Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e35382e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e35382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          CFJFhHPFKJM2neHBhKNHVN24vxpYEtG+zQTBQdiuPSM=
Subject key identifier:   1E:7D:15:59:DC:9A:B7:EB:21:BA:CF:61:41:C0:80:B9:FD:AC:6C:56
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       039CE6681B5E44E47D94DDB97536D986567F209D
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e35382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:42:00 +0000
ROA not before:           Thu 28 Mar 2024 18:37:00 +0000
ROA not after:            Thu 27 Mar 2025 18:42:00 +0000
asID:                     11921
IP address blocks:        201.49.58.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9c:e6:68:1b:5e:44:e4:7d:94:dd:b9:75:36:d9:86:56:7f:20:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:37:00 2024 GMT
            Not After : Mar 27 18:42:00 2025 GMT
        Subject: CN=1E7D1559DC9AB7EB21BACF6141C080B9FDAC6C56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bc:be:d4:cf:70:0a:7a:cb:e0:95:f7:59:ce:
                    58:1c:b0:70:a0:56:59:d2:19:e7:3e:b0:f1:c5:03:
                    21:96:5f:9d:d2:ed:3a:88:cd:f4:14:37:69:36:13:
                    10:a2:e4:5f:ec:24:9b:7b:32:60:ec:51:5f:11:e0:
                    f9:91:dd:df:92:04:90:67:2f:47:a2:75:c9:d2:a9:
                    81:ae:ab:7e:26:31:b2:04:2c:74:72:89:21:23:c0:
                    08:8c:ad:72:f6:32:b5:fe:28:a3:83:b9:91:51:22:
                    50:80:58:c2:a1:f3:52:09:3e:9d:8a:76:21:3a:83:
                    25:6d:77:ce:19:00:94:93:e6:bf:0b:ef:a6:b0:f1:
                    1f:d9:22:83:1e:61:7c:bf:f1:a1:d8:dd:78:88:8e:
                    df:c0:c1:23:11:b7:c0:e5:90:ff:9a:4c:7c:d9:af:
                    64:2f:7a:d9:2f:cf:a8:58:d3:b1:c2:b5:9d:57:73:
                    43:13:6f:a5:e6:06:b9:cf:91:20:97:ee:e9:9c:23:
                    e7:26:d2:84:4a:0a:2b:a0:8a:7f:a4:4d:38:30:6a:
                    92:f8:39:cd:bb:be:80:f5:5d:85:6f:28:83:f8:2b:
                    f0:da:15:60:fd:38:f6:32:ad:0d:b5:75:07:c4:7f:
                    a4:41:24:2d:95:18:66:4e:81:18:83:1d:a0:b1:f3:
                    ac:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7D:15:59:DC:9A:B7:EB:21:BA:CF:61:41:C0:80:B9:FD:AC:6C:56
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e35382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:6f:49:ec:24:22:13:6b:44:62:52:c7:f9:75:9f:05:42:30:
         cc:22:e6:06:b4:27:4a:1a:5d:20:3f:4c:41:e9:b9:2c:32:63:
         63:6d:ec:e9:1e:26:3b:0b:2b:38:09:18:49:90:0c:67:26:69:
         3e:a7:91:3c:a8:40:46:a0:76:ed:65:44:4e:1c:bb:17:a7:6c:
         88:16:b1:2c:4c:1f:38:03:fc:7c:d1:4e:83:a6:a3:1a:a0:b4:
         3d:56:97:3e:6d:92:e9:be:40:72:f6:b6:fb:54:45:ff:3a:2c:
         e7:f2:b2:65:86:6e:62:3b:b6:76:05:a5:9a:b0:a8:ee:95:c7:
         d5:8c:55:34:15:1e:63:07:43:1c:d4:35:c0:34:12:7d:0f:36:
         df:01:1e:14:89:d7:e4:c9:4e:8c:9e:3d:7f:f9:40:f1:a8:ae:
         ef:ab:4c:b7:78:c9:2b:db:59:08:a3:65:c0:30:09:61:2f:23:
         cd:0f:88:96:81:82:e3:f9:15:f8:ce:56:e0:53:23:b4:4d:48:
         96:1b:b4:28:ae:96:cf:60:1a:27:89:96:f2:80:bf:24:e3:ae:
         a7:19:4c:e2:3c:00:44:f2:e0:0a:82:e1:56:dc:e3:67:d5:4a:
         d7:da:c3:b3:e4:09:ee:8f:d5:90:00:5c:1d:80:21:49:66:b0:
         f5:0b:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org