Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233342e3136302e302f32322d3234203d3e20323038343835.roa
File:                     3230302e3233342e3136302e302f32322d3234203d3e20323038343835.roa (raw, json)
Hash identifier:          n0UZ+O5I81otEkZ03l29MPsfVHe9UUiDD47zoPqv/vI=
Subject key identifier:   8D:81:63:AD:CF:EA:D8:61:0B:11:5A:B4:6B:49:2D:F7:1F:6E:0A:6D
Certificate issuer:       /CN=1720755120F374DB228287517D63248064A9C7BF
Certificate serial:       467759B2E4BE4CAC6FEBF75758E8AF6F08F6F228
Authority key identifier: 17:20:75:51:20:F3:74:DB:22:82:87:51:7D:63:24:80:64:A9:C7:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1720755120F374DB228287517D63248064A9C7BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233342e3136302e302f32322d3234203d3e20323038343835.roa
Signing time:             Tue 25 Jan 2022 11:10:18 +0000
ROA not before:           Tue 25 Jan 2022 11:05:18 +0000
ROA not after:            Wed 25 Jan 2023 11:10:18 +0000
asID:                     208485
IP address blocks:        200.234.160.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:77:59:b2:e4:be:4c:ac:6f:eb:f7:57:58:e8:af:6f:08:f6:f2:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1720755120F374DB228287517D63248064A9C7BF
        Validity
            Not Before: Jan 25 11:05:18 2022 GMT
            Not After : Jan 25 11:10:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:26:f2:c4:56:24:8c:fe:2f:9e:83:e3:d7:
                    cf:d4:51:9f:df:5e:be:6e:04:2c:cd:0b:b0:f6:df:
                    1d:de:ea:1d:4c:ca:bf:69:5d:77:80:cc:d7:cd:9a:
                    ce:a5:6a:19:13:cf:f0:68:1f:77:36:fd:bf:2c:0f:
                    51:23:29:0a:30:ed:16:dd:6c:8b:55:4d:7c:e0:0b:
                    10:f4:41:ad:a5:5d:1f:08:01:77:9d:50:79:5a:84:
                    df:e5:a6:31:fe:52:d9:f6:89:eb:ee:08:a7:ea:0e:
                    e2:4c:f1:13:7a:bb:2e:f2:20:8c:a0:3c:38:03:3a:
                    0d:1c:a5:aa:ad:01:18:9d:32:c6:ac:44:de:93:0b:
                    2e:9d:41:95:fe:80:4b:cc:25:52:e5:ab:b6:fe:62:
                    3d:74:e8:40:71:74:5d:d0:e7:b4:d9:09:6d:9f:2c:
                    19:61:11:36:b1:25:cd:5a:89:39:8f:6f:75:21:66:
                    94:62:ee:fa:a2:ba:c6:64:dc:19:8f:d7:ee:9b:c5:
                    04:dd:a7:19:35:bb:a8:68:a7:ff:15:6c:31:b8:fc:
                    1a:ea:bb:1a:cb:85:82:69:4a:8b:bc:6b:71:21:0b:
                    3b:92:a7:9b:e5:ec:1e:35:e6:05:95:18:10:50:f4:
                    3f:ec:e7:20:8e:68:51:84:f0:45:97:d9:cd:47:4f:
                    28:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:81:63:AD:CF:EA:D8:61:0B:11:5A:B4:6B:49:2D:F7:1F:6E:0A:6D
            X509v3 Authority Key Identifier:
                keyid:17:20:75:51:20:F3:74:DB:22:82:87:51:7D:63:24:80:64:A9:C7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/1720755120F374DB228287517D63248064A9C7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1720755120F374DB228287517D63248064A9C7BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233342e3136302e302f32322d3234203d3e20323038343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.234.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:a7:d1:b0:09:f1:c4:fb:14:da:84:e5:8c:d1:ed:4e:07:d1:
         0d:cd:a9:63:b2:a6:57:46:84:00:39:8f:c0:06:02:a1:8c:a1:
         c6:c1:47:a3:c4:0b:d2:76:4d:8b:8b:b3:84:c9:73:07:f2:3f:
         9a:b8:98:1d:50:f9:9b:a6:1b:b2:99:0c:92:16:ce:e0:09:6b:
         2d:84:38:06:4e:0d:5b:77:02:f5:98:92:44:9a:f9:61:37:c5:
         0f:9e:be:8e:32:93:30:f5:85:36:2a:aa:5e:42:28:39:b5:c7:
         de:c9:ad:ce:f7:3b:90:fd:1d:df:50:d0:30:22:4b:10:60:35:
         cd:4d:c9:4c:d7:b0:82:e2:2d:19:9b:44:46:72:a0:94:aa:88:
         eb:14:de:55:a7:4f:bb:df:28:1d:5a:56:3a:e3:19:fd:58:38:
         65:82:f4:6e:12:b1:24:99:0b:de:87:83:7a:68:de:32:ed:b3:
         de:eb:ff:c0:06:7f:17:f8:ec:ae:ef:4c:80:ca:28:30:47:6b:
         9d:46:3e:ef:4c:e6:97:bc:08:7b:fd:1e:dc:9e:ca:97:48:6e:
         52:fb:1c:a6:de:5e:04:10:5d:0f:ed:b0:ea:9b:35:a5:9e:d0:
         6e:7e:85:a6:c4:81:d3:d0:8e:00:58:e0:05:94:41:6a:b3:b7:
         1d:a4:e0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org