Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e382e302f32332d3233203d3e203131393231.roa
File:                     3230312e34392e382e302f32332d3233203d3e203131393231.roa (raw, json)
Hash identifier:          w+bKVLiIk+bIW6Lvs30DxdYt9GTAwiDva0hj17CX9g8=
Subject key identifier:   E5:15:A4:6E:97:E1:08:EB:9C:3E:B0:32:FE:5E:0A:65:21:43:C4:13
Certificate issuer:       /CN=9730624448067D83E834AFD11E9657DD8E199199
Certificate serial:       78E8B289DF60796964C6C726476DF1E29B08C5EC
Authority key identifier: 97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e382e302f32332d3233203d3e203131393231.roa
Signing time:             Thu 28 Mar 2024 18:42:00 +0000
ROA not before:           Thu 28 Mar 2024 18:37:00 +0000
ROA not after:            Thu 27 Mar 2025 18:42:00 +0000
asID:                     11921
IP address blocks:        201.49.8.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:e8:b2:89:df:60:79:69:64:c6:c7:26:47:6d:f1:e2:9b:08:c5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9730624448067D83E834AFD11E9657DD8E199199
        Validity
            Not Before: Mar 28 18:37:00 2024 GMT
            Not After : Mar 27 18:42:00 2025 GMT
        Subject: CN=E515A46E97E108EB9C3EB032FE5E0A652143C413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:63:6d:34:bc:ef:07:cd:6e:65:8d:15:2e:b2:
                    36:35:50:3f:a5:28:11:ca:cb:8c:69:cd:08:36:e4:
                    fa:94:85:d7:b9:4d:13:c9:5f:67:e4:ff:4b:c9:6f:
                    73:6b:db:83:23:cc:b5:bc:de:a7:e0:e3:f2:f9:35:
                    75:d4:d6:6d:1a:8e:61:3e:39:c5:4e:aa:0a:a6:ce:
                    e2:42:32:59:18:ac:11:0d:4c:7f:86:08:df:a2:cf:
                    64:7a:87:d1:03:99:67:c5:fc:87:e8:1f:3c:85:dc:
                    ec:32:c7:f0:ac:ed:f8:5b:b2:22:7c:1d:e0:ff:84:
                    c5:15:93:e2:bb:fb:54:2e:8a:89:8a:e9:77:a0:30:
                    55:61:7a:11:c3:78:0b:6f:e0:12:fe:e1:52:79:0e:
                    56:56:b5:65:3a:14:eb:9c:74:1a:13:2f:df:ab:9f:
                    96:07:3a:69:b8:c3:a3:fd:8d:60:76:15:32:b7:16:
                    cd:0d:39:60:12:65:aa:02:3e:56:d8:b1:7d:57:a7:
                    88:87:6b:a1:39:e7:d1:bc:50:7d:2a:10:88:d8:9b:
                    cf:ab:eb:81:fd:c2:76:4d:83:cd:f1:89:7f:9f:0d:
                    89:af:8f:09:92:f2:eb:6c:72:ed:d1:c4:7f:e7:b1:
                    a1:95:f2:ae:37:49:42:6f:e6:85:0e:6b:b2:1b:30:
                    68:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:15:A4:6E:97:E1:08:EB:9C:3E:B0:32:FE:5E:0A:65:21:43:C4:13
            X509v3 Authority Key Identifier:
                keyid:97:30:62:44:48:06:7D:83:E8:34:AF:D1:1E:96:57:DD:8E:19:91:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/9730624448067D83E834AFD11E9657DD8E199199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9730624448067D83E834AFD11E9657DD8E199199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HaPqNfuG7XFC1UakJCfuNP9pit6zCww8pUCZnmq1j6qh/0/3230312e34392e382e302f32332d3233203d3e203131393231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:75:66:1e:4b:9e:5a:9e:72:ea:4f:f6:95:5a:14:28:54:0c:
