23:90:5a:1a:3e:7e:69:e1:21:1a:68:32:19:33:
                    ef:71:c5:d4:ba:d1:1d:71:7d:1f:10:25:16:85:4c:
                    2c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9B:04:A6:D1:5F:FB:69:45:4D:B5:DE:96:69:CF:73:65:EC:E1:4C
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33322e302f32302d3230203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:cd:0d:64:50:0b:20:2d:91:4c:68:47:38:cd:34:7d:10:c6:
         4a:d2:f0:cf:4f:56:f3:74:02:5e:8b:c7:35:3b:64:0d:ee:13:
         8a:e4:61:f5:70:de:0d:1f:38:fe:d9:26:04:24:24:53:0d:4b:
         99:30:1f:9d:ef:a4:73:25:bb:d2:25:66:35:8e:79:11:75:54:
         62:00:b6:7d:b1:22:05:ec:10:88:2f:f1:6e:92:a8:8d:3b:26:
         56:82:33:2c:30:1f:8f:dd:0b:e0:65:a6:9b:ff:a6:5c:4a:70:
         f2:87:82:7b:63:b0:1b:55:4f:f1:00:76:56:2e:fd:f9:25:51:
         b0:71:fa:6c:d5:4b:88:66:0f:77:c5:92:6d:a5:34:27:66:f2:
         57:ec:33:09:73:99:73:40:2a:13:f5:54:36:d4:fb:a7:7f:99:
         a7:17:ac:13:6d:c1:4d:7c:da:e0:d5:44:bc:fb:d3:b8:43:b4:
         58:45:8d:2c:a7:05:be:c1:f6:74:b0:e8:5b:0e:e6:3d:1c:31:
         ac:e4:2d:bc:7e:3f:10:8f:f8:9d:14:07:88:06:c3:28:27:e6:
         a9:14:46:e5:78:7c:8a:12:1e:eb:c0:b2:b7:2f:fb:72:a8:44:
         10:b0:2c:48:7e:00:70:6b:66:f1:d7:4b:e0:1a:01:ed:77:15:
         b3:aa:1f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----