Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33322e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e33322e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          ESouqGMIaZad0TZtbD5fkn3CbwhfTqfFr4ipUcnd1Mk=
Subject key identifier:   C2:E4:52:1C:AC:A0:DB:43:43:E1:64:BA:3B:DD:C1:14:37:2D:FB:AF
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       2729035FE874774EDC21024937995AF8B21377C0
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33322e302f32342d3234203d3e203131393231.roa
Signing time:             Thu 21 Mar 2024 18:21:30 +0000
ROA not before:           Thu 21 Mar 2024 18:16:30 +0000
ROA not after:            Thu 20 Mar 2025 18:21:30 +0000
asID:                     11921
IP address blocks:        201.49.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:29:03:5f:e8:74:77:4e:dc:21:02:49:37:99:5a:f8:b2:13:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 21 18:16:30 2024 GMT
            Not After : Mar 20 18:21:30 2025 GMT
        Subject: CN=C2E4521CACA0DB4343E164BA3BDDC114372DFBAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:8f:5a:87:09:81:41:fa:2c:4a:22:ae:f2:
                    0e:74:38:a5:67:d2:67:30:41:80:d5:ab:aa:d8:76:
                    b3:15:8e:d9:65:f0:92:c8:c5:76:86:14:d9:51:dd:
                    64:3d:a1:19:d2:fa:1d:76:4d:fa:a8:a0:6b:11:22:
                    4c:3a:32:81:e8:a1:0f:7f:f3:a0:be:01:32:6b:1d:
                    b9:d1:8f:29:26:f9:f6:a5:d2:64:b7:93:de:ac:16:
                    e7:72:c9:32:5b:87:c9:2a:91:0e:ca:8b:bd:17:ad:
                    49:e7:f0:2e:ec:c8:06:a2:47:04:fb:91:b2:d5:d1:
                    3c:30:a4:39:5d:1f:5e:4e:a2:a9:1a:77:6c:a4:e7:
                    f0:8f:03:7e:57:8d:a3:80:0e:10:0b:d4:7a:8c:62:
                    21:10:48:9b:a0:fc:a8:d2:39:c6:1f:d4:71:2d:88:
                    21:9c:0e:a6:c4:cb:5f:83:93:44:27:4f:bc:fb:30:
                    37:b6:ff:64:d6:b1:23:dd:e2:d5:65:fb:5a:73:79:
                    15:1f:98:b6:7a:18:9f:d2:a7:86:c9:4a:37:ea:91:
                    b3:9a:9a:db:c6:50:41:73:93:f5:6e:ed:4c:f0:23:
                    29:3e:95:ca:e5:42:25:c3:8f:ec:e8:f0:37:92:fb:
                    fc:31:2f:ff:33:6a:eb:21:9b:61:8b:db:55:8d:b6:
                    94:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E4:52:1C:AC:A0:DB:43:43:E1:64:BA:3B:DD:C1:14:37:2D:FB:AF
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33322e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:90:a2:1d:6d:db:d9:ac:4c:ba:22:c3:ad:17:1c:ea:4b:67:
         97:0a:7c:a3:50:cd:3c:05:4b:ee:08:42:bb:86:3b:25:a9:fb:
         16:99:21:fc:f2:49:ea:bf:2d:fb:8c:8e:22:31:b4:b8:66:ec:
         7f:4b:9a:4f:a8:23:22:d6:74:60:94:d1:c2:4c:dd:99:cf:1c:
         7d:e9:61:05:e2:91:f9:f4:e0:c0:10:fc:f0:a4:ff:34:63:34:
         73:6b:51:f1:c9:ba:19:2f:58:58:5a:81:8c:2e:db:ad:0f:29:
         5e:0b:eb:5b:86:e3:19:84:ee:8e:ff:fb:6a:77:66:0a:68:41:
         2c:5b:7a:15:85:9a:5a:84:51:a8:f3:d2:6a:21:5b:7b:77:fc:
         cf:00:9d:74:b9:1d:b1:f1:c5:c3:b5:1c:d0:40:3b:cb:4f:21:
         30:bf:96:1c:9c:9c:fe:20:a8:a3:91:dc:bc:c4:15:e5:b1:a9:
         8a:80:be:40:7f:49:57:44:ed:b4:43:31:d1:f1:48:53:ff:a6:
         0a:0b:8c:cb:51:c2:1f:3d:6f:78:a4:80:42:ea:47:9a:6d:e9:
         0f:17:f7:e9:11:ff:84:f3:92:4a:e7:33:ae:8b:83:f8:f0:4b:
         6b:25:76:1f:08:d0:97:8a:3a:88:b1:31:d7:d2:67:0b:05:1a:
         ba:e8:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org