Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137342e302f32332d3233203d3e203232313737.roa
File:                     3133312e3130302e3137342e302f32332d3233203d3e203232313737.roa (raw, json)
Hash identifier:          bHUjJ3/On1s4Wwmnxj/SFA/oC53dVUMbHRj4+uXiO0I=
Subject key identifier:   84:E9:50:61:F3:5C:3F:E6:AE:0E:5D:22:8A:72:89:73:93:17:00:FC
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       636BCE0D6D564AC30C36BC25F5B190F3ED47E838
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137342e302f32332d3233203d3e203232313737.roa
Signing time:             Fri 14 Apr 2023 20:26:54 +0000
ROA not before:           Fri 14 Apr 2023 20:21:54 +0000
ROA not after:            Fri 12 Apr 2024 20:26:54 +0000
asID:                     22177
IP address blocks:        131.100.174.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6b:ce:0d:6d:56:4a:c3:0c:36:bc:25:f5:b1:90:f3:ed:47:e8:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Apr 14 20:21:54 2023 GMT
            Not After : Apr 12 20:26:54 2024 GMT
        Subject: CN=84E95061F35C3FE6AE0E5D228A728973931700FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:a8:3c:e2:7d:a0:48:6e:0a:dc:a4:be:e4:
                    19:6c:59:7b:39:91:13:2c:b1:76:69:14:f5:35:3b:
                    5a:f6:4f:c8:62:35:af:12:93:f7:d6:44:f4:0e:be:
                    89:80:73:75:21:8b:88:f0:d6:fa:44:24:ad:ab:02:
                    fb:a2:e6:1a:a5:7b:55:5b:c8:c6:0c:e2:92:8f:52:
                    3f:fd:80:cb:58:a7:ab:a4:1b:aa:5f:af:3d:13:e5:
                    af:24:2d:dc:d2:1b:58:5b:c3:84:9d:7a:67:fa:30:
                    cb:8b:cd:26:59:1f:86:0d:38:e1:23:3e:b1:46:31:
                    6b:29:05:1e:80:e7:13:38:dc:ce:ad:f3:53:e4:bf:
                    f1:82:69:62:08:7e:1c:e3:aa:d0:c4:6d:2f:f6:94:
                    88:06:7d:ce:0b:7d:19:8c:2a:86:b2:77:ef:f3:7b:
                    02:be:e5:95:ab:fa:e2:40:ab:a5:c1:3d:60:61:e1:
                    ed:63:48:ce:85:7d:64:04:08:4d:2a:40:c2:a1:97:
                    cf:ca:a2:03:cd:98:52:35:65:8f:7b:3f:48:e5:a7:
                    1e:c9:b8:f0:b7:8f:1d:a8:fe:83:8c:04:96:6b:7b:
                    aa:7d:00:56:66:3f:47:09:e8:eb:d6:89:d0:d3:04:
                    47:b0:de:db:6e:41:b6:1a:b2:4f:7e:b2:eb:f7:65:
                    7f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E9:50:61:F3:5C:3F:E6:AE:0E:5D:22:8A:72:89:73:93:17:00:FC
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3133312e3130302e3137342e302f32332d3233203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:9e:58:cc:50:cf:30:54:87:10:02:52:5e:27:73:0d:0a:06:
         59:8c:8f:8f:1c:00:7d:f1:a0:52:ba:6b:26:7e:88:53:dc:8e:
         1e:89:82:17:cd:43:5e:95:d7:4f:9f