Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3235312e302f32342d3234203d3e20323034373635.roa
File:                     3230302e3233392e3235312e302f32342d3234203d3e20323034373635.roa (raw, json)
Hash identifier:          RzLrBf4cLKXBzFtvCSyofrevGrOh7de5EDOzd4u4jks=
Subject key identifier:   5B:0C:74:5E:A9:7C:A3:D2:07:34:9D:4A:79:B8:2B:97:C1:CD:D9:47
Certificate issuer:       /CN=7C7B3D9A8D3A3922FBED85994B667059051BF40C
Certificate serial:       633EE896F50565D9A8C13B5183265AE72F0FA656
Authority key identifier: 7C:7B:3D:9A:8D:3A:39:22:FB:ED:85:99:4B:66:70:59:05:1B:F4:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C7B3D9A8D3A3922FBED85994B667059051BF40C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3235312e302f32342d3234203d3e20323034373635.roa
Signing time:             Sun 18 Jun 2023 01:58:57 +0000
ROA not before:           Sun 18 Jun 2023 01:53:57 +0000
ROA not after:            Sun 16 Jun 2024 01:58:57 +0000
asID:                     204765
IP address blocks:        200.239.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3e:e8:96:f5:05:65:d9:a8:c1:3b:51:83:26:5a:e7:2f:0f:a6:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C7B3D9A8D3A3922FBED85994B667059051BF40C
        Validity
            Not Before: Jun 18 01:53:57 2023 GMT
            Not After : Jun 16 01:58:57 2024 GMT
        Subject: CN=5B0C745EA97CA3D207349D4A79B82B97C1CDD947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9c:6c:98:15:bb:64:dc:40:7c:35:6a:54:b3:
                    7e:cc:60:05:41:a3:d6:58:ae:4d:57:1c:55:45:6e:
                    97:05:8b:6d:01:76:35:55:92:93:20:c0:63:95:87:
                    97:53:81:39:b9:20:5d:58:e3:7e:6b:ab:7a:8f:60:
                    a0:db:14:48:94:97:1b:5f:f8:44:41:4f:b3:c1:31:
                    71:78:3a:0e:12:68:78:10:b3:81:1b:ec:ab:22:10:
                    6a:12:63:c9:43:16:fc:e8:b9:ac:62:31:93:36:ea:
                    23:fb:60:30:14:10:09:b3:eb:ae:01:4d:61:57:bc:
                    c1:62:6e:c4:72:62:1b:a1:a7:cd:b0:8f:c6:2e:48:
                    69:00:9d:d4:6e:8b:2a:c2:4f:48:f2:6a:36:fc:aa:
                    cb:9a:58:90:e2:b7:98:d9:85:b2:5d:e5:47:1a:ad:
                    fa:1c:ea:60:ed:7f:84:fd:b7:a1:58:b9:dd:d8:70:
                    80:67:fa:36:80:61:69:86:0e:41:bf:79:4f:b9:a1:
                    ab:53:28:5a:8a:e2:41:7e:98:dd:3b:9a:84:57:c8:
                    5c:ad:b1:d5:59:7b:8c:31:b9:39:1d:b4:ca:9f:32:
                    3f:90:d9:27:d1:08:08:24:4c:dc:24:9c:9c:20:9b:
                    5f:8c:7b:6b:d3:38:cd:2b:f1:7d:70:27:16:2d:c0:
                    13:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0C:74:5E:A9:7C:A3:D2:07:34:9D:4A:79:B8:2B:97:C1:CD:D9:47
            X509v3 Authority Key Identifier:
                keyid:7C:7B:3D:9A:8D:3A:39:22:FB:ED:85:99:4B:66:70:59:05:1B:F4:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/7C7B3D9A8D3A3922FBED85994B667059051BF40C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C7B3D9A8D3A3922FBED85994B667059051BF40C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVrM4TdEFgakWEjDsa6sjBmFgzjXNayfKRwJPEvcUqiW/0/3230302e3233392e3235312e302f32342d3234203d3e20323034373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.239.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:35:2e:a2:d5:73:48:14:ef:36:35:3b:ef:4a:fb:68:26:24:
         4a:da:c6:3f:d7:88:30:f2:c1:98:6b:3e:a0:7d:90:d0:de:10:
         ce:94:26:95:61:18:21:65:70:50:c8:9e:f5:31:20:ed:7d:bb:
         14:90:9b:0d:28:f9:22:84:0b:f4:bd:a6:0e:ff:be:42:77:1f:
         4b:6b:6b:10:70:e3:dc:94:10:cb:18:21:fe:bd:fb:69:1c:42:
         e4:0a:18:77:3b:a4:5a:6a:28:04:d3:40:67:9d:1c:43:32:08:
         ed:97:19:66:44:38:1b:41:95:01:a6:e5:c0:7a:69:a7:68:59:
         95:d6:c1:95:ce:b3:11:26:a7:22:54:f1:54:dc:c8:1e:5a:1e:
         45:98:d8:23:0a:2e:9e:ea:a9:5d:32:b0:92:bf:db:e1:ce:e1:
         84:91:88:0a:f7:2e:98:38:a2:6a:7e:79:2a:56:92:82:bd:47:
         59:d7:45:33:7a:5a:2a:3b:a2:14:1c:a0:32:bd:62:83:d9:60:
         89:61:e0:46:3a:8d:a0:ac:3e:3b:97:6e:06:b1:fa:f4:e8:ad:
         fd:41:4e:c8:09:b5:19:9c:fb:a0:e8:25:12:d4:8a:99:76:3d:
         83:9a:60:fd:82:8d:cd:9e:36:ec:80:24:4e:20:61:7d:32:fb:
         09:75:c2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:33:33 2025 by rpki-client