Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/3230302e3231392e33382e302f32342d3234203d3e20323730383030.roa
File:                     3230302e3231392e33382e302f32342d3234203d3e20323730383030.roa (raw, json)
Hash identifier:          ibVcMnyvecxZ+jUzdzG6AeF3rFcaUfa77eWJpg6t4/c=
Subject key identifier:   2E:1C:B4:B6:33:5F:E4:D7:29:E1:D9:DD:84:9E:00:C1:85:64:7C:03
Certificate issuer:       /CN=92182892872466E0F9438AFD50C5EC5A6A0803C5
Certificate serial:       7442A3B0449C0D25DF9366E58AC83E8B7E733192
Authority key identifier: 92:18:28:92:87:24:66:E0:F9:43:8A:FD:50:C5:EC:5A:6A:08:03:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92182892872466E0F9438AFD50C5EC5A6A0803C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/3230302e3231392e33382e302f32342d3234203d3e20323730383030.roa
Signing time:             Tue 23 May 2023 16:25:32 +0000
ROA not before:           Tue 23 May 2023 16:20:32 +0000
ROA not after:            Tue 21 May 2024 16:25:32 +0000
asID:                     270800
IP address blocks:        200.219.38.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:42:a3:b0:44:9c:0d:25:df:93:66:e5:8a:c8:3e:8b:7e:73:31:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92182892872466E0F9438AFD50C5EC5A6A0803C5
        Validity
            Not Before: May 23 16:20:32 2023 GMT
            Not After : May 21 16:25:32 2024 GMT
        Subject: CN=2E1CB4B6335FE4D729E1D9DD849E00C185647C03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:14:bc:7a:b2:6a:06:8c:19:75:29:cb:7e:99:
                    18:67:54:b0:4c:2e:bb:4e:21:34:21:bb:93:b0:0d:
                    10:27:4a:96:40:42:74:fd:8e:0c:41:94:7e:41:20:
                    54:94:aa:6c:a7:5e:9b:1f:36:05:c0:1d:47:c9:c1:
                    e2:34:d8:6f:d7:5f:1b:16:64:e1:be:b9:d5:51:6e:
                    0b:97:48:e3:14:d9:07:d3:31:95:19:64:96:26:d2:
                    d6:8a:62:fb:98:41:f3:2d:f4:8b:01:1b:eb:7c:76:
                    2b:0d:64:ac:c3:a5:c7:92:c6:23:43:f1:30:c3:73:
                    e9:3b:44:91:58:86:6a:05:c4:94:e9:4e:2b:c8:4e:
                    5f:e6:36:75:8a:08:10:ff:d7:8c:19:e3:e9:34:76:
                    68:05:d6:02:aa:13:fc:19:5f:29:f8:30:87:06:13:
                    1d:77:2b:7a:67:36:aa:51:c7:70:c4:ca:6c:29:72:
                    51:2e:24:0d:ce:9d:e4:a5:78:08:ce:e7:d4:c9:94:
                    84:c0:87:70:db:d7:45:9c:d1:e7:85:b1:90:17:b4:
                    a9:46:88:f6:18:aa:93:01:20:68:99:41:ea:a4:96:
                    b4:79:8b:69:a5:0a:37:8c:9d:1a:90:60:0a:07:f1:
                    2f:75:3b:32:ac:7f:80:c0:ff:07:33:5d:a8:08:f8:
                    9f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1C:B4:B6:33:5F:E4:D7:29:E1:D9:DD:84:9E:00:C1:85:64:7C:03
            X509v3 Authority Key Identifier:
                keyid:92:18:28:92:87:24:66:E0:F9:43:8A:FD:50:C5:EC:5A:6A:08:03:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/92182892872466E0F9438AFD50C5EC5A6A0803C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92182892872466E0F9438AFD50C5EC5A6A0803C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/3230302e3231392e33382e302f32342d3234203d3e20323730383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:68:e1:65:f4:8f:61:be:3a:10:b9:22:1c:91:82:0e:b7:08:
         75:b3:ac:c1:e1:7c:2b:87:0e:7d:62:c1:c7:28:a8:ee:e4:d8:
         87:f0:85:33:0d:0c:ee:ee:f5:fd:2c:99:31:8f:a5:cb:dc:07:
         7d:70:f0:b0:d7:8c:6a:41:b2:23:b7:35:4f:13:80:e2:ca:a4:
         06:49:7c:df:75:a8:b3:e8:db:83:9a:fa:69:76:07:12:ca:1b:
         62:2b:e8:87:35:23:eb:25:fd:8a:41:95:6b:68:92:b4:6f:50:
         37:89:5c:90:ff:78:be:72:2a:81:88:eb:ee:7d:07:8e:9c:ce:
         72:6e:5b:0c:a6:75:cd:07:6b:77:90:06:35:eb:09:b6:c0:fb:
         75:a3:14:67:e2:55:bc:28:c4:a4:86:a3:2f:6d:6c:2f:19:2e:
         71:f7:64:da:a1:d6:a1:04:fd:ca:e6:7d:19:8b:9a:be:72:1a:
         a3:ef:46:7a:9e:56:b4:96:fc:17:46:93:df:2d:30:f9:d8:a4:
         88:89:3e:0b:2d:73:bf:fd:7e:df:db:ef:c3:8d:3c:2e:98:5d:
         58:00:ce:f6:48:af:57:9a:fe:9f:16:f5:65:66:04:5f:ce:61:
         8f:9a:22:11:d0:9f:c0:0a:e9:d4:cb:18:35:d1:50:94:c1:a1:
         87:8a:e3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:17 2025 by rpki-client