Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/3230302e3231392e33362e302f32322d3234203d3e20323730383030.roa
File:                     3230302e3231392e33362e302f32322d3234203d3e20323730383030.roa (raw, json)
Hash identifier:          rM2vDXVOigMNhejpxglsJAluLn5Ns1NOgWp2g+v9Oww=
Subject key identifier:   98:12:26:1D:A1:83:64:C3:B6:FB:38:57:6B:0A:2F:AA:50:A6:E2:A8
Certificate issuer:       /CN=17AB1AB3397F9DB436D7F8A775263AEE104BA10A
Certificate serial:       722306D8A0608C30C0F95385E0F02070499C66EB
Authority key identifier: 17:AB:1A:B3:39:7F:9D:B4:36:D7:F8:A7:75:26:3A:EE:10:4B:A1:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17AB1AB3397F9DB436D7F8A775263AEE104BA10A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/3230302e3231392e33362e302f32322d3234203d3e20323730383030.roa
Signing time:             Thu 07 Sep 2023 16:25:33 +0000
ROA not before:           Thu 07 Sep 2023 16:20:33 +0000
ROA not after:            Thu 05 Sep 2024 16:25:33 +0000
asID:                     270800
IP address blocks:        200.219.36.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:23:06:d8:a0:60:8c:30:c0:f9:53:85:e0:f0:20:70:49:9c:66:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17AB1AB3397F9DB436D7F8A775263AEE104BA10A
        Validity
            Not Before: Sep  7 16:20:33 2023 GMT
            Not After : Sep  5 16:25:33 2024 GMT
        Subject: CN=9812261DA18364C3B6FB38576B0A2FAA50A6E2A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:19:7b:c2:91:ab:9e:1b:c3:94:f3:ec:e3:
                    5f:cb:b5:f4:a5:95:53:fe:2e:53:24:9b:cd:e2:27:
                    96:5f:a0:6a:c6:db:b8:3e:01:1b:02:71:b1:32:1c:
                    7b:35:8a:32:a8:bf:1b:fa:5f:34:b6:14:f8:27:3a:
                    80:8f:eb:91:71:37:5a:36:82:93:3e:15:8b:4e:53:
                    2e:49:5d:c8:c7:53:fb:4f:40:0d:1a:4c:eb:a3:31:
                    fb:e7:ab:f1:e9:61:08:6a:7e:af:7d:60:ff:7d:bd:
                    55:62:32:1c:2d:64:26:5f:b9:44:d9:31:4c:d3:ae:
                    4e:c0:70:2b:f6:3e:9b:6e:78:ce:08:b8:fe:d7:aa:
                    26:0b:f6:95:ff:23:01:a5:02:b9:3a:6f:0d:09:3c:
                    5a:35:72:3f:40:4a:e7:88:19:8a:17:7b:ae:84:6a:
                    c1:2f:3e:5e:44:b0:36:2c:04:97:fd:03:ed:59:ab:
                    66:08:53:d3:cb:95:6f:6a:fa:1d:6e:c0:28:27:2a:
                    b0:5e:49:6c:b6:d4:0f:46:13:68:15:4a:64:7c:2e:
                    fa:10:3f:3e:12:ca:f7:8a:10:83:26:54:51:9b:cc:
                    fd:d5:f5:7e:1f:55:c3:76:96:1b:7b:cd:b5:26:bf:
                    99:04:46:d0:d1:ba:65:84:da:3b:e0:ac:05:2e:23:
                    23:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:12:26:1D:A1:83:64:C3:B6:FB:38:57:6B:0A:2F:AA:50:A6:E2:A8
            X509v3 Authority Key Identifier:
                keyid:17:AB:1A:B3:39:7F:9D:B4:36:D7:F8:A7:75:26:3A:EE:10:4B:A1:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/17AB1AB3397F9DB436D7F8A775263AEE104BA10A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17AB1AB3397F9DB436D7F8A775263AEE104BA10A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/3230302e3231392e33362e302f32322d3234203d3e20323730383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:25:8c:19:85:4d:66:cf:8b:56:c5:b2:0d:2c:18:e0:66:22:
         68:b0:37:1a:bb:1d:33:1d:dd:80:71:de:ab:17:79:44:e8:a4:
         b1:c2:43:40:62:a5:d7:8c:e4:7f:8d:60:b5:5d:e1:d2:c5:2a:
         10:b9:0a:28:ec:f4:1f:ae:da:b7:7b:30:0c:10:05:2a:67:51:
         6b:29:77:47:09:30:e3:da:55:a7:37:25:7f:0f:bb:db:be:03:
         dc:cd:ab:7e:2e:72:f2:4b:fb:0c:a9:97:54:e0:a6:2f:f8:e6:
         2b:aa:ea:8f:e1:a0:9a:85:93:18:80:3e:2d:01:3e:51:6c:36:
         8a:e6:72:ba:7b:fe:ff:ec:b8:0d:f0:49:59:14:55:d7:09:f7:
         4e:68:be:11:c5:18:a4:6d:17:14:bc:2e:99:4f:a8:98:3a:c1:
         2c:f1:f4:7a:06:d2:21:c0:b3:52:7c:6d:d0:18:77:78:16:a5:
         34:e8:6d:1f:3e:5a:2b:e9:eb:55:4a:21:e1:a8:0b:d7:f7:c9:
         d0:b9:c6:91:da:23:f7:de:e3:fd:b6:f8:5e:9c:48:1b:c9:fb:
         14:41:cb:b7:d1:bc:fb:68:0b:fb:8d:6d:bd:5e:56:09:fb:f7:
         c5:3f:8c:48:bd:3b:31:74:85:4f:15:8e:c3:ce:d5:5b:e4:e8:
         85:bd:ad:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org