Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e362e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e362e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          50Tmd/FL35rDdaULr2eSMd5Cm/FhTshoUDkV6Tv7PqM=
Subject key identifier:   A8:81:3F:12:4C:1B:FC:6D:4D:A2:14:1C:EC:0D:00:5C:DB:1C:6E:DA
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       76B1F64117FC7954814B956266A1FBC63F7FE8F3
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e362e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:41:59 +0000
ROA not before:           Thu 28 Mar 2024 18:36:59 +0000
ROA not after:            Thu 27 Mar 2025 18:41:59 +0000
asID:                     11921
IP address blocks:        201.49.6.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b1:f6:41:17:fc:79:54:81:4b:95:62:66:a1:fb:c6:3f:7f:e8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:36:59 2024 GMT
            Not After : Mar 27 18:41:59 2025 GMT
        Subject: CN=A8813F124C1BFC6D4DA2141CEC0D005CDB1C6EDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:09:4b:55:cf:1c:57:ec:10:f6:d1:21:56:
                    e3:64:5d:d4:a5:29:23:12:f0:3e:5c:f3:a6:75:d5:
                    7c:a6:70:6d:b4:ef:66:1d:9f:00:38:67:85:76:8e:
                    c4:08:7a:d5:ad:9b:2f:0d:6f:62:8f:0d:a0:6e:49:
                    32:f4:fa:88:c7:9c:94:57:a9:f1:17:37:f4:74:e5:
                    14:ca:a0:32:c5:0b:d6:34:91:07:78:b7:da:80:bb:
                    b1:6b:5a:4d:17:a2:9a:f2:0a:f4:a8:a6:d9:ac:a7:
                    71:d4:ab:40:38:7d:18:bf:9a:8c:ec:de:4a:7d:bb:
                    d9:6e:1d:12:4a:ec:f0:fb:de:40:32:45:75:21:26:
                    60:64:fd:0c:c3:e2:ec:46:58:f9:aa:f0:2d:7d:60:
                    4e:9f:aa:a4:f7:a5:f5:bd:a5:34:46:84:f9:81:25:
                    4e:0e:7f:ef:13:68:76:83:72:d2:7f:f8:bd:f8:e7:
                    57:0e:4c:72:70:33:bb:f7:09:91:30:f4:3f:7d:64:
                    71:03:cf:f7:38:2e:77:b5:9f:48:aa:fb:27:2e:11:
                    3c:19:5d:4e:11:dd:3f:b2:b5:62:a1:a3:c5:62:4e:
                    69:53:42:e8:de:b8:28:17:05:7c:16:2e:13:03:ef:
                    70:19:dc:c6:af:7a:ef:b7:c5:e2:51:86:63:91:74:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:81:3F:12:4C:1B:FC:6D:4D:A2:14:1C:EC:0D:00:5C:DB:1C:6E:DA
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e362e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:4d:4c:7f:a2:02:35:03:7b:d2:8c:ca:ef:c9:50:33:42:d8:
         fe:2c:89:d2:63:fd:79:6c:09:3c:00:4c:93:ea:64:ad:aa:3b:
         c0:0d:7e:c3:b5:33:09:c8:16:f7:1b:d0:f1:e8:00:c7:9c:73:
         c0:cf:d8:2b:7d:2f:4f:02:2c:e0:44:5c:3f:ec:bd:38:48:b5:
         f2:74:73:e5:c0:a7:6c:1b:fb:dd:03:6b:71:a4:96:c0:a7:d0:
         64:07:a3:8d:0d:44:eb:bb:74:32:17:4b:5a:9a:4a:e4:8e:6e:
         60:1c:4e:16:06:6f:02:bc:9d:54:7a:bf:14:da:6e:55:f5:92:
         af:06:a5:77:bb:b2:3c:91:95:78:3a:10:79:62:1b:a6:44:74:
         89:9c:20:c6:70:50:81:75:db:49:89:24:7d:4c:bc:b1:4a:3b:
         32:cd:64:24:71:1d:1c:a1:00:c3:ae:ac:32:5f:9c:46:5a:6b:
         b0:c5:c8:3d:69:63:21:02:b4:f5:a1:11:84:5d:f7:07:f5:d6:
         61:8d:55:77:b1:61:0e:75:58:65:e0:8d:44:be:a4:bb:1c:04:
         e1:7c:66:0d:14:5b:e5:fa:8a:ba:de:b3:5b:57:50:98:fc:2b:
         08:6a:5e:c0:af:ad:d1:ed:69:98:0c:58:91:79:8f:73:45:c3:
         90:bb:33:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org