Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e36322e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e36322e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          /0Yq4QlDK8HIdRL2p3dEJAH+3xANHIXGH5cAF4RzkDM=
Subject key identifier:   D8:36:9E:B7:0B:3F:A2:CB:62:9E:AE:75:0A:51:F3:09:A6:CF:79:84
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       5872E033F356838C3D9026C1A75DDDFC31C95754
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e36322e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:41:59 +0000
ROA not before:           Thu 28 Mar 2024 18:36:59 +0000
ROA not after:            Thu 27 Mar 2025 18:41:59 +0000
asID:                     11921
IP address blocks:        201.49.62.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:72:e0:33:f3:56:83:8c:3d:90:26:c1:a7:5d:dd:fc:31:c9:57:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:36:59 2024 GMT
            Not After : Mar 27 18:41:59 2025 GMT
        Subject: CN=D8369EB70B3FA2CB629EAE750A51F309A6CF7984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:77:65:f2:05:39:61:83:bb:a4:82:83:97:
                    0b:7c:34:24:c6:f4:92:72:14:fa:0d:1a:51:c5:c6:
                    b6:f2:54:ba:b1:e6:b9:1b:79:c3:a2:44:a9:b3:ee:
                    58:8b:0a:37:f0:67:a6:4e:78:5e:90:f9:af:4f:b3:
                    65:4d:c0:99:ef:16:2f:f3:c5:29:8f:80:bb:39:b9:
                    20:54:86:36:d0:f5:98:3d:b7:80:b9:b6:75:08:95:
                    f0:57:ec:be:2a:51:e8:ed:5e:11:4c:7f:4d:50:44:
                    30:52:c1:10:51:1b:2f:8f:90:b0:b1:19:bd:45:33:
                    d3:30:44:1f:c6:8c:d8:fd:73:f1:94:b2:86:c4:ae:
                    f1:02:6b:13:25:42:ab:f7:ab:9f:c6:cd:27:4c:1b:
                    c3:46:2f:a1:b8:ac:d3:66:31:4e:d3:02:fc:22:f6:
                    1f:76:c7:d1:18:c0:24:59:2e:d6:0b:95:32:d9:b3:
                    c6:cb:fe:88:ca:cb:fa:67:5a:03:9b:17:a2:f5:c7:
                    b6:c7:1c:c1:5c:16:da:93:ee:7a:1e:de:fe:af:fb:
                    f1:07:7f:2b:e2:43:dd:fd:d0:19:b6:43:7b:04:54:
                    f3:50:e8:7a:9a:8c:82:1d:fd:04:93:11:31:72:f5:
                    c1:5c:98:ae:aa:a7:d2:b4:91:26:c1:69:a0:e7:22:
                    2f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:36:9E:B7:0B:3F:A2:CB:62:9E:AE:75:0A:51:F3:09:A6:CF:79:84
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e36322e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:69:c6:3b:c4:34:3f:e8:fb:60:28:2a:f7:5c:87:53:b3:6a:
         2e:b6:b6:54:d2:23:5b:aa:d6:57:c3:ea:95:81:ef:42:7c:a8:
         f0:94:ed:53:c2:a9:73:c8:04:d8:f7:8f:c3:de:95:27:ad:2b:
         00:e7:62:cf:4d:70:c7:f8:6b:2c:ad:e4:31:5b:c4:b9:63:70:
         dc:90:75:67:96:60:35:58:83:76:a9:b6:07:cc:4a:e0:c8:f5:
         59:09:b5:54:25:52:9c:41:11:c8:18:e9:f1:96:1f:5c:37:3f:
         21:d6:31:de:a5:34:3d:13:48:1c:fe:90:80:74:fd:92:f0:9e:
         c7:bf:6b:b7:28:ae:13:31:37:71:f1:33:f7:34:53:5a:17:d6:
         ea:c7:d7:bf:72:e5:a6:b3:df:81:d3:cb:c0:44:a9:98:08:b4:
         e3:89:fb:d5:d7:89:dd:1f:3a:1c:cd:60:b7:83:f3:bd:2d:cc:
         29:a1:78:f2:65:ac:d8:9b:c1:26:de:e6:d8:9c:5c:ae:07:b4:
         76:95:f1:f5:47:24:3f:6f:c1:44:f4:d6:fc:0c:1e:a6:89:8a:
         63:32:4f:8e:ba:da:6a:f4:28:47:36:d9:e8:d2:6e:3d:ee:2e:
         b3:2e:a1:00:16:b8:4a:10:7c:f0:dc:08:6e:a0:ce:9b:8d:3f:
         4b:ba:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org