Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e35362e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e35362e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          WU7Hl3CcVfQg9vgT96k+Pix8D5iVu8+4MdBfmlwbgdk=
Subject key identifier:   DC:93:C4:51:E4:69:C5:A6:1E:9A:51:C7:60:A7:F2:2C:D1:BF:A5:53
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       4D8B1998E7E879537C4CD3A47F5FCCABA8D44F25
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e35362e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:42:00 +0000
ROA not before:           Thu 28 Mar 2024 18:37:00 +0000
ROA not after:            Thu 27 Mar 2025 18:42:00 +0000
asID:                     11921
IP address blocks:        201.49.56.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8b:19:98:e7:e8:79:53:7c:4c:d3:a4:7f:5f:cc:ab:a8:d4:4f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:37:00 2024 GMT
            Not After : Mar 27 18:42:00 2025 GMT
        Subject: CN=DC93C451E469C5A61E9A51C760A7F22CD1BFA553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d6:36:df:ba:6a:30:6c:84:ae:e5:f9:16:45:
                    d6:97:e4:a6:9f:28:1a:22:a2:73:2f:5b:86:5e:19:
                    ba:81:3e:46:ea:d2:a9:42:37:19:08:10:11:71:0e:
                    c9:f2:e4:9d:6a:c1:25:5d:2d:4c:b2:86:32:cb:35:
                    9d:62:29:bb:ec:54:1e:43:b8:8d:ba:7d:b9:ad:be:
                    ce:a5:b8:12:78:82:9a:46:58:c4:c1:61:86:04:e7:
                    ac:dc:93:00:61:11:26:6b:8d:bf:37:fc:16:7f:7f:
                    cb:a7:0d:56:cc:52:ac:02:56:73:1a:ef:d9:1e:4a:
                    fd:19:d1:cc:1c:77:1b:80:cf:cc:df:e5:38:7c:4f:
                    cf:a3:b4:b1:3f:4a:94:ae:ee:e8:00:50:ec:a2:c4:
                    ff:ac:93:dc:b2:75:31:a3:8a:06:54:74:76:1d:35:
                    0e:ac:2d:f8:d2:a8:6b:b5:3a:d2:9d:60:2c:cf:40:
                    ce:10:7b:52:5e:a3:e6:45:e2:a9:a9:e8:6e:71:d5:
                    df:f5:49:20:7b:68:4f:34:0d:0d:46:0e:59:ea:0c:
                    bf:bf:2f:fa:5a:8c:d8:38:4f:87:c7:b0:48:77:d3:
                    59:99:c7:e9:07:6b:3f:0e:7b:8f:e0:89:a1:76:a6:
                    99:5f:41:cb:fe:b5:e2:42:6c:40:5c:08:0b:c7:44:
                    06:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:93:C4:51:E4:69:C5:A6:1E:9A:51:C7:60:A7:F2:2C:D1:BF:A5:53
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e35362e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:45:db:c7:25:0f:e7:e8:8b:27:89:67:fa:29:2d:2b:e8:b1:
         b2:5b:aa:c0:f5:be:4b:06:25:90:b1:60:e9:1b:04:5a:9e:e5:
         10:2d:77:6b:16:fb:e7:17:f7:35:80:b4:56:8e:30:34:fb:c6:
         ed:96:2e:42:3e:47:05:72:4d:9e:cf:bf:97:4f:d2:83:4b:65:
         44:5b:ee:5b:e5:a7:67:95:49:a1:17:71:f5:b6:f4:be:ea:1b:
         e4:40:1f:dc:a9:81:b1:16:81:b4:52:0a:d7:1d:77:28:56:23:
         ad:b9:6b:4a:ad:bd:28:82:78:8c:62:59:42:b3:50:60:e6:36:
         68:59:97:4d:12:17:ee:69:04:b6:62:27:b5:f6:bc:ed:b3:62:
         ac:f5:4f:09:98:b5:01:49:57:41:31:8f:7a:f8:d4:e1:83:03:
         66:ab:5b:7a:26:fa:bc:e4:fc:d6:84:43:db:23:b5:f2:58:19:
         b5:5d:c5:de:36:9d:fe:4f:8f:fb:32:aa:48:57:be:ce:de:76:
         aa:df:77:d9:7e:b3:bf:69:23:ff:41:50:b3:59:a8:de:f6:df:
         cb:34:26:60:c6:e2:cb:bf:ec:57:47:3d:60:f9:f2:a8:f1:97:
         2b:c6:0d:f3:d8:27:6e:81:36:e1:7b:18:ec:c2:31:ea:16:0b:
         2a:32:53:4b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTYsZmOfoeVN8TNOkf1/Mq6jUTyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczMDYyNDQ0ODA2N0Q4M0U4MzRBRkQxMUU5NjU3REQ4
RTE5OTE5OTAeFw0yNDAzMjgxODM3MDBaFw0yNTAzMjcxODQyMDBaMDMxMTAvBgNV
BAMTKERDOTNDNDUxRTQ2OUM1QTYxRTlBNTFDNzYwQTdGMjJDRDFCRkE1NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb1jbfumowbISu5fkWRdaX5Kaf
KBoionMvW4ZeGbqBPkbq0qlCNxkIEBFxDsny5J1qwSVdLUyyhjLLNZ1iKbvsVB5D
uI26fbmtvs6luBJ4gppGWMTBYYYE56zckwBhESZrjb83/BZ/f8unDVbMUqwCVnMa
79keSv0Z0cwcdxuAz8zf5Th8T8+jtLE/SpSu7ugAUOyixP+sk9yydTGjigZUdHYd
NQ6sLfjSqGu1OtKdYCzPQM4Qe1Jeo+ZF4qmp6G5x1d/1SSB7aE80DQ1GDlnqDL+/
L/pajNg4T4fHsEh301mZx+kHaz8Oe4/giaF2pplfQcv+teJCbEBcCAvHRAZbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU3JPEUeRpxaYemlHHYKfyLNG/pVMwHwYDVR0j
BBgwFoAUlzBiREgGfYPoNK/RHpZX3Y4ZkZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMC85NzMwNjI0NDQ4MDY3RDgzRTgzNEFGRDExRTk2NTdERDhFMTk5MTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MzA2MjQ0NDgwNjdEODNF
ODM0QUZEMTFFOTY1N0REOEUxOTkxOTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzAv
MzIzMDMxMmUzNDM5MmUzNTM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzMTM5
MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAckxODANBgkqhkiG9w0BAQsFAAOCAQEAuEXbxyUP5+iL
J4ln+iktK+ixsluqwPW+SwYlkLFg6RsEWp7lEC13axb75xf3NYC0Vo4wNPvG7ZYu
Qj5HBXJNns+/l0/Sg0tlRFvuW+WnZ5VJoRdx9bb0vuob5EAf3KmBsRaBtFIK1x13
KFYjrblrSq29KIJ4jGJZQrNQYOY2aFmXTRIX7mkEtmIntfa87bNirPVPCZi1AUlX
QTGPevjU4YMDZqtbeib6vOT81oRD2yO18lgZtV3F3jad/k+P+zKqSFe+zt52qt93
2X6zv2kj/0FQs1mo3vbfyzQmYMbiy7/sV0c9YPnyqPGXK8YN89gnboE24XsY7MIx
6hYLKjJTSw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org