Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/3230302e3231392e33382e302f32332d3233203d3e20323730383030.roa
File:                     3230302e3231392e33382e302f32332d3233203d3e20323730383030.roa (raw, json)
Hash identifier:          znL9Nm6Aae/14a6mibGYodZ2DEZKVnTEStQZ+PE1gxo=
Subject key identifier:   30:0E:7F:83:79:FD:CC:2E:43:EE:53:93:F6:2D:4C:8E:43:9D:67:37
Certificate issuer:       /CN=92182892872466E0F9438AFD50C5EC5A6A0803C5
Certificate serial:       5392F2EAB3FEB2F8640511ED27F3547A751E0368
Authority key identifier: 92:18:28:92:87:24:66:E0:F9:43:8A:FD:50:C5:EC:5A:6A:08:03:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92182892872466E0F9438AFD50C5EC5A6A0803C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/3230302e3231392e33382e302f32332d3233203d3e20323730383030.roa
Signing time:             Tue 23 May 2023 16:25:32 +0000
ROA not before:           Tue 23 May 2023 16:20:32 +0000
ROA not after:            Tue 21 May 2024 16:25:32 +0000
asID:                     270800
IP address blocks:        200.219.38.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:92:f2:ea:b3:fe:b2:f8:64:05:11:ed:27:f3:54:7a:75:1e:03:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92182892872466E0F9438AFD50C5EC5A6A0803C5
        Validity
            Not Before: May 23 16:20:32 2023 GMT
            Not After : May 21 16:25:32 2024 GMT
        Subject: CN=300E7F8379FDCC2E43EE5393F62D4C8E439D6737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:19:94:ea:e5:42:e3:60:c0:65:6d:e1:df:
                    fe:59:c1:d8:bf:9a:f2:c9:a2:f2:3c:22:4f:5e:88:
                    50:9c:5a:e0:d3:d8:73:2a:6f:0e:d2:eb:39:6d:05:
                    ee:1a:a2:7a:06:39:76:fa:d3:d6:d0:78:8b:25:52:
                    2f:cd:dd:b0:4a:2d:96:db:0b:8e:2d:b8:a8:73:9b:
                    9c:53:26:27:82:bd:e7:41:2c:a5:25:ab:70:ce:37:
                    eb:94:a9:08:0f:68:08:f7:f9:52:39:08:05:10:6e:
                    e9:ed:ba:30:8e:50:c4:0a:cc:49:23:87:79:ea:72:
                    6d:0b:ef:d0:63:93:51:81:67:14:00:3b:5a:4a:89:
                    93:83:be:7b:82:17:91:f9:b5:8f:4e:8f:15:96:3e:
                    f9:42:0a:8c:fa:32:06:54:1b:ee:e7:8b:ab:4d:e0:
                    7f:11:45:54:51:72:db:ae:61:10:84:8b:29:11:1e:
                    ad:96:a2:08:4a:ee:00:a3:8c:a3:0b:20:e5:01:ec:
                    40:6a:a2:cc:34:ac:f5:21:d3:08:45:9e:47:b8:fe:
                    77:47:61:1b:eb:37:41:a1:fa:0b:a9:6b:48:3d:1a:
                    47:53:5a:4e:25:43:6c:ac:05:54:a4:fe:74:51:cd:
                    3d:c4:23:d8:a8:bc:83:7a:54:c1:bf:37:9e:66:71:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0E:7F:83:79:FD:CC:2E:43:EE:53:93:F6:2D:4C:8E:43:9D:67:37
            X509v3 Authority Key Identifier:
                keyid:92:18:28:92:87:24:66:E0:F9:43:8A:FD:50:C5:EC:5A:6A:08:03:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/92182892872466E0F9438AFD50C5EC5A6A0803C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92182892872466E0F9438AFD50C5EC5A6A0803C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/3230302e3231392e33382e302f32332d3233203d3e20323730383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:a0:20:96:1d:8e:83:35:9e:4e:89:b9:8d:81:ed:3c:a1:c4:
         68:b9:5a:e9:77:f9:cc:f4:a5:a0:d7:23:02:d1:c0:75:4b:7b:
         b4:31:28:c9:6a:7d:52:7d:80:c9:5f:81:52:ec:56:23:63:45:
         d1:5d:2f:7a:1d:c7:69:39:21:ae:98:5e:b7:36:9d:c3:ad:bd:
         8b:e8:f0:37:72:2b:ec:49:03:36:94:b0:a3:56:8a:cd:a4:f5:
         47:e6:ab:f0:89:bd:47:e7:9d:66:86:13:39:60:aa:c3:8d:89:
         aa:4e:8c:1e:00:5f:a4:32:ca:5e:25:cc:89:be:13:3e:71:d4:
         5d:ee:78:84:4a:cb:7f:c4:68:7c:3c:0b:a9:80:97:ab:8f:e9:
         26:81:85:0e:2c:ab:30:b2:1a:9a:3d:f1:ad:55:8f:d5:08:c8:
         af:a3:34:32:eb:a0:46:18:5b:f6:e6:d6:ce:36:77:f6:e3:ca:
         19:b1:60:e1:71:0e:67:1a:cb:40:58:5c:4c:b3:4b:26:bc:0c:
         1a:48:d0:43:06:61:ff:7d:6d:a6:f7:0a:f7:41:67:5c:5e:8d:
         9c:70:e4:c1:54:9e:60:9d:c1:87:f7:0b:5f:e8:76:2d:a7:5d:
         a9:4a:65:fc:f2:6b:cc:15:8d:0a:b5:cf:89:03:c8:50:18:17:
         fc:f5:ca:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:05 2025 by rpki-client