Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/3230302e3231392e33392e302f32342d3234203d3e20323730383030.roa
File:                     3230302e3231392e33392e302f32342d3234203d3e20323730383030.roa (raw, json)
Hash identifier:          M+MnIEeyOINxS6M8Q3DlUlhm59oBfHT8XfgCfYI5q7I=
Subject key identifier:   88:69:09:59:8D:02:33:9F:6D:57:2F:F3:A5:BF:BF:EA:AB:42:A6:6D
Certificate issuer:       /CN=92182892872466E0F9438AFD50C5EC5A6A0803C5
Certificate serial:       760CFEE8978F5D1353C8849D93F4C90F84BE59EF
Authority key identifier: 92:18:28:92:87:24:66:E0:F9:43:8A:FD:50:C5:EC:5A:6A:08:03:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92182892872466E0F9438AFD50C5EC5A6A0803C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/3230302e3231392e33392e302f32342d3234203d3e20323730383030.roa
Signing time:             Tue 23 May 2023 16:25:32 +0000
ROA not before:           Tue 23 May 2023 16:20:32 +0000
ROA not after:            Tue 21 May 2024 16:25:32 +0000
asID:                     270800
IP address blocks:        200.219.39.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:0c:fe:e8:97:8f:5d:13:53:c8:84:9d:93:f4:c9:0f:84:be:59:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92182892872466E0F9438AFD50C5EC5A6A0803C5
        Validity
            Not Before: May 23 16:20:32 2023 GMT
            Not After : May 21 16:25:32 2024 GMT
        Subject: CN=886909598D02339F6D572FF3A5BFBFEAAB42A66D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7b:c0:f0:83:0a:09:64:a2:8f:57:b8:c7:58:
                    5e:98:31:d9:86:af:b5:62:6f:83:99:2e:32:8a:c1:
                    76:25:8b:25:6d:31:0c:68:bf:d8:0d:b4:b7:b6:3e:
                    c3:55:4c:d7:4c:df:0e:3f:a0:bb:9b:fb:38:f6:47:
                    62:19:2c:56:f2:21:03:85:5a:27:8a:58:1e:af:0f:
                    cd:e7:48:81:0a:71:1d:36:79:73:c6:dc:b2:91:df:
                    46:4c:fe:9e:89:61:5a:91:75:f4:c6:00:2f:08:a9:
                    c6:fc:68:fb:5d:02:8d:87:55:fc:6d:9b:53:6e:04:
                    76:8c:94:a5:86:04:33:95:cc:1f:36:46:9e:7e:cb:
                    27:c0:11:68:1b:eb:65:74:ab:4f:e8:59:e4:aa:dd:
                    e5:b1:18:dd:32:17:c9:3c:10:ce:33:7c:17:51:1b:
                    a6:11:d1:ab:a1:c0:5e:80:30:2c:d3:9e:8a:4d:66:
                    95:f4:e4:7a:04:22:5f:21:b7:89:41:85:8e:a4:40:
                    18:c0:43:14:a4:31:41:d9:16:02:6f:31:72:21:62:
                    ec:60:85:8a:c5:ce:a4:46:26:26:15:a2:5d:94:af:
                    d1:bd:2d:fc:5b:66:08:2f:96:6f:86:c3:aa:5d:e6:
                    4e:cd:30:c8:da:eb:9b:b3:9a:0d:44:dc:81:31:30:
                    f0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:69:09:59:8D:02:33:9F:6D:57:2F:F3:A5:BF:BF:EA:AB:42:A6:6D
            X509v3 Authority Key Identifier:
                keyid:92:18:28:92:87:24:66:E0:F9:43:8A:FD:50:C5:EC:5A:6A:08:03:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/92182892872466E0F9438AFD50C5EC5A6A0803C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/92182892872466E0F9438AFD50C5EC5A6A0803C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/3230302e3231392e33392e302f32342d3234203d3e20323730383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:d8:9e:c4:95:5d:20:f5:e7:74:60:da:c3:f0:a1:b1:33:6d:
         fd:ed:ab:95:46:b7:b7:1e:55:02:f8:f3:ce:01:a7:91:64:b9:
         dd:d1:13:11:34:39:b0:06:a5:b8:e4:2e:f6:f1:98:cf:a7:54:
         5b:1a:b6:97:1f:b2:f1:34:ff:45:85:0a:66:bb:74:1d:62:38:
         c9:a2:ba:d2:be:5e:12:65:b3:49:d9:61:8f:86:d8:47:2f:cc:
         8d:a9:38:9f:11:a9:60:05:4f:79:16:03:24:0c:5d:bb:41:c1:
         44:e6:5e:ec:05:cc:0c:e1:4d:70:fb:cd:67:72:f8:e3:34:d5:
         6c:c6:fa:75:9b:b5:09:49:48:c8:72:46:17:06:35:27:d7:ec:
         84:34:2a:de:86:8c:e7:b6:a2:4d:15:a7:eb:00:ec:7d:4a:f4:
         18:01:5a:b4:6f:8e:ed:69:68:27:02:9a:49:20:a4:e4:1f:03:
         1e:d6:28:21:ed:d4:5c:a4:2c:03:fe:1d:52:88:3c:0b:36:4e:
         01:45:9b:7f:02:0c:a1:b0:3f:d3:d8:22:1d:71:aa:a7:10:43:
         46:0a:70:76:eb:3f:0c:07:ec:6a:f4:a3:2d:a0:39:dc:f7:e1:
         c7:91:9c:0b:99:95:88:e6:ea:98:cf:b2:45:0f:6d:9a:ac:99:
         72:97:28:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org