Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HSFbmynGteJigPAqM4UKazxL1SXCZsbyiE8uvoFi3MJo/0/3230312e39342e3135362e302f32322d3332203d3e20323732353533.roa
File:                     3230312e39342e3135362e302f32322d3332203d3e20323732353533.roa (raw, json)
Hash identifier:          2oMCpjU+NdKzIqGe6YEB48+2p9WbUBPtAKguhQSXEbk=
Subject key identifier:   52:F9:21:5D:C2:44:88:C2:88:A2:BC:B7:56:E7:A8:DA:74:9B:81:51
Certificate issuer:       /CN=7D7462A0B6A957E4935699E7516925E51759E807
Certificate serial:       1AE15789174F8ED07CE2C822A1BC0D255E5C1921
Authority key identifier: 7D:74:62:A0:B6:A9:57:E4:93:56:99:E7:51:69:25:E5:17:59:E8:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D7462A0B6A957E4935699E7516925E51759E807.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HSFbmynGteJigPAqM4UKazxL1SXCZsbyiE8uvoFi3MJo/0/3230312e39342e3135362e302f32322d3332203d3e20323732353533.roa
Signing time:             Thu 16 Mar 2023 16:29:19 +0000
ROA not before:           Thu 16 Mar 2023 16:24:19 +0000
ROA not after:            Thu 14 Mar 2024 16:29:19 +0000
asID:                     272553
IP address blocks:        201.94.156.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e1:57:89:17:4f:8e:d0:7c:e2:c8:22:a1:bc:0d:25:5e:5c:19:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D7462A0B6A957E4935699E7516925E51759E807
        Validity
            Not Before: Mar 16 16:24:19 2023 GMT
            Not After : Mar 14 16:29:19 2024 GMT
        Subject: CN=52F9215DC24488C288A2BCB756E7A8DA749B8151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:47:07:34:9c:6b:1c:4a:e2:69:80:7a:a7:27:
                    9e:00:f2:d0:c9:7f:fe:3b:a1:21:cf:0b:4a:44:2c:
                    25:e6:26:21:cb:95:2c:62:4c:5f:b9:ee:d2:64:33:
                    16:82:6e:b8:5c:00:27:4c:8d:e6:aa:a1:51:65:99:
                    d9:35:c9:a1:1e:50:8c:fb:0a:8c:cb:d8:4c:25:c9:
                    00:19:dd:fe:58:c5:68:d8:77:28:91:6d:e5:1c:f4:
                    6e:f9:56:1d:84:f4:69:ab:ad:d1:31:aa:99:8f:dd:
                    41:b3:a8:38:65:e2:ed:20:88:60:67:01:f7:ae:85:
                    c2:30:cd:16:95:78:b4:33:6e:f9:f8:25:78:01:83:
                    4c:65:53:cd:cb:dd:b4:b6:3a:bf:66:4c:9d:01:23:
                    84:39:fb:bd:eb:3c:58:02:c8:7f:d9:3e:4e:24:4b:
                    b8:8e:43:86:8a:97:ce:ef:29:35:1a:8d:a0:54:cd:
                    c5:0d:07:0f:dc:ce:96:1a:a6:1d:82:77:9c:f7:e1:
                    c8:75:70:4a:9c:3a:0d:a6:89:31:76:ee:47:b8:95:
                    b2:d6:fa:7e:29:f1:68:e6:6d:a3:0b:f3:df:71:4c:
                    01:67:dd:63:b3:60:35:6b:01:90:ae:93:dd:0f:0f:
                    ca:aa:a9:94:e5:06:b2:28:59:fd:cc:22:5e:f2:97:
                    70:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F9:21:5D:C2:44:88:C2:88:A2:BC:B7:56:E7:A8:DA:74:9B:81:51
            X509v3 Authority Key Identifier:
                keyid:7D:74:62:A0:B6:A9:57:E4:93:56:99:E7:51:69:25:E5:17:59:E8:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HSFbmynGteJigPAqM4UKazxL1SXCZsbyiE8uvoFi3MJo/0/7D7462A0B6A957E4935699E7516925E51759E807.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D7462A0B6A957E4935699E7516925E51759E807.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HSFbmynGteJigPAqM4UKazxL1SXCZsbyiE8uvoFi3MJo/0/3230312e39342e3135362e302f32322d3332203d3e20323732353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:0c:62:f0:9e:4f:25:9c:c1:5c:2f:c1:4c:66:f7:09:59:92:
         c8:46:8d:0f:31:16:97:c6:03:52:fd:9f:f3:84:17:ec:9c:99:
         87:6b:87:97:f8:a9:14:af:c9:5c:38:62:73:3e:e0:e7:56:40:
         a4:a9:87:f5:99:07:22:c6:6e:62:ca:58:11:be:8e:45:54:17:
         d1:04:4f:12:06:6a:9d:e3:0b:1b:77:6e:0b:22:57:95:97:71:
         c1:80:83:9a:bc:7f:53:8f:4b:bf:a8:4d:de:92:67:cc:61:13:
         0c:51:8b:d5:04:f7:9a:4e:57:40:d1:ac:63:b2:3a:fb:33:9d:
         40:02:7a:dd:dd:a7:45:43:18:9f:5c:6e:dc:60:f8:07:c2:19:
         d9:cd:5a:5c:ea:2f:3c:e2:d4:37:05:97:d9:c4:b2:05:2b:66:
         68:f3:14:ff:f7:f4:4d:5b:4b:59:24:b1:53:d0:73:12:85:74:
         4a:5f:2f:65:f6:43:fb:20:13:67:2b:4c:5b:ac:23:f6:45:e3:
         ea:97:d2:7e:c2:6e:8a:e2:54:c7:01:6e:e1:64:ff:17:fa:41:
         dd:d0:f8:ef:79:3d:0f:fe:fa:62:54:70:49:b4:fa:da:37:5e:
         82:b4:cf:91:9e:fd:83:88:e9:e0:0d:03:db:5d:ba:23:27:e5:
         d3:7b:af:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:10:44 2025 by rpki-client