Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233342e3132382e302f32322d3234203d3e20323039333731.roa
File:                     3230302e3233342e3132382e302f32322d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          adDPt5qYL6hRbFxzDNpg4HVHV4NsHIlQo+lkLXTOotc=
Subject key identifier:   B2:33:D2:39:6B:4D:20:0A:45:D7:7B:3A:A5:41:EA:D7:BC:F0:64:51
Certificate issuer:       /CN=1720755120F374DB228287517D63248064A9C7BF
Certificate serial:       5CA98019EF3C40B3864FCDE427B00311D644CC4F
Authority key identifier: 17:20:75:51:20:F3:74:DB:22:82:87:51:7D:63:24:80:64:A9:C7:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1720755120F374DB228287517D63248064A9C7BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233342e3132382e302f32322d3234203d3e20323039333731.roa
Signing time:             Wed 09 Feb 2022 13:21:49 +0000
ROA not before:           Wed 09 Feb 2022 13:16:49 +0000
ROA not after:            Thu 09 Feb 2023 13:21:49 +0000
asID:                     209371
IP address blocks:        200.234.128.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a9:80:19:ef:3c:40:b3:86:4f:cd:e4:27:b0:03:11:d6:44:cc:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1720755120F374DB228287517D63248064A9C7BF
        Validity
            Not Before: Feb  9 13:16:49 2022 GMT
            Not After : Feb  9 13:21:49 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bf:62:49:d1:8c:7e:29:e4:2a:7c:23:67:b9:
                    4d:1c:a4:00:2a:9a:bd:84:50:03:ae:8d:25:f8:0d:
                    47:6f:aa:45:ed:d0:01:db:43:7b:7f:e3:5c:d0:df:
                    b5:ca:63:a4:d6:45:13:cd:9e:06:c2:01:43:64:78:
                    86:66:fb:45:97:e1:00:c2:59:0b:45:59:98:ba:ad:
                    87:69:7a:b1:32:c9:a0:1e:b0:95:a0:f9:ca:29:5f:
                    62:0a:1b:69:5e:87:c2:9d:f4:55:03:3f:71:a8:e6:
                    73:da:83:85:9e:90:a0:0e:d1:2a:71:aa:1d:3c:e9:
                    a1:fe:d4:aa:90:1e:70:54:74:ca:bf:53:96:fc:ba:
                    0c:f3:48:e9:b6:06:7a:5f:d7:ea:5c:b6:0b:17:aa:
                    d1:4b:d4:43:15:b6:32:6d:c3:5e:07:7f:c8:30:30:
                    fc:64:d3:94:38:b5:ac:88:e1:b2:28:31:21:40:e3:
                    b7:17:0f:47:86:d4:02:b5:70:69:e8:6c:78:ed:a3:
                    7b:91:d7:4c:1e:d8:8d:f0:1e:d2:f7:0e:35:b6:00:
                    fe:c4:88:fa:de:ea:90:0f:ac:95:eb:1e:eb:6a:e6:
                    31:5f:9c:78:62:ff:f0:2e:f0:ad:b0:64:90:45:99:
                    b6:fa:17:a5:f9:86:00:ca:a0:77:57:e4:fe:e0:e9:
                    3e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:33:D2:39:6B:4D:20:0A:45:D7:7B:3A:A5:41:EA:D7:BC:F0:64:51
            X509v3 Authority Key Identifier:
                keyid:17:20:75:51:20:F3:74:DB:22:82:87:51:7D:63:24:80:64:A9:C7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/1720755120F374DB228287517D63248064A9C7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1720755120F374DB228287517D63248064A9C7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233342e3132382e302f32322d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.234.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:3b:37:15:34:f1:25:e5:d5:ba:da:0f:03:ea:34:3f:60:f5:
         8a:d8:f3:53:a0:f9:7e:3d:83:cd:55:54:64:35:bf:ff:47:74:
         79:5b:dd:66:63:16:f2:41:40:c7:c2:f7:4c:c4:13:f6:64:26:
