Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e34382e302f32302d3230203d3e203131393231.roa
File:                     3230312e34392e34382e302f32302d3230203d3e203131393231.roa (raw, json)
Hash identifier:          t9UAxoZfHyBJKG4yiYpSDmp8jVisZAx+T4TcQCPEsc0=
Subject key identifier:   5D:70:75:20:3E:B4:36:BC:DC:08:3F:1E:E9:FA:CE:13:38:90:78:48
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       25B185B9AF68CFBD2F5E1F293D58863BD18D29ED
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e34382e302f32302d3230203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 14:41:56 +0000
ROA not before:           Thu 28 Mar 2024 14:36:56 +0000
ROA not after:            Thu 27 Mar 2025 14:41:56 +0000
asID:                     11921
IP address blocks:        201.49.48.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b1:85:b9:af:68:cf:bd:2f:5e:1f:29:3d:58:86:3b:d1:8d:29:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 14:36:56 2024 GMT
            Not After : Mar 27 14:41:56 2025 GMT
        Subject: CN=5D7075203EB436BCDC083F1EE9FACE1338907848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:19:6f:6d:e9:eb:5f:49:cb:60:8e:70:18:
                    66:19:1c:39:e7:0b:2a:1e:d4:f4:8d:44:c2:35:94:
                    28:21:22:7d:3e:0a:57:28:93:03:e0:6c:46:95:3c:
                    e2:0c:97:bc:47:97:ab:e5:5d:f4:d3:68:0f:85:3c:
                    d9:32:9f:80:8a:09:e0:99:f4:e3:c1:d8:2b:38:d6:
                    1c:82:a9:2e:d5:95:96:f0:58:2b:49:9a:12:ac:e4:
                    6e:27:f1:a2:f3:ec:82:78:5c:97:93:1c:f9:22:59:
                    70:07:12:cd:ed:6c:46:b9:77:5b:a4:97:9a:05:44:
                    87:15:c0:6f:49:6e:a1:5c:42:16:45:5f:46:b4:14:
                    cf:5b:01:96:e9:9e:20:c8:30:a8:58:37:29:e0:7a:
                    12:28:88:79:76:c6:8d:97:16:05:93:0b:f0:1a:d5:
                    f8:60:9c:bd:bb:85:51:2f:26:3b:10:18:8e:e8:e6:
                    3f:f5:ca:d9:f5:3d:f2:7b:b1:b2:77:81:d9:0d:93:
                    a6:5f:69:e4:6d:05:f7:aa:de:44:1b:7a:40:b3:d1:
                    07:9b:4e:0e:20:1f:05:de:91:ed:ca:57:53:9b:57:
                    e0:24:b9:cd:94:59:89:3b:80:8d:7c:02:12:88:99:
                    8c:93:d6:7d:3b:b7:6a:63:78:c6:2a:1a:75:fe:60:
                    4c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:70:75:20:3E:B4:36:BC:DC:08:3F:1E:E9:FA:CE:13:38:90:78:48
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e34382e302f32302d3230203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:6e:20:28:09:66:da:43:5c:e7:65:d9:2f:69:00:33:2f:39:
         3b:a3:34:fe:a6:ec:25:16:a5:d3:6a:86:da:a2:b3:55:02:c9:
         95:4b:74:47:f3:30:45:41:52:1a:97:92:71:7b:78:e6:ff:1a:
         8c:ba:76:2e:4d:22:70:1a:94:47:b5:28:9f:af:de:c7:ad:21:
         e5:bd:b7:7d:5f:84:7a:d1:a6:b3:8b:e9:20:32:23:bb:ad:da:
         e6:f0:b3:d3:da:a4:53:0a:82:0b:b5:1e:03:ee:00:6f:aa:d9:
         ff:c2:a1:12:bc:2b:f5:49:94:b2:47:c6:d7:fc:5a:d7:02:a8:
         f3:6b:83:4b:7c:37:50:7d:68:97:98:de:be:97:c9:e3:1e:c0:
         5d:37:ca:1a:fe:2f:1b:0c:29:fd:75:34:56:f9:09:d7:44:22:
         36:65:99:88:75:46:be:68:6c:22:bf:b6:1b:ec:2f:8f:7e:6c:
         dd:c4:a4:7a:3b:a9:fa:94:ef:62:d9:71:d0:38:85:fe:97:21:
         8a:93:e2:0a:1a:16:13:c7:9d:9a:e5:38:1d:82:9d:ba:73:95:
         6f:04:6b:60:a2:21:19:98:eb:ac:53:37:f6:3e:11:59:08:ca:
         60:58:3c:95:83:6e:52:8a:5e:cf:5b:9f:fa:8f:9d:73:70:74:
         00:5d:b1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org