Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e36312e302f32342d3234203d3e203131393231.roa
File:                     3230312e34392e36312e302f32342d3234203d3e203131393231.roa (raw, json)
Hash identifier:          z4d3q0QKufhxvjELHqZxKFdoz2+4/9db0Wcoj99vF38=
Subject key identifier:   F6:69:A6:7D:DE:B5:47:95:4D:54:CA:6F:57:71:61:01:59:A1:D0:F9
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       196A5526E4C86C2DE946C09107C28E4E1A875EBF
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e36312e302f32342d3234203d3e203131393231.roa
Signing time:             Wed 13 Mar 2024 22:43:35 +0000
ROA not before:           Wed 13 Mar 2024 22:38:35 +0000
ROA not after:            Wed 12 Mar 2025 22:43:35 +0000
asID:                     11921
IP address blocks:        201.49.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6a:55:26:e4:c8:6c:2d:e9:46:c0:91:07:c2:8e:4e:1a:87:5e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 13 22:38:35 2024 GMT
            Not After : Mar 12 22:43:35 2025 GMT
        Subject: CN=F669A67DDEB547954D54CA6F5771610159A1D0F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3c:39:97:bd:f4:ec:68:51:eb:a9:0a:d6:7b:
                    e2:5c:f3:c0:3b:bb:c9:94:80:61:4c:b2:99:35:62:
                    d8:cf:d0:4f:41:c4:a1:73:fe:3e:ed:d7:16:07:ef:
                    61:b7:51:cf:d6:44:7f:ef:fa:ea:54:46:a6:0b:0b:
                    4a:d1:f6:21:e2:37:cc:a9:ba:bb:e0:ad:39:b9:30:
                    6b:8d:47:92:c4:4e:91:94:c4:a1:58:93:ec:1b:79:
                    0a:3f:9e:0e:ea:72:c1:2b:f3:f9:09:74:31:2b:08:
                    64:bf:f4:45:ea:b6:2d:b4:2a:33:ef:fb:ac:af:88:
                    ef:8a:14:ac:d5:4c:08:25:02:c5:8d:46:13:99:f1:
                    62:79:9d:35:68:bb:ba:e5:87:da:2a:b4:9f:94:72:
                    eb:ab:52:21:1e:d6:6d:16:45:a7:77:8e:a7:8a:04:
                    d8:1a:27:21:f5:40:22:d7:7c:15:1b:e9:49:3f:4e:
                    33:8a:c5:06:1d:4a:81:0b:19:9e:45:c2:32:9f:26:
                    a1:73:09:47:73:c6:82:16:4f:49:8c:a5:31:0a:70:
                    7c:40:1d:c6:82:ee:94:b7:ba:c7:fe:3b:6d:1b:b8:
                    d9:8b:d7:f0:0e:e0:69:6c:36:27:98:0f:45:82:ef:
                    ba:23:31:90:e9:b5:1b:7b:da:7c:a8:12:13:1f:b9:
                    2e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:69:A6:7D:DE:B5:47:95:4D:54:CA:6F:57:71:61:01:59:A1:D0:F9
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e36312e302f32342d3234203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:36:d6:69:58:c3:c1:ca:bc:66:04:2f:53:79:e5:c7:2b:59:
         cb:bb:88:5d:59:1e:e7:4b:fc:00:40:04:7a:ac:9c:c1:ef:2e:
         ca:80:41:cb:6e:cb:59:cc:1f:a1:a0:5d:a3:b4:14:1d:35:d1:
         7d:de:5f:2e:df:74:2a:f9:5d:41:e7:ca:7a:b7:07:a3:61:29:
         e3:2e:22:87:7d:c8:e2:10:78:cd:88:78:85:3d:ff:3b:5c:7c:
         6b:4a:39:a7:e3:c1:f4:59:1c:cd:23:2b:3a:a8:e0:b2:87:21:
         73:a9:96:95:63:db:eb:2a:47:ec:76:62:2e:0c:44:4e:e4:c6:
         fa:db:b1:4c:25:89:79:0a:da:c6:aa:ff:69:2c:a1:06:6e:f3:
         9d:e8:ab:61:40:0f:47:63:87:ea:19:6e:b6:a6:cf:fe:59:e5:
         71:db:db:01:95:b8:6e:ba:c7:92:e9:88:87:ac:a8:7e:60:0d:
         e7:f6:5f:04:48:2f:ad:cd:22:ca:2a:14:11:f4:77:20:4f:69:
         f6:ad:d7:0b:87:7f:c8:bd:19:65:28:cf:6a:17:90:a8:bb:03:
         76:ac:49:76:85:11:a5:ec:1a:80:be:ac:43:52:04:90:9b:3e:
         97:d9:fc:bf:fc:7a:43:5d:d9:35:4d:aa:59:8b:47:da:c4:a3:
         d2:e9:6f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org