Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/3230302e3231392e33362e302f32332d3233203d3e20323730383030.roa
File:                     3230302e3231392e33362e302f32332d3233203d3e20323730383030.roa (raw, json)
Hash identifier:          LFp943IFF+0if21fFwZ1AiYxDwse67hGUUabgWemCl0=
Subject key identifier:   24:5B:0B:A8:F9:4C:48:23:28:9F:7B:A8:92:29:88:D0:D2:D1:B1:77
Certificate issuer:       /CN=92182892872466E0F9438AFD50C5EC5A6A0803C5
Certificate serial:       31EEDE2891BD24F70F708CDCC22BF6A3480C4D55
Authority key identifier: 92:18:28:92:87:24:66:E0:F9:43:8A:FD:50:C5:EC:5A:6A:08:03:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92182892872466E0F9438AFD50C5EC5A6A0803C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/3230302e3231392e33362e302f32332d3233203d3e20323730383030.roa
Signing time:             Tue 23 May 2023 16:25:33 +0000
ROA not before:           Tue 23 May 2023 16:20:33 +0000
ROA not after:            Tue 21 May 2024 16:25:33 +0000
asID:                     270800
IP address blocks:        200.219.36.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ee:de:28:91:bd:24:f7:0f:70:8c:dc:c2:2b:f6:a3:48:0c:4d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92182892872466E0F9438AFD50C5EC5A6A0803C5
        Validity
            Not Before: May 23 16:20:33 2023 GMT
            Not After : May 21 16:25:33 2024 GMT
        Subject: CN=245B0BA8F94C4823289F7BA8922988D0D2D1B177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:30:68:00:ea:a5:26:d4:9c:9b:46:ca:06:
                    69:13:a0:fe:9d:16:de:94:6e:56:3c:a3:82:41:d9:
                    6c:9b:8a:d0:29:e6:36:b4:b2:9a:31:7d:e0:ed:f3:
                    4a:0c:ad:3f:a2:f2:8e:e1:03:b7:ec:46:75:93:ca:
                    2e:e3:07:9b:e6:5c:bb:b7:28:67:d0:74:11:f0:81:
                    1d:26:bd:c2:3f:4b:f2:68:be:07:7f:95:d5:e6:52:
                    e3:d0:a0:c3:c2:00:fc:3f:4b:90:a6:d9:3c:db:fd:
                    a2:40:11:fa:aa:c0:a6:bb:9d:a0:c2:33:e7:cf:b4:
                    4e:28:a3:99:37:63:c2:37:27:c3:b7:2f:88:15:85:
                    a4:22:2a:50:36:30:90:58:e9:fe:63:0f:01:b0:1e:
                    e5:da:b8:83:0d:af:fc:ea:49:7d:6a:46:a3:4d:54:
                    cb:a1:06:46:57:a4:d5:f1:be:3f:48:e6:09:31:88:
                    53:40:04:10:31:79:5a:e2:d3:b8:d1:ab:26:52:48:
                    ff:56:ac:0f:01:c2:7d:7c:58:6d:ad:e2:7a:13:0d:
                    2e:d9:61:c9:7b:d9:c8:fa:12:af:6b:66:60:82:fb:
                    75:08:57:51:68:de:d0:21:60:6b:a8:4f:a0:d1:9d:
                    6b:d3:83:f2:80:5f:25:62:13:c4:6d:3b:2a:87:8a:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5B:0B:A8:F9:4C:48:23:28:9F:7B:A8:92:29:88:D0:D2:D1:B1:77
            X509v3 Authority Key Identifier:
                keyid:92:18:28:92:87:24:66:E0:F9:43:8A:FD:50:C5:EC:5A:6A:08:03:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/92182892872466E0F9438AFD50C5EC5A6A0803C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92182892872466E0F9438AFD50C5EC5A6A0803C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/3230302e3231392e33362e302f32332d3233203d3e20323730383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:ba:20:58:6f:a5:56:f6:55:4d:d9:ec:d3:67:5d:66:03:c0:
         ee:c2:24:77:d7:8d:dc:f3:a9:71:9e:b6:32:e8:6f:87:a9:a3:
         49:0c:51:af:92:f3:6e:66:5e:fe:41:af:54:7c:2c:01:78:2e:
         d9:c6:ca:96:ef:f1:12:b1:ee:8a:3d:cb:3c:a4:7c:f6:8b:ae:
         5c:82:36:37:33:06:2f:3f:b5:55:92:d4:c8:2d:d3:5d:cc:78:
         fc:38:3b:ea:2b:ae:0a:a1:24:88:9a:8c:70:17:b8:cc:a2:df:
         19:e3:fb:a0:26:29:c5:4f:ce:19:3c:ca:4b:eb:ad:19:64:07:
         c5:79:4c:ec:02:52:90:d2:26:3c:e0:af:4a:51:46:e4:02:e4:
         b1:a9:8e:e8:a3:0b:ef:16:dd:ed:5c:a3:8e:fe:73:a7:cb:e4:
         93:63:75:e0:05:13:67:5a:ce:bc:7a:e0:40:57:57:8c:bb:8e:
         29:00:c5:af:ad:77:3a:34:81:4d:18:d0:2a:92:ca:ca:d5:13:
         3e:e2:ef:7b:3b:b5:34:c7:7a:1f:9e:5c:3f:15:39:c5:b7:4c:
         76:45:93:2e:05:da:b0:09:e3:8e:b0:b7:14:7d:e2:00:6a:55:
         54:e1:ff:d4:a1:d9:09:89:f2:4f:7b:4d:bb:6c:8f:82:21:4e:
         cb:81:aa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:32 2025 by rpki-client