Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33342e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e33342e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          jbhnl7Z1H5mSiARAIxzKXfTgSu2xLglcLVphE2+Ia04=
Subject key identifier:   BD:C9:17:D5:DE:3F:2E:A6:FF:FC:85:56:57:9B:6B:B3:B1:E7:66:8F
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       4500E90DE31994BFC9962216CC40750E08F2FB25
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33342e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:41:59 +0000
ROA not before:           Thu 28 Mar 2024 18:36:59 +0000
ROA not after:            Thu 27 Mar 2025 18:41:59 +0000
asID:                     11921
IP address blocks:        201.49.34.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:00:e9:0d:e3:19:94:bf:c9:96:22:16:cc:40:75:0e:08:f2:fb:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:36:59 2024 GMT
            Not After : Mar 27 18:41:59 2025 GMT
        Subject: CN=BDC917D5DE3F2EA6FFFC8556579B6BB3B1E7668F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:de:81:41:00:2e:cb:0f:75:81:14:2a:42:
                    7f:aa:60:c2:d1:b0:25:5e:c5:36:a9:cb:c8:74:40:
                    7b:6e:0c:2a:79:d4:9d:ce:eb:68:b3:fe:93:47:61:
                    02:f9:fe:fb:2b:90:54:c4:75:51:b2:72:f7:a3:a3:
                    5b:3d:51:d2:d0:eb:20:35:cc:a5:ea:0f:1d:d7:72:
                    4d:f4:95:4f:cc:bb:d6:39:c4:0f:32:05:4c:6b:46:
                    dc:27:32:64:a1:e2:75:5b:44:b5:16:34:67:34:d8:
                    2a:1a:84:4c:27:a4:e4:90:fe:e2:ee:ef:2d:60:66:
                    7c:61:58:06:08:a6:04:aa:f6:d1:1b:f2:8c:3d:f4:
                    a5:1f:22:fc:03:79:3a:76:df:ec:95:5b:ae:a1:f5:
                    9b:ad:34:32:b5:1f:76:be:33:40:e9:b6:a8:61:d7:
                    25:33:9e:ab:b5:d6:b6:cb:6c:80:5b:5a:b1:2a:13:
                    f9:52:44:83:42:75:2c:d0:69:7f:0f:d5:54:85:12:
                    2e:bc:64:61:ca:71:62:be:9b:4a:7f:09:1c:b9:81:
                    f8:e4:58:ac:db:b1:d6:b3:12:fa:de:97:d0:ae:37:
                    7a:31:88:81:b2:f5:ac:d5:65:85:e2:f8:e2:df:1c:
                    99:c0:e3:9b:cb:f2:50:74:83:ff:4f:20:f8:c3:b7:
                    19:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C9:17:D5:DE:3F:2E:A6:FF:FC:85:56:57:9B:6B:B3:B1:E7:66:8F
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33342e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:94:62:9f:48:37:aa:db:ab:c4:dd:98:14:1d:85:eb:c9:1f:
         c9:08:df:2a:56:29:fc:6a:95:33:74:65:69:c9:88:ae:3c:3c:
         23:08:72:d3:e8:02:f2:2d:3b:6f:e9:70:b4:af:b9:7b:07:a8:
         f9:ad:16:4f:9f:5e:45:50:2b:a9:52:d9:93:9a:e9:97:59:e5:
         79:e6:f5:29:e0:bb:45:65:ce:c9:2d:33:33:ad:dc:20:f1:18:
         6f:09:28:8c:de:0b:f6:b7:5a:b2:55:0e:7b:40:ac:6c:82:b0:
         b6:96:ab:f0:a6:34:6f:87:8b:cb:39:0f:57:9f:2f:e1:5f:6b:
         ed:fc:da:2c:b6:5e:d9:79:fa:b7:75:41:5d:3a:18:5e:ed:53:
         67:92:d8:ec:9f:a9:55:6d:05:8e:dc:ac:68:15:aa:02:3f:4b:
         8f:d7:24:bc:81:57:54:02:91:a7:20:c6:4c:ca:40:bb:6b:33:
         af:05:d9:48:3b:fb:03:fc:1f:18:e1:f7:83:42:0e:89:04:b0:
         f8:d2:4d:4a:46:77:d8:c5:ec:73:b8:a5:e9:99:e7:75:20:d6:
         f8:0a:35:cd:cf:11:12:12:6f:82:6b:3a:a6:99:46:5a:23:55:
         4a:1e:ad:fe:2c:e4:2d:49:ca:7c:a7:5c:b0:60:ea:d3:fa:a4:
         26:5f:c1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org