         de:55:34:8f:f2:3d:1a:bc:55:72:b1:da:97:8a:41:c8:fc:d8:
         f8:6d:39:4a:7f:ea:95:1b:53:19:77:fd:89:03:df:84:a2:f2:
         44:e9:ff:cf:2c:03:79:4b:32:a2:97:7e:36:67:6f:af:bd:9b:
         f0:ae:8b:2e:7e:12:24:21:8a:da:dc:02:41:fa:50:4c:c4:85:
         e5:ea:84:0c:de:79:2e:5a:e9:5f:08:6d:70:b8:aa:9c:de:d5:
         e9:c8:0d:62:81:ba:ee:ee:5c:ee:b2:a7:49:ce:7f:f4:78:ca:
         38:d8:9e:8e:a9:8d:5b:2c:44:fe:3b:30:ee:1c:be:ae:58:30:
         fe:d7:08:fb:4b:60:8f:88:6b:87:5d:a8:2c:ac:91:58:aa:c5:
         cf:4b:8b:2f:7d:7d:41:e3:47:0c:37:da:fb:3c:36:27:71:db:
         9d:3c:21:ae:88:68:88:d5:4e:ac:9a:d0:df:a4:ee:6d:95:48:
         0c:42:cd:e5:98:e7:eb:1a:b5:6c:ae:f1:cf:df:5d:ef:08:2a:
         92:e2:50:50:e6:5a:ae:87:94:33:03:e2:20:1d:93:37:b8:ae:
         2b:4d:a3:0c:b2:3a:13:20:9d:66:6f:24:6b:52:27:39:36:7c:
         32:88:86:87
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUeOiyid9geWlkxscmR23x4psIxewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTczMDYyNDQ0ODA2N0Q4M0U4MzRBRkQxMUU5NjU3REQ4
RTE5OTE5OTAeFw0yNDAzMjgxODM3MDBaFw0yNTAzMjcxODQyMDBaMDMxMTAvBgNV
BAMTKEU1MTVBNDZFOTdFMTA4RUI5QzNFQjAzMkZFNUUwQTY1MjE0M0M0MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvY200vO8HzW5ljRUusjY1UD+l
KBHKy4xpzQg25PqUhde5TRPJX2fk/0vJb3Nr24MjzLW83qfg4/L5NXXU1m0ajmE+
OcVOqgqmzuJCMlkYrBENTH+GCN+iz2R6h9EDmWfF/IfoHzyF3Owyx/Cs7fhbsiJ8
HeD/hMUVk+K7+1QuiomK6XegMFVhehHDeAtv4BL+4VJ5DlZWtWU6FOucdBoTL9+r
n5YHOmm4w6P9jWB2FTK3Fs0NOWASZaoCPlbYsX1Xp4iHa6E559G8UH0qEIjYm8+r
64H9wnZNg83xiX+fDYmvjwmS8utscu3RxH/nsaGV8q43SUJv5oUOa7IbMGgjAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU5RWkbpfhCOucPrAy/l4KZSFDxBMwHwYDVR0j
BBgwFoAUlzBiREgGfYPoNK/RHpZX3Y4ZkZkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGFQcU5mdUc3WEZDMVVha0pDZnVOUDlwaXQ2ekN3dzhwVUNabm1xMWo2
cWgvMC85NzMwNjI0NDQ4MDY3RDgzRTgzNEFGRDExRTk2NTdERDhFMTk5MTk5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk3MzA2MjQ0NDgwNjdEODNF
ODM0QUZEMTFFOTY1N0REOEUxOTkxOTkuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hhUHFOZnVHN1hGQzFVYWtKQ2Z1TlA5cGl0NnpDd3c4cFVDWm5tcTFqNnFoLzAv
MzIzMDMxMmUzNDM5MmUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzEzOTMy
MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAHJMQgwDQYJKoZIhvcNAQELBQADggEBAIt1Zh5LnlqecupP
9pVaFChUDN5VNI/yPRq8VXKx2peKQcj82PhtOUp/6pUbUxl3/YkD34Si8kTp/88s
A3lLMqKXfjZnb6+9m/Cuiy5+EiQhitrcAkH6UEzEheXqhAzeeS5a6V8IbXC4qpze
1enIDWKBuu7uXO6yp0nOf/R4yjjYno6pjVssRP47MO4cvq5YMP7XCPtLYI+Ia4dd
qCyskViqxc9Liy99fUHjRww32vs8Nidx2508Ia6IaIjVTqya0N+k7m2VSAxCzeWY
5+satWyu8c/fXe8IKpLiUFDmWq6HlDMD4iAdkze4ritNowyyOhMgnWZvJGtSJzk2
fDKIhoc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org