Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e35322e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e35322e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          ZchW5hA4SoqQbZpvrbutEG5KN4MdlZSzRqn78TxBAAI=
Subject key identifier:   FD:89:A4:44:83:EA:AE:5E:26:99:9E:C6:33:1B:8F:74:74:6F:0C:4D
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       3F2ADA007CE1982D8DD18C8C72976C1C6E3539F6
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e35322e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:41:59 +0000
ROA not before:           Thu 28 Mar 2024 18:36:59 +0000
ROA not after:            Thu 27 Mar 2025 18:41:59 +0000
asID:                     11921
IP address blocks:        201.49.52.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2a:da:00:7c:e1:98:2d:8d:d1:8c:8c:72:97:6c:1c:6e:35:39:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:36:59 2024 GMT
            Not After : Mar 27 18:41:59 2025 GMT
        Subject: CN=FD89A44483EAAE5E26999EC6331B8F74746F0C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:40:d3:0b:11:42:da:d3:c4:62:4d:fc:7e:e2:
                    0d:89:e8:a0:36:a4:4e:2d:0c:3b:f2:f8:e6:30:3d:
                    d6:73:4c:ca:a3:13:f6:21:c0:67:ad:8e:f7:a0:a8:
                    38:db:93:ec:84:1f:33:65:c4:52:4c:dd:fb:52:a8:
                    10:1f:7c:5a:51:7a:eb:4b:0f:a2:84:63:e4:bf:75:
                    33:3f:df:dd:58:7c:33:30:6f:1c:91:70:73:3e:95:
                    63:7b:44:1c:e9:a4:8c:c7:88:32:db:54:c4:ae:73:
                    b8:09:ba:8f:89:f6:a1:d4:21:c5:34:8f:dd:3e:33:
                    89:83:d6:e9:35:05:2f:77:b6:5f:c9:29:d7:5e:ab:
                    38:88:91:2a:9b:be:52:5c:ae:00:70:5e:37:22:92:
                    d1:a6:cc:03:2f:50:ca:ce:07:e0:f1:58:00:13:b4:
                    e4:db:84:70:2f:2c:dd:c3:40:f2:30:cb:1d:ed:ff:
                    39:42:56:7c:74:9d:96:a0:3e:6f:c4:b5:48:91:d5:
                    cb:e2:35:b9:59:a6:1b:64:8b:2a:fa:8d:51:be:dc:
                    2a:9d:49:c6:14:f7:1e:67:db:31:ce:c5:cf:c8:32:
                    e6:3e:11:31:1b:b3:bf:3e:5f:1b:ce:b0:eb:63:32:
                    90:d9:af:85:4b:47:7e:e8:04:40:4a:19:b6:5f:28:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:89:A4:44:83:EA:AE:5E:26:99:9E:C6:33:1B:8F:74:74:6F:0C:4D
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e35322e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:15:2d:cf:65:cf:f1:e4:48:c0:fb:4d:ec:4f:9b:00:3f:f0:
         17:db:bc:5d:1f:cb:8c:c9:07:23:2f:b5:04:fb:0b:6c:8c:fb:
         4b:14:84:4e:15:1f:7a:d9:24:ff:7c:56:b8:73:45:93:ee:f1:
         c2:3f:61:14:9a:1e:31:c6:15:99:f4:8b:0e:c9:dd:26:f6:5b:
         9b:ff:c7:8c:11:48:28:a4:e3:c1:5c:fe:5d:dd:e0:cc:46:d1:
         ad:a7:c9:ee:78:14:e5:ba:f1:eb:9f:a4:7a:74:a7:3b:74:f4:
         ae:2e:fa:9c:04:85:e0:89:c5:da:4d:40:3d:42:92:cc:46:27:
         54:b3:bc:57:39:44:9d:c1:66:36:02:79:8e:d7:5b:e9:2e:cd:
         92:12:10:37:bf:04:46:60:9d:1b:34:bc:b1:f4:a4:ca:d3:ce:
         84:aa:27:d1:0c:42:63:a9:8d:7e:a5:92:4f:93:4f:27:a6:f3:
         e8:5a:b7:de:9d:0d:67:f5:51:c2:36:68:e5:8b:9c:0a:c2:2c:
         48:2f:a2:7c:ad:c2:16:c3:7f:5a:64:e4:9b:22:16:f5:e0:ef:
         3a:6f:e5:45:f3:3e:77:d5:4c:16:bc:69:2e:a1:13:8c:f7:50:
         8e:a2:3b:0e:2a:11:b8:87:18:2c:6e:57:1f:d3:f1:1a:09:b5:
         31:5d:36:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----