Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137322e302f32332d3233203d3e203232313737.roa
File:                     3133312e3130302e3137322e302f32332d3233203d3e203232313737.roa (raw, json)
Hash identifier:          m5eqaUcFxDbmu7TgDwWoifeWOnC1arxDkkSuraWd58U=
Subject key identifier:   5E:6D:22:70:AC:97:D6:3A:7C:8C:19:4B:CC:64:F8:BA:CB:A7:03:59
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       6C85E7F6EB79F88BC6F749CEA35D4BD971BE11AB
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137322e302f32332d3233203d3e203232313737.roa
Signing time:             Fri 14 Apr 2023 15:49:05 +0000
ROA not before:           Fri 14 Apr 2023 15:44:05 +0000
ROA not after:            Fri 12 Apr 2024 15:49:05 +0000
asID:                     22177
IP address blocks:        131.100.172.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:85:e7:f6:eb:79:f8:8b:c6:f7:49:ce:a3:5d:4b:d9:71:be:11:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Apr 14 15:44:05 2023 GMT
            Not After : Apr 12 15:49:05 2024 GMT
        Subject: CN=5E6D2270AC97D63A7C8C194BCC64F8BACBA70359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:91:e5:30:55:b5:01:29:10:a8:ef:53:08:
                    0c:2d:fb:30:47:79:51:e4:df:f5:90:e1:6c:64:72:
                    ee:19:82:8a:34:94:5c:51:11:32:03:d3:1c:57:5d:
                    96:44:0a:62:49:51:c3:b3:07:1e:fe:f5:45:b7:80:
                    c8:67:8e:03:34:23:16:9c:49:73:37:f5:83:eb:5b:
                    c4:c2:cb:c4:46:90:8b:c4:07:3b:fa:7b:21:27:55:
                    ca:d2:70:a9:33:67:c2:21:1b:6a:96:57:e2:82:20:
                    d0:f2:46:4a:58:c1:34:ef:34:82:65:de:c9:7b:e7:
                    6a:63:f3:b7:f2:6b:82:2c:fa:2c:42:8e:6c:df:17:
                    78:74:8d:3a:1e:ec:4d:95:bb:33:97:1b:5e:d4:2e:
                    58:dd:d9:73:05:da:d9:2c:9a:a5:56:f4:6b:ea:de:
                    24:4a:df:5f:d9:ff:b9:86:c5:2f:fe:cd:e7:ff:49:
                    73:aa:8c:14:48:b1:fe:dc:b3:ae:2c:ce:74:9e:2e:
                    a4:53:e2:f2:55:11:5c:63:ba:53:51:24:43:e1:23:
                    bc:d0:f7:7e:1c:ec:66:34:7e:c7:9c:d1:0d:0c:b2:
                    d7:de:a8:37:06:28:ef:1e:01:61:3b:99:7e:e9:fb:
                    85:bd:bb:bb:96:c7:4f:a4:f0:8a:75:c9:51:5e:59:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6D:22:70:AC:97:D6:3A:7C:8C:19:4B:CC:64:F8:BA:CB:A7:03:59
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137322e302f32332d3233203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:37:3a:bc:0d:5a:f7:94:bc:cc:53:30:06:4d:bd:00:7f:c2:
         5e:18:68:27:86:cd:98:68:0f:01:5d:1b:72:81:02:bb:62:b3:
         4d:c2:70:9a:87:90:fd:eb:87:80:8f:0a:f0:bb:f9:35:cc:8f:
         47:ae:42:25:dd:6c:e4:60:ee:ae:4b:d9:10:4f:1d:a4:f0:3c:
         21:43:5c:8e:ec:d7:d7:63:d9:78:46:ca:15:36:a4:76:22:5f:
         e5:f8:34:09:0d:4e:90:32:e8:3d:2a:ce:6f:d3:2b:dd:75:af:
         17:74:87:45:d7:fb:c6:bc:84:96:e1:45:8f:e1:33:bd:7c:de:
         ea:a9:9f:20:9e:48:dd:12:1f:ae:f4:d6:ec:fe:ad:b6:d8:28:
         04:3b:79:ad:29:3d:bb:66:63:7c:3a:2a:d7:53:da:2a:06:02:
         39:b0:89:a8:24:81:30:4b:c2:0a:20:cc:8a:38:5c:c0:bc:e3:
         0d:53:97:ed:17:0c:aa:a1:09:f2:76:af:89:08:29:30:a8:4a:
         df:b0:9a:c4:de:e0:f6:89:ba:e2:1c:2e:3b:01:b2:f8:ca:c5:
         3e:5c:f3:0b:1f:68:e4:8b:bb:8f:20:e5:6a:1f:0f:11:f1:40:
         51:3e:e4:06:23:77:06:02:34:e6:a7:3d:18:1a:2e:8f:a5:ee:
         60:0b:c3:ee
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUbIXn9ut5+IvG90nOo11L2XG+EaswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU2OEM3OTNFQ0Y0NDIyOUVBRUFEMjJBNEVDMjVGODM4
RTFCRkYxODAeFw0yMzA0MTQxNTQ0MDVaFw0yNDA0MTIxNTQ5MDVaMDMxMTAvBgNV
BAMTKDVFNkQyMjcwQUM5N0Q2M0E3QzhDMTk0QkNDNjRGOEJBQ0JBNzAzNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuK5HlMFW1ASkQqO9TCAwt+zBH
eVHk3/WQ4Wxkcu4Zgoo0lFxRETID0xxXXZZECmJJUcOzBx7+9UW3gMhnjgM0Ixac
SXM39YPrW8TCy8RGkIvEBzv6eyEnVcrScKkzZ8IhG2qWV+KCINDyRkpYwTTvNIJl
3sl752pj87fya4Is+ixCjmzfF3h0jToe7E2VuzOXG17ULljd2XMF2tksmqVW9Gvq
3iRK31/Z/7mGxS/+zef/SXOqjBRIsf7cs64sznSeLqRT4vJVEVxjulNRJEPhI7zQ
934c7GY0fsec0Q0MstfeqDcGKO8eAWE7mX7p+4W9u7uWx0+k8Ip1yVFeWe+RAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUXm0icKyX1jp8jBlLzGT4usunA1kwHwYDVR0j
BBgwFoAUlWjHk+z0Qinq6tIqTsJfg44b/xgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMC85NTY4Qzc5M0VDRjQ0MjI5RUFFQUQyMkE0RUMyNUY4MzhFMUJGRjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1NjhDNzkzRUNGNDQyMjlF
QUVBRDIyQTRFQzI1RjgzOEUxQkZGMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzAv
MzEzMzMxMmUzMTMwMzAyZTMxMzczMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzIzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDZKwwDQYJKoZIhvcNAQELBQADggEBAAQ3OrwN
WveUvMxTMAZNvQB/wl4YaCeGzZhoDwFdG3KBArtis03CcJqHkP3rh4CPCvC7+TXM
j0euQiXdbORg7q5L2RBPHaTwPCFDXI7s19dj2XhGyhU2pHYiX+X4NAkNTpAy6D0q
zm/TK911rxd0h0XX+8a8hJbhRY/hM7183uqpnyCeSN0SH6701uz+rbbYKAQ7ea0p
PbtmY3w6KtdT2ioGAjmwiagkgTBLwgogzIo4XMC84w1Tl+0XDKqhCfJ2r4kIKTCo
St+wmsTe4PaJuuIcLjsBsvjKxT5c8wsfaOSLu48g5WofDxHxQFE+5AYjdwYCNOan
PRgaLo+l7mALw+4=
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:50:44 2025 by rpki-client