Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e34302e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e34302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          52WqTiQ33UWbz1gSqjg3tQ2MSMvGXhhUDCPDPV8GOwk=
Subject key identifier:   B1:99:DB:BB:11:6C:91:F4:0C:A6:E0:73:F8:3F:F5:C7:00:69:99:89
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       04D645D421D99F4AD18DAF6C05EA3831DE9168AE
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e34302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:42:00 +0000
ROA not before:           Thu 28 Mar 2024 18:37:00 +0000
ROA not after:            Thu 27 Mar 2025 18:42:00 +0000
asID:                     11921
IP address blocks:        201.49.40.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d6:45:d4:21:d9:9f:4a:d1:8d:af:6c:05:ea:38:31:de:91:68:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:37:00 2024 GMT
            Not After : Mar 27 18:42:00 2025 GMT
        Subject: CN=B199DBBB116C91F40CA6E073F83FF5C700699989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:64:7f:d8:ce:22:cd:1f:3b:b9:6d:f6:91:
                    50:e9:45:06:f6:8d:04:87:b2:d3:64:02:f4:bb:35:
                    e3:21:0e:63:7e:08:15:43:22:ef:29:92:d4:70:c0:
                    ce:e7:36:ed:70:7b:ba:d1:6c:f6:68:67:51:ee:b0:
                    f3:34:77:45:2c:db:6b:b5:78:7a:60:62:13:d2:a2:
                    2f:28:fe:18:b8:4e:36:35:30:8f:79:0e:e9:18:ce:
                    00:d1:8a:60:b5:08:42:1f:12:09:90:0c:22:99:a4:
                    6f:15:6f:ab:46:46:94:35:9f:9d:20:75:6d:27:ad:
                    6b:0e:4e:53:a3:ff:50:a2:f8:93:cf:c4:ce:3d:ac:
                    8b:70:d6:fa:e0:ee:3e:f4:4b:a5:19:d7:e8:f9:fa:
                    52:00:cd:c2:28:c9:67:54:ee:36:31:d8:2c:e0:7c:
                    3b:6f:10:26:8a:f5:41:ee:49:13:e2:1d:6e:a9:9a:
                    28:7c:52:15:76:27:ea:6b:fd:38:e4:19:ee:e0:72:
                    2c:4f:04:1a:97:76:4b:ee:6a:13:88:28:96:85:db:
                    c9:a5:b9:1a:48:25:3c:e8:1b:54:a2:b4:63:81:ec:
                    48:46:35:eb:7d:fa:3a:b0:89:4d:28:cc:ce:05:63:
                    7c:53:21:8e:a4:c7:29:ff:0c:dc:66:73:4b:f5:2c:
                    c7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:99:DB:BB:11:6C:91:F4:0C:A6:E0:73:F8:3F:F5:C7:00:69:99:89
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e34302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:7c:ad:92:6b:5d:82:33:32:1d:fe:d5:79:ed:03:c7:60:76:
         4d:24:78:8c:08:45:d6:48:fe:e9:19:12:99:56:90:5d:2f:9e:
         01:f5:e4:86:86:3e:e2:b4:d3:73:11:6a:78:50:12:1b:92:b4:
         56:72:46:73:9b:37:d6:09:6c:f0:24:01:92:da:77:73:ac:56:
         f9:51:27:29:c5:50:8b:f5:5c:48:4b:77:33:68:3f:0e:92:94:
         a5:09:f3:80:27:11:4f:66:3d:d6:37:98:30:4b:ca:ec:5e:99:
         23:39:d4:8c:13:f9:25:1e:ad:57:fb:97:3e:5b:9b:b0:0a:4d:
         30:d7:66:79:49:93:ba:db:b2:24:42:41:dd:1b:41:37:95:f6:
         31:36:dd:f3:2a:38:45:87:5d:d2:a9:8e:85:8f:5e:b2:bb:90:
         45:45:1d:c9:14:73:d9:d8:24:86:8d:2b:d4:b0:59:85:69:4a:
         2e:35:ec:f6:1d:da:e2:e8:90:3b:70:39:7e:98:92:fd:4d:6c:
         c7:e2:46:d5:17:6b:20:b8:0c:c6:9f:8b:c2:68:04:67:4c:80:
         f3:4f:e0:79:ca:00:7c:dc:f7:40:d9:6e:92:ff:e4:bd:c1:12:
         33:81:85:8a:7e:c3:11:e7:a8:67:8d:4e:0d:dc:b1:55:47:ba:
         f2:40:ac:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:29 2025 by rpki-client