Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3230302e392e3133322e302f32322d3233203d3e20323632373332.roa
File:                     3230302e392e3133322e302f32322d3233203d3e20323632373332.roa (raw, json)
Hash identifier:          604l32W4Z/dHw9BXUMb5jX8ZJVsutxPJf9qEuLdRPpw=
Subject key identifier:   DD:43:92:0D:C1:2D:84:5F:79:3D:37:E6:9F:FB:A3:E8:01:60:62:33
Certificate issuer:       /CN=17D60A5B46F41C041875CF9901F3C628C731ECF5
Certificate serial:       6D461493A6831D3F08052E91A717AF5DA164E946
Authority key identifier: 17:D6:0A:5B:46:F4:1C:04:18:75:CF:99:01:F3:C6:28:C7:31:EC:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3230302e392e3133322e302f32322d3233203d3e20323632373332.roa
Signing time:             Fri 02 Sep 2022 03:14:30 +0000
ROA not before:           Fri 02 Sep 2022 03:09:30 +0000
ROA not after:            Fri 01 Sep 2023 03:14:30 +0000
asID:                     262732
IP address blocks:        200.9.132.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:46:14:93:a6:83:1d:3f:08:05:2e:91:a7:17:af:5d:a1:64:e9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D60A5B46F41C041875CF9901F3C628C731ECF5
        Validity
            Not Before: Sep  2 03:09:30 2022 GMT
            Not After : Sep  1 03:14:30 2023 GMT
        Subject: CN=DD43920DC12D845F793D37E69FFBA3E801606233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:31:12:6d:2e:fa:26:30:1e:b9:45:4c:40:
                    fa:bb:3a:ff:e8:a1:78:3b:84:55:8a:2a:02:0a:cd:
                    bd:0b:cd:4d:09:c4:4b:5c:33:31:b1:80:97:c8:c4:
                    48:14:3d:27:16:13:04:02:e4:01:45:d0:07:df:c4:
                    02:6a:79:74:68:e6:c7:e6:31:3c:52:8e:da:27:e1:
                    c7:6c:a2:64:7e:13:81:84:ee:0a:6d:29:3d:f6:73:
                    9e:fc:07:2f:ca:01:c3:fd:58:58:43:5a:4e:1f:9a:
                    b6:54:70:80:dc:7a:3b:c3:da:6d:38:95:bc:de:b2:
                    20:af:ac:a4:e6:73:ca:b1:85:17:35:3f:41:4c:b2:
                    d3:8d:ea:b8:0a:c0:8f:a2:b3:6b:99:2f:8e:57:c9:
                    04:ef:c1:1f:f8:b6:4f:f9:3f:1a:74:ca:ef:80:76:
                    71:d1:01:c9:55:10:b9:46:97:c0:cd:43:d9:03:a5:
                    f1:b5:f3:44:1b:3c:92:5f:bf:ca:93:91:7e:08:dd:
                    bf:a9:f7:9a:18:77:49:47:18:9c:57:aa:35:a6:0e:
                    8d:ea:e5:91:3b:04:18:15:52:9f:c9:c1:44:06:70:
                    dc:d9:c3:90:64:d2:b6:fc:d1:cf:2a:e5:27:cd:e5:
                    24:5d:c9:a0:c3:ae:e6:c9:73:27:f7:1a:9a:14:cb:
                    22:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:43:92:0D:C1:2D:84:5F:79:3D:37:E6:9F:FB:A3:E8:01:60:62:33
            X509v3 Authority Key Identifier:
                keyid:17:D6:0A:5B:46:F4:1C:04:18:75:CF:99:01:F3:C6:28:C7:31:EC:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3230302e392e3133322e302f32322d3233203d3e20323632373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:64:2e:e5:80:37:8d:37:e5:ce:cc:49:be:1b:f1:b4:72:49:
         b3:c0:8e:4e:fe:ee:49:08:5b:77:5b:fa:54:2e:87:4f:14:c0:
         84:9b:48:54:64:1e:80:1d:22:17:98:0b:0b:4d:95:ad:f8:8a:
         7d:4a:b8:4b:d2:69:5e:71:3b:a9:08:8f:10:b9:07:19:c9:a7:
         31:a1:a3:81:97:6a:b1:33:91:f5:5f:52:e4:61:22:f0:37:fb:
         67:aa:75:39:fd:b6:ec:04:dd:3f:68:70:35:c2:58:6e:91:6b:
         b2:df:6f:2b:ae:ff:a4:71:ba:8f:f1:be:64:8b:c2:3f:a1:eb:
         ef:c9:19:3a:75:22:a1:b9:8d:0e:94:33:84:f1:21:19:b1:73:
         54:1a:27:76:8e:85:f6:1e:77:c7:37:76:fc:8e:91:f4:c7:c7:
         93:3b:3b:9c:7a:58:f8:dc:82:e0:6a:8a:a0:11:12:84:ba:66:
         44:8f:b2:9d:71:fe:94:da:31:06:cf:7d:d5:fb:ad:3a:ec:ec:
         02:17:42:77:28:8c:e4:a5:93:5c:d1:c3:2d:7f:f0:e7:fa:8a:
         ab:a8:e6:78:a7:b3:89:1b:d7:34:ff:eb:b4:8a:f4:cd:bc:da:
         22:26:fd:25:39:5e:0d:1b:1c:d3:79:26:a8:5b:56:d2:c1:fa:
         e4:76:df:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org