Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33362e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e33362e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          mjVpeDFVtX9LjQxiL8m0Ho3ZFgiHIyb9/fcSAa1sjcg=
Subject key identifier:   22:58:70:56:FD:25:B9:DF:38:5B:FB:99:64:B1:0C:B5:4B:89:C1:9E
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       0D7FBA369568BE14BEB1B0752B29F946935F4E3F
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33362e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:42:00 +0000
ROA not before:           Thu 28 Mar 2024 18:37:00 +0000
ROA not after:            Thu 27 Mar 2025 18:42:00 +0000
asID:                     11921
IP address blocks:        201.49.36.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:7f:ba:36:95:68:be:14:be:b1:b0:75:2b:29:f9:46:93:5f:4e:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:37:00 2024 GMT
            Not After : Mar 27 18:42:00 2025 GMT
        Subject: CN=22587056FD25B9DF385BFB9964B10CB54B89C19E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8e:e2:a2:a8:d8:7e:01:cb:7d:ee:17:ec:37:
                    94:b8:3d:7e:01:58:86:80:5e:c1:16:6c:c7:1c:3e:
                    7d:73:1f:00:d1:9f:d7:b9:bc:f5:a4:c1:d5:1f:9a:
                    82:59:15:a3:55:78:08:9f:de:76:7f:7d:62:73:f9:
                    25:33:29:b0:ee:37:07:40:71:11:bc:e7:9a:f4:80:
                    f5:6e:cf:16:45:09:85:fd:cc:a5:df:0b:b9:37:e5:
                    c9:1a:9e:0c:cd:58:fd:50:84:25:72:2c:e8:e8:5a:
                    3a:43:62:4c:04:fb:bb:6e:6c:0b:f0:dc:e8:ac:85:
                    cf:1f:66:e9:61:f6:92:a0:f0:f3:2a:fd:c9:75:98:
                    89:d1:73:9d:a7:58:4d:54:a2:b6:0a:bc:6e:ac:ff:
                    24:ca:a6:58:19:2b:8d:e5:1a:4c:d4:bc:bc:fe:57:
                    9b:59:b2:be:bf:73:a9:38:9c:e1:84:44:74:a8:5d:
                    af:2c:ad:e6:e6:c7:09:61:ce:1e:ec:44:a6:7e:79:
                    8b:c4:23:38:47:e3:c9:bb:7e:91:3c:4a:b5:b5:8c:
                    d8:f2:7a:96:94:58:07:02:b8:40:ea:76:73:ac:9d:
                    f0:81:b1:13:dc:44:3f:d8:4a:35:14:67:14:e6:c1:
                    64:77:9b:bf:1f:ec:fa:6a:b4:20:c0:62:df:20:8b:
                    98:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:58:70:56:FD:25:B9:DF:38:5B:FB:99:64:B1:0C:B5:4B:89:C1:9E
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33362e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:e7:d0:74:ed:64:b7:aa:69:0c:48:8c:0c:cc:6f:b7:75:e4:
         29:88:d4:2b:33:3e:a5:f4:52:a8:27:4a:7f:b1:fc:a6:d2:59:
         d5:ce:51:0e:ab:c4:a4:15:1c:6d:80:97:18:f1:36:e7:1e:d4:
         81:27:8e:5a:24:72:34:ac:e2:66:2f:19:1a:78:20:7b:f9:c1:
         18:2b:67:b7:5f:b8:54:32:91:02:a7:ea:aa:57:a5:f4:a3:84:
         e2:a8:3d:6b:d6:9c:26:d8:cb:61:5f:cc:61:db:05:fc:c7:e3:
         e9:7a:ac:ff:d4:58:76:17:d5:3c:b6:59:bd:9f:b1:0d:91:fa:
         ca:57:85:e1:03:54:f4:48:92:83:fd:a8:0f:84:91:78:69:29:
         bd:fa:e6:d7:44:a9:3a:82:7a:85:64:62:55:cb:2f:b7:e6:d7:
         91:06:d4:40:17:fc:b5:31:33:c8:2e:e4:32:4c:ba:4b:fd:ed:
         a9:70:07:f1:d6:0b:b8:7d:95:68:db:71:e7:55:73:3a:42:2a:
         94:ff:96:ba:86:10:89:13:d6:af:8b:f0:e9:66:29:e9:0b:cf:
         f6:5c:f7:48:90:cc:a7:50:32:a0:69:47:8a:c9:5e:da:b9:50:
         76:f8:9f:d4:59:59:3f:4c:44:f5:c6:aa:5d:e6:60:92:b8:b6:
         df:e5:94:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org