Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e34322e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e34322e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          Gh2JIWbFbZA+OHhhcTUYPifXZ68cQi4la6tInQjnLSY=
Subject key identifier:   F4:1B:E5:D1:3C:71:07:D4:92:D7:68:E8:72:28:FD:24:95:DA:D8:1B
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       14D7D7EBD8128DFB0C16F5EEAAF01EC6A75D2940
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e34322e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:42:00 +0000
ROA not before:           Thu 28 Mar 2024 18:37:00 +0000
ROA not after:            Thu 27 Mar 2025 18:42:00 +0000
asID:                     11921
IP address blocks:        201.49.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d7:d7:eb:d8:12:8d:fb:0c:16:f5:ee:aa:f0:1e:c6:a7:5d:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:37:00 2024 GMT
            Not After : Mar 27 18:42:00 2025 GMT
        Subject: CN=F41BE5D13C7107D492D768E87228FD2495DAD81B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d7:a4:33:87:ce:ce:e1:36:79:f8:84:ca:4a:
                    c3:ee:f7:79:84:0d:67:a4:bb:43:72:a9:15:cf:00:
                    71:5c:ec:71:5e:c9:fc:1d:c0:33:44:33:cb:06:d4:
                    a3:d0:90:6e:be:9f:3e:15:b2:e4:20:23:79:b4:f7:
                    ce:91:5e:1d:ca:ea:66:69:f0:9d:bc:7a:f9:a3:30:
                    54:11:94:0a:88:f4:3c:7c:ff:2f:f2:d6:84:89:42:
                    8f:3d:9b:cf:fd:19:7b:56:dd:ab:45:3f:ef:cb:d7:
                    13:a8:ba:cd:21:e8:68:67:59:a1:16:e9:0e:63:fe:
                    f5:36:a3:00:e3:18:42:a4:b3:33:61:b6:ff:6e:d9:
                    a8:29:6e:e8:e0:d3:d3:b9:13:19:0d:7d:bc:30:54:
                    42:ec:ce:00:69:72:bb:fe:78:cd:14:e3:17:5a:8b:
                    f4:40:19:24:fd:a3:9f:75:ee:8d:0d:e0:10:74:b6:
                    8b:53:ff:5e:5c:ca:7b:79:e7:27:17:8d:c1:78:45:
                    7e:e8:e5:98:ed:5c:14:4f:fe:9b:da:47:33:47:0f:
                    f4:ff:de:c3:0d:64:e4:6e:82:37:f6:64:65:8d:70:
                    05:3b:75:ae:dc:99:90:79:98:49:27:11:5b:bb:e0:
                    3c:65:6a:16:13:81:b2:99:b5:15:a0:e9:ff:97:c8:
                    dc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1B:E5:D1:3C:71:07:D4:92:D7:68:E8:72:28:FD:24:95:DA:D8:1B
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e34322e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:9f:00:b7:43:67:09:8e:a4:f9:3d:55:2e:04:b7:c7:a4:ea:
         5e:94:c8:3e:44:5b:99:62:39:5a:c0:b2:ae:9d:43:39:6d:d9:
         df:df:0a:c0:e1:91:e6:3a:8c:30:0a:37:9c:36:64:d0:0d:57:
         eb:83:ce:1c:5f:38:13:a4:2b:86:05:8a:81:7b:79:f7:30:c8:
         8a:53:70:66:4a:be:fa:03:f6:8b:26:7a:01:e8:77:bd:a3:80:
         c1:17:5e:e7:b4:31:c2:c3:f7:2f:79:9e:d9:a3:ac:42:cd:85:
         08:6a:fb:4a:9b:6b:ce:57:6c:f6:2c:3b:35:3d:3a:36:f8:c3:
         d1:d2:2b:4e:2e:f4:7a:a2:5f:40:4c:29:79:47:37:ff:e7:ec:
         0b:bc:6a:26:0d:af:b1:a3:fa:24:38:c1:95:52:e0:93:24:b8:
         2a:57:e0:06:83:59:f9:59:94:13:19:c4:97:0d:b5:6d:f9:39:
         4b:20:5a:65:d5:79:ff:1f:37:1b:5c:b7:56:0a:af:e1:5e:c0:
         ad:36:de:c6:ff:e7:1a:54:2f:7c:1d:4b:f9:df:2b:d2:c5:4e:
         31:07:fb:dc:ae:86:d7:f7:72:29:fb:d9:a4:b0:48:67:1b:a2:
         68:16:e6:77:82:37:10:2f:0a:75:c5:12:f8:d4:53:f7:b0:ea:
         94:fd:5b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org