Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137322e302f32322d3234203d3e203232313737.roa
File:                     3133312e3130302e3137322e302f32322d3234203d3e203232313737.roa (raw, json)
Hash identifier:          /fMFvWGl9+Ahperweq7JvIYw2gN5ue7edqiNvnd9/zE=
Subject key identifier:   74:CA:41:3D:E5:2C:C3:50:EB:E0:A1:05:AE:8D:0E:42:47:02:02:CA
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       23F8B18848DE6936D07666AEC9E9EE20F8BDA327
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137322e302f32322d3234203d3e203232313737.roa
Signing time:             Mon 03 Apr 2023 13:03:13 +0000
ROA not before:           Mon 03 Apr 2023 12:58:13 +0000
ROA not after:            Mon 01 Apr 2024 13:03:13 +0000
asID:                     22177
IP address blocks:        131.100.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f8:b1:88:48:de:69:36:d0:76:66:ae:c9:e9:ee:20:f8:bd:a3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Apr  3 12:58:13 2023 GMT
            Not After : Apr  1 13:03:13 2024 GMT
        Subject: CN=74CA413DE52CC350EBE0A105AE8D0E42470202CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:03:88:68:25:52:ea:83:81:b0:33:06:fb:ff:
                    7b:ee:e3:8a:78:61:92:22:f9:15:af:75:08:a7:17:
                    6b:9d:31:f8:2d:7a:5f:b7:eb:ad:1d:ea:17:c9:c6:
                    52:78:8a:e2:56:2b:63:a0:b7:f5:bb:e3:6f:79:47:
                    d9:dc:a9:b0:1c:ff:a1:77:8c:42:d5:23:c6:b9:07:
                    f9:a6:b9:4b:93:3d:74:b2:2b:86:16:70:9e:b0:8f:
                    7c:08:88:10:a3:4d:e8:d3:1e:12:92:0e:95:5d:80:
                    5f:44:15:09:46:3d:0a:37:1e:a0:c8:39:0a:84:f9:
                    9c:11:80:d0:ee:85:98:fa:13:ff:87:b5:9d:65:cb:
                    66:cd:fd:97:66:74:13:11:9c:fe:f8:b8:fa:9a:10:
                    5a:c0:ee:60:ad:89:1b:35:f4:58:3d:8c:3a:5e:9b:
                    9b:e5:69:bb:6c:69:f6:63:01:61:ea:6d:68:e2:b2:
                    ae:cc:a8:d7:3b:37:9c:23:85:a5:9c:9a:41:1b:76:
                    e3:39:a3:ea:e1:6f:e3:67:9e:75:63:18:09:e4:26:
                    8e:79:b3:1b:31:0f:a0:df:0a:a0:51:71:f1:69:e6:
                    ca:8f:f2:86:4f:76:f7:b3:91:2b:30:73:ae:fa:7f:
                    91:d2:24:19:01:fe:75:d9:81:a1:3a:d4:a0:43:b8:
                    84:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CA:41:3D:E5:2C:C3:50:EB:E0:A1:05:AE:8D:0E:42:47:02:02:CA
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137322e302f32322d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:16:79:c6:2a:41:07:3c:66:bf:d2:d9:1e:37:b8:03:7e:5a:
         5c:54:76:23:42:15:33:72:50:01:89:8c:3e:b4:14:fa:99:c3:
         0b:8b:38:41:51:ff:82:6d:da:33:c6:be:96:e8:1d:10:54:7d:
         5c:17:90:9c:0b:4c:9b:cb:d2:5a:83:bf:5f:e7:c5:52:58:87:
         10:83:6e:87:d2:f6:0d:68:42:c1:0f:ac:2f:6e:5d:38:49:6b:
         55:b6:46:51:4e:e5:7b:2c:9a:bf:6e:ef:c9:57:e8:3b:ba:12:
         5a:3c:5f:26:08:50:dd:42:02:19:ef:53:ac:e2:fa:92:35:5d:
         5d:1c:83:b0:fb:6d:69:f5:76:d6:b7:e8:42:c8:57:c7:4c:c5:
         bd:49:ac:08:94:7d:82:6c:d1:58:2c:7d:a6:ba:fd:5d:cf:47:
         21:9b:26:ce:0b:cb:e0:f5:20:fd:e0:ac:ff:f7:9a:04:f1:ba:
         0f:8d:f8:72:5b:dc:f2:05:7e:99:f9:e2:eb:de:e3:4f:28:d5:
         f4:56:89:45:0c:76:9a:7b:d6:b4:a4:de:9f:fd:e9:14:c6:f2:
         d1:92:d8:d7:05:44:5b:9e:fd:2c:d1:6b:55:07:57:84:90:b0:
         9c:81:8d:2d:82:cf:94:8c:cc:27:83:a5:9f:88:75:a3:88:f5:
         6b:e0:b2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org