Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33322e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e33322e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          GoKN++XIPWsafhyyFd7JP7YWDBWj7xPZgpsMBaNz8Yk=
Subject key identifier:   8E:BF:77:24:88:77:4F:6A:6B:E5:DA:BF:71:99:8C:7A:8E:3D:C1:58
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       590D1EF51F719F9C13CB93A8CAEC2B1BB05AFA56
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33322e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:42:00 +0000
ROA not before:           Thu 28 Mar 2024 18:37:00 +0000
ROA not after:            Thu 27 Mar 2025 18:42:00 +0000
asID:                     11921
IP address blocks:        201.49.32.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0d:1e:f5:1f:71:9f:9c:13:cb:93:a8:ca:ec:2b:1b:b0:5a:fa:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:37:00 2024 GMT
            Not After : Mar 27 18:42:00 2025 GMT
        Subject: CN=8EBF772488774F6A6BE5DABF71998C7A8E3DC158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a7:2e:81:27:9e:93:07:84:98:a4:fa:b8:51:
                    91:78:24:d9:46:0b:bd:88:6c:90:ad:de:d4:82:d9:
                    3f:e5:48:2d:36:06:cc:f2:9b:a4:e3:58:1c:31:ca:
                    64:c5:24:29:fa:15:23:72:53:fc:32:f7:36:74:1f:
                    9c:21:61:9a:3a:25:e9:78:6a:36:e3:60:31:53:49:
                    87:32:95:30:bb:9d:bb:f2:10:8f:aa:4a:af:60:3c:
                    78:59:c0:4c:1f:56:1e:07:34:6f:38:72:fc:d9:84:
                    46:f9:4c:d2:2e:50:ff:7c:b8:1f:ad:20:d7:55:bd:
                    7d:b8:f6:d6:33:07:1f:5e:10:3e:bf:d4:43:20:32:
                    31:62:b1:35:19:3e:07:46:ea:0f:5a:81:01:d2:95:
                    bd:69:02:86:f6:5c:38:aa:5d:00:00:74:74:39:e7:
                    b7:a1:88:84:f2:9f:7a:6b:fa:19:59:3f:b9:78:66:
                    b5:1f:9b:98:9a:79:62:7a:93:64:62:d8:71:bb:bd:
                    4d:fc:ec:8d:5b:c4:74:49:83:d9:c2:50:55:cd:15:
                    fa:57:2b:79:bd:58:df:df:d4:e3:22:c1:3f:19:a5:
                    bc:15:bf:30:1a:4b:de:e6:1c:9a:ce:f3:98:b2:67:
                    0c:1d:41:53:59:54:99:ff:f2:d8:a3:ff:80:3b:ac:
                    34:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BF:77:24:88:77:4F:6A:6B:E5:DA:BF:71:99:8C:7A:8E:3D:C1:58
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33322e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:64:80:58:69:8e:56:9b:26:db:e1:95:6f:99:e3:30:79:11:
         44:39:96:43:b1:ba:b7:8e:c6:08:63:02:1e:1c:95:08:9b:e2:
         dc:a5:8e:ae:bb:7c:62:8d:bf:16:51:e8:a9:ce:01:dd:05:c2:
         5a:38:f9:e8:5c:77:ea:75:fd:83:fd:30:38:ec:f0:4a:a2:1a:
         13:76:39:cb:e2:e2:8a:a0:3a:15:9b:4a:b4:23:5c:34:b2:42:
         30:28:ea:f0:bd:30:b8:6c:45:c1:c2:d1:d3:b6:0b:19:8c:3a:
         f5:6d:f6:95:13:f7:a9:79:71:57:c6:71:64:30:54:4d:f2:96:
         ef:b8:fc:23:3c:85:3f:ba:da:9b:c3:94:58:1d:9f:ea:57:e9:
         52:3d:df:e1:1d:d4:f4:77:7b:0c:79:56:5b:c5:c5:d3:22:a8:
         a1:ce:de:5e:34:9c:e2:70:9b:e2:be:c0:d7:26:e5:50:0e:a8:
         dc:9d:ef:2f:67:ad:27:4c:b4:56:d9:7a:ad:9b:5d:85:19:ea:
         b5:8e:65:8a:c3:eb:b4:1b:30:3a:2b:a2:e6:83:a7:70:68:4b:
         fb:64:e8:f8:30:1f:4e:4b:a3:09:1c:cb:19:2b:85:16:70:ed:
         18:bc:11:cf:87:0a:bd:50:b4:8f:6e:c4:c2:a0:34:f6:3a:3b:
         af:cf:ac:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org