         fd:b2:64:c7:f8:f7:0a:2a:95:3b:22:97:58:b6:a1:2b:61:18:
         70:47:f0:2c:5c:0b:1d:43:fb:46:da:c7:97:f1:5b:8a:8b:00:
         3c:bc:4c:53:88:d9:6c:a3:d8:6a:55:eb:37:ed:73:a1:4c:e7:
         19:76:c9:83:10:76:ae:9b:7e:4a:08:0c:e6:57:13:ce:54:1f:
         65:09:54:72:fa:b6:29:36:00:e1:8f:8b:a1:09:48:8c:1f:02:
         f0:4c:6e:ee:48:0f:66:72:77:b0:52:9a:11:51:f9:79:c4:15:
         bb:4a:8f:32:61:2f:78:93:d4:32:8e:1a:80:db:59:d1:07:63:
         db:84:6d:4c:11:f4:02:8e:5b:ad:aa:d3:26:64:15:3a:bc:7d:
         cc:2e:07:f4:71:65:ef:68:e3:e2:a3:20:c3:67:f3:f2:67:0f:
         6b:ff:e1:83:52:29:a3:8b:f8:8b:21:0e:66:15:0c:cf:4f:f2:
         d3:8f:6d:33:b3:a5:bf:6f:a1:1c:d0:09:b4:4d:9e:70:e4:0a:
         9c:7b:2c:32
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUXKmAGe88QLOGT83kJ7ADEdZEzE8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcyMDc1NTEyMEYzNzREQjIyODI4NzUxN0Q2MzI0ODA2
NEE5QzdCRjAeFw0yMjAyMDkxMzE2NDlaFw0yMzAyMDkxMzIxNDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDdCRjYyNDlEMThDN0UyOUU0
MkE3QzIzNjdCOTREMUNBNDAwMkE5QUJEODQ1MDAzQUU4RDI1RjgwRDQ3NkZBQTQ1
RUREMDAxREI0MzdCN0ZFMzVDRDBERkI1Q0E2M0E0RDY0NTEzQ0Q5RTA2QzIwMTQz
NjQ3ODg2NjZGQjQ1OTdFMTAwQzI1OTBCNDU1OTk4QkFBRDg3Njk3QUIxMzJDOUEw
MUVCMDk1QTBGOUNBMjk1RjYyMEExQjY5NUU4N0MyOURGNDU1MDMzRjcxQThFNjcz
REE4Mzg1OUU5MEEwMEVEMTJBNzFBQTFEM0NFOUExRkVENEFBOTAxRTcwNTQ3NENB
QkY1Mzk2RkNCQTBDRjM0OEU5QjYwNjdBNUZEN0VBNUNCNjBCMTdBQUQxNEJENDQz
MTVCNjMyNkRDMzVFMDc3RkM4MzAzMEZDNjREMzk0MzhCNUFDODhFMUIyMjgzMTIx
NDBFM0I3MTcwRjQ3ODZENDAyQjU3MDY5RTg2Qzc4RURBMzdCOTFENzRDMUVEODhE
RjAxRUQyRjcwRTM1QjYwMEZFQzQ4OEZBREVFQTkwMEZBQzk1RUIxRUVCNkFFNjMx
NUY5Qzc4NjJGRkYwMkVGMEFEQjA2NDkwNDU5OUI2RkExN0E1Rjk4NjAwQ0FBMDc3
NTdFNEZFRTBFOTNFRUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA179iSdGMfinkKnwjZ7lNHKQAKpq9hFADro0l+A1Hb6pF7dAB20N7
f+Nc0N+1ymOk1kUTzZ4GwgFDZHiGZvtFl+EAwlkLRVmYuq2HaXqxMsmgHrCVoPnK
KV9iChtpXofCnfRVAz9xqOZz2oOFnpCgDtEqcaodPOmh/tSqkB5wVHTKv1OW/LoM
80jptgZ6X9fqXLYLF6rRS9RDFbYybcNeB3/IMDD8ZNOUOLWsiOGyKDEhQOO3Fw9H
htQCtXBp6Gx47aN7kddMHtiN8B7S9w41tgD+xIj63uqQD6yV6x7rauYxX5x4Yv/w
LvCtsGSQRZm2+hel+YYAyqB3V+T+4Ok+7wIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FLIz0jlrTSAKRdd7OqVB6te88GRRMB8GA1UdIwQYMBaAFBcgdVEg83TbIoKHUX1j
JIBkqce/MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0hWck00VGRFRmdha1dF
akRzYTZzakJtRmd6alhOYXlmS1J3SlBFdmNVcWlXLzAvMTcyMDc1NTEyMEYzNzRE
QjIyODI4NzUxN0Q2MzI0ODA2NEE5QzdCRi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xNzIwNzU1MTIwRjM3NERCMjI4Mjg3NTE3RDYzMjQ4MDY0QTlD
N0JGLmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9IVnJNNFRkRUZnYWtXRWpEc2E2
c2pCbUZnempYTmF5ZktSd0pQRXZjVXFpVy8wLzMyMzAzMDJlMzIzMzM0MmUzMTMy
MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMwMzkzMzM3MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BALI6oAwDQYJKoZIhvcNAQELBQADggEBAHw7NxU08SXl1braDwPqND9g9YrY81Og
+X49g81VVGQ1v/9HdHlb3WZjFvJBQMfC90zEE/ZkJv2yZMf49woqlTsil1i2oSth
GHBH8CxcCx1D+0bax5fxW4qLADy8TFOI2Wyj2GpV6zftc6FM5xl2yYMQdq6bfkoI
DOZXE85UH2UJVHL6tik2AOGPi6EJSIwfAvBMbu5ID2Zyd7BSmhFR+XnEFbtKjzJh
L3iT1DKOGoDbWdEHY9uEbUwR9AKOW62q0yZkFTq8fcwuB/RxZe9o4+KjIMNn8/Jn
D2v/4YNSKaOL+IshDmYVDM9P8tOPbTOzpb9voRzQCbRNnnDkCpx7LDI=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:27 2025 by rpki-client