Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137322e302f32322d3332203d3e203232313737.roa
File:                     3133312e3130302e3137322e302f32322d3332203d3e203232313737.roa (raw, json)
Hash identifier:          C5fLL5dYl/GS/CQhWqkDbGNK9831K0WISXQrIBFoGAc=
Subject key identifier:   E2:99:84:BC:8A:68:EE:F4:BA:95:3C:0B:EE:62:AC:E6:16:05:DB:A7
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       67CB532BE821B4DEC74CE88B93050A449F16AE6F
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137322e302f32322d3332203d3e203232313737.roa
Signing time:             Mon 27 Mar 2023 00:25:11 +0000
ROA not before:           Mon 27 Mar 2023 00:20:11 +0000
ROA not after:            Mon 25 Mar 2024 00:25:11 +0000
asID:                     22177
IP address blocks:        131.100.172.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:cb:53:2b:e8:21:b4:de:c7:4c:e8:8b:93:05:0a:44:9f:16:ae:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Mar 27 00:20:11 2023 GMT
            Not After : Mar 25 00:25:11 2024 GMT
        Subject: CN=E29984BC8A68EEF4BA953C0BEE62ACE61605DBA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:14:de:ab:76:b8:f4:0a:6a:08:99:d7:d8:4d:
                    f8:a8:78:5b:a8:c4:bd:a0:6a:4c:13:73:4f:e3:c6:
                    3b:65:0b:31:9b:8b:48:9b:5e:8f:f9:07:cd:19:7b:
                    e8:1d:c0:00:35:c2:bc:33:a8:40:2c:2b:09:1a:92:
                    60:63:4d:c5:80:32:5f:42:3d:b9:40:2b:31:4d:ea:
                    e9:e8:c3:de:01:b5:10:65:92:10:70:31:81:e1:88:
                    34:a1:e8:15:50:a8:3e:3b:d4:b9:3f:05:66:d8:fb:
                    fd:96:cf:87:bf:99:42:4c:49:5b:61:31:91:81:d8:
                    cc:dd:84:a4:e4:ee:97:9d:5b:f6:3d:3e:7b:d3:74:
                    3b:0d:81:c5:59:39:4f:d5:c4:6c:99:37:d8:58:5e:
                    70:29:20:bd:d3:7e:5e:b1:ea:d2:9c:37:ec:f9:3f:
                    9f:af:06:b5:b1:b3:86:87:28:ec:a7:74:64:39:ef:
                    cb:d8:d9:ff:80:ca:cd:6f:af:2d:d6:d8:20:ff:67:
                    47:cb:1a:ca:37:0a:e1:8d:ed:89:bf:26:73:f1:ab:
                    06:99:91:e9:e2:7d:08:14:7e:14:df:06:20:8d:83:
                    db:16:d2:b7:c2:68:fe:4c:ea:51:2a:5e:f1:15:65:
                    6e:97:21:03:56:9e:a9:0d:03:fc:2d:99:f5:5c:3b:
                    67:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:99:84:BC:8A:68:EE:F4:BA:95:3C:0B:EE:62:AC:E6:16:05:DB:A7
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137322e302f32322d3332203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:c6:15:43:52:a5:06:be:05:7c:89:57:50:97:39:f0:fd:52:
         2d:b0:03:62:72:99:b1:90:a2:fe:10:c1:3f:7b:ed:50:64:9b:
         8a:86:2e:3d:0d:27:e7:c0:76:d3:3b:01:03:14:43:dc:ec:03:
         eb:d9:57:98:40:d9:e6:77:7a:06:6a:07:72:07:52:11:be:b1:
         06:03:f8:13:27:d7:f5:cf:1b:2b:c2:b2:a3:d4:8c:3b:3c:6b:
         a4:ec:00:ca:c5:79:e1:7e:b0:c1:e9:34:c6:ea:a1:8b:e8:5e:
         59:01:86:1c:45:74:14:74:e8:8d:df:71:04:17:d8:bf:1e:b4:
         2b:74:7a:0e:91:22:bc:04:0e:39:5f:e4:73:47:da:bd:d3:ed:
         a1:d3:23:20:4c:34:8d:8a:3c:f6:d5:1a:8b:4c:83:0f:26:ad:
         df:87:b9:92:6d:60:1c:41:8a:0f:75:40:3e:32:d2:9c:68:1e:
         9b:78:72:4c:c1:9c:10:ba:be:17:09:9e:b2:9e:6c:51:50:05:
         61:10:16:46:2d:71:ac:89:e1:58:19:0c:d5:eb:98:39:76:35:
         d7:fa:cd:ee:bb:92:5f:12:33:9c:ef:42:6d:21:3e:6b:a3:51:
         36:4e:5f:3c:67:32:45:a9:18:c5:cd:77:0e:30:9f:a0:ed:e0:
         1d:84:ab:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:21 2025 by rpki-client