Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33382e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e33382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          XQ+e5CdUlpOwPqFVgfh7nGGXOSzNp5fG+5QfHLo9S48=
Subject key identifier:   57:CA:53:C4:4E:93:A2:65:7D:CC:36:E4:46:92:48:F6:8D:07:72:0B
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       100B6D0EA6D79370FF00E061BA99551BA59C317E
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:41:59 +0000
ROA not before:           Thu 28 Mar 2024 18:36:59 +0000
ROA not after:            Thu 27 Mar 2025 18:41:59 +0000
asID:                     11921
IP address blocks:        201.49.38.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0b:6d:0e:a6:d7:93:70:ff:00:e0:61:ba:99:55:1b:a5:9c:31:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:36:59 2024 GMT
            Not After : Mar 27 18:41:59 2025 GMT
        Subject: CN=57CA53C44E93A2657DCC36E4469248F68D07720B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2f:69:8c:9e:66:0b:d5:01:db:41:ac:b1:93:
                    6d:dd:8e:62:10:76:28:78:5d:dd:a8:45:9d:07:2e:
                    1b:7d:ca:35:c1:28:96:01:9f:ee:fd:01:bf:f7:e6:
                    ba:a1:0c:84:55:58:d9:18:1f:64:20:8f:90:d0:8a:
                    9e:08:8c:66:2b:8d:5c:fa:64:e0:45:90:07:56:b1:
                    76:b6:66:70:6b:fe:09:83:07:16:49:6c:29:0b:99:
                    08:7e:4c:cf:02:8e:a9:a8:14:28:a9:d9:a8:b8:a3:
                    56:5f:8b:d1:40:a4:9e:46:2f:b4:7f:f2:85:53:ca:
                    6a:fb:0c:27:f6:2e:57:62:cf:8e:fb:36:9e:cd:eb:
                    2d:f9:e6:ec:2d:6d:b1:d0:d4:e9:2c:55:c5:3e:a1:
                    f3:dc:2f:fd:10:04:81:03:11:5e:93:46:50:e5:d8:
                    30:d6:19:d2:94:32:78:00:6b:3a:b8:8b:f1:ae:2e:
                    4b:73:12:78:63:a3:c0:6c:0b:1c:30:69:54:32:30:
                    6b:ac:c8:7a:5e:4f:89:62:62:e5:b2:e2:70:08:b3:
                    47:5f:5f:2b:f7:86:74:14:71:c2:5f:c8:5c:d5:e5:
                    a2:97:8f:76:a0:46:33:bd:be:49:06:14:1e:3b:a3:
                    4b:2b:08:17:6e:18:4b:b0:9b:b3:36:c5:77:b2:19:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CA:53:C4:4E:93:A2:65:7D:CC:36:E4:46:92:48:F6:8D:07:72:0B
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e33382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:ae:44:fc:1c:5d:d1:47:73:31:47:65:5a:c5:d5:bd:98:e1:
         9d:7f:ea:4a:ad:bc:b5:02:aa:bf:6e:9c:2f:36:f5:e7:16:d6:
         43:c0:7e:d8:a3:7d:23:c8:16:8c:47:c2:ee:b8:fe:06:21:cf:
         89:ad:22:ea:c6:4f:66:54:71:07:7b:1c:e2:75:6d:0a:25:22:
         05:ff:b5:e7:70:57:b4:7a:d2:ea:b3:99:55:e4:a3:d5:f4:e5:
         f8:91:d9:66:78:b2:ec:8c:cc:3c:31:bc:27:d4:80:ec:ec:62:
         90:5a:02:92:6b:85:31:fc:6e:61:f0:0a:c5:2f:ef:5b:81:2a:
         62:98:84:c1:c7:58:b2:51:7e:1b:d3:a8:db:a2:ef:69:85:e1:
         c7:be:f8:76:77:5b:bc:f1:c4:6b:34:4b:10:ab:4d:4e:6b:b3:
         7d:f0:42:b4:be:4c:7d:72:14:a9:4d:37:f4:c6:4f:a9:cb:a4:
         6d:b7:bf:ff:f0:1e:7f:86:74:42:44:33:99:57:be:f8:a0:0d:
         cc:5c:de:25:31:64:2d:2a:6f:b7:5b:6b:6b:41:d6:c6:d9:d6:
         34:f5:de:36:03:61:b7:3d:86:5a:b5:8f:1f:3d:1d:23:73:d0:
         52:4f:5d:d3:09:7c:83:79:82:2a:72:ca:1f:00:7f:f1:98:fd:
         08:f3:01:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org