Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e35302e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e35302e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          RLxE8+vKYFIZCNWTeSxuJCph1BZvIclAbotrkQrCCSs=
Subject key identifier:   5C:49:4F:A1:2D:9E:25:36:33:C7:33:EE:4C:8E:46:3A:BB:63:F1:6B
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       60C373B4202AED0BB37EC7C4D85C4FEA67D6CE38
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e35302e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:41:59 +0000
ROA not before:           Thu 28 Mar 2024 18:36:59 +0000
ROA not after:            Thu 27 Mar 2025 18:41:59 +0000
asID:                     11921
IP address blocks:        201.49.50.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c3:73:b4:20:2a:ed:0b:b3:7e:c7:c4:d8:5c:4f:ea:67:d6:ce:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:36:59 2024 GMT
            Not After : Mar 27 18:41:59 2025 GMT
        Subject: CN=5C494FA12D9E253633C733EE4C8E463ABB63F16B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d7:4b:01:c2:0b:fc:e4:cb:cd:38:58:4b:5d:
                    94:6d:0a:30:5c:11:77:2e:b1:07:cc:f0:1a:51:8b:
                    6f:59:fc:0c:7c:65:92:5d:56:50:f0:d5:13:b2:46:
                    b8:ce:9c:b9:ad:29:55:cd:23:b3:ef:3b:fc:88:b5:
                    37:bf:39:fd:4e:11:e1:2c:ab:31:fb:58:70:24:7f:
                    f7:61:c6:6d:55:59:86:22:31:56:a7:b2:98:c5:17:
                    f5:7f:b7:f5:6a:cd:d1:90:cd:7c:a6:9c:0e:e0:73:
                    56:26:67:1d:04:b8:e4:6f:63:49:37:d8:0b:5d:37:
                    04:a3:9d:05:22:4e:3e:e7:84:cb:51:97:be:ea:6d:
                    fd:67:02:d5:72:78:87:3b:e6:2f:7a:a5:2f:8f:01:
                    ce:3d:a8:a7:31:0e:e0:7c:3d:68:69:c2:4e:31:1b:
                    4a:12:9f:0b:e4:48:53:94:ba:50:50:2f:a4:e7:7c:
                    ad:ab:e1:27:14:4e:54:8e:8e:a8:b0:37:e0:9f:e3:
                    58:5a:fb:c5:26:c5:1d:b1:3a:b9:3e:e3:d9:0d:e1:
                    6d:a8:71:55:70:7d:ab:5a:2a:6f:f0:89:e5:74:b6:
                    7d:7c:36:05:21:39:53:c5:3b:ec:2d:8f:4f:df:34:
                    db:35:fa:03:ff:b6:6e:b1:74:7e:d3:17:70:1d:75:
                    57:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:49:4F:A1:2D:9E:25:36:33:C7:33:EE:4C:8E:46:3A:BB:63:F1:6B
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e35302e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:06:f0:4a:3b:25:ce:e7:85:ac:62:f6:44:34:a1:fb:e4:2b:
         eb:4c:5e:0b:be:f1:96:39:f9:4a:dc:35:ae:70:c4:88:c1:39:
         c6:9a:a0:0b:6f:a6:67:7f:32:c6:5d:ee:4d:d7:20:c0:dc:24:
         7a:b4:c2:06:e9:9d:e5:3f:3d:e8:b5:1b:54:cc:fa:98:d8:bd:
         25:3c:87:8c:40:f5:87:82:31:4c:3d:6c:40:cf:26:44:30:60:
         88:47:67:a4:8c:5a:ef:08:de:57:71:75:19:96:75:77:ee:1f:
         64:8a:4b:d4:70:a1:a4:79:e4:9d:91:62:27:de:37:0d:a1:e6:
         98:04:bd:91:f6:e9:d0:6a:5b:d6:bd:ea:e5:0f:cc:ab:53:9b:
         9a:d3:0b:d9:f7:ae:56:03:c7:16:2b:e5:11:58:da:a9:c2:e0:
         3f:d7:0d:91:6e:80:ae:e0:7c:6f:18:fd:88:ac:4c:51:31:fa:
         71:58:47:9b:d7:15:a6:bf:a5:15:25:08:c7:92:f3:84:21:4c:
         f6:a7:34:9f:45:b0:56:13:16:aa:43:ac:42:fa:a1:5a:84:98:
         bc:3a:03:e4:39:78:b6:98:d4:f3:a1:16:ce:57:8d:45:b2:4a:
         04:50:0e:31:ad:9f:fa:2f:b2:9a:c6:c6:4f:b7:c9:fd:d6:e9:
         87:b8:49:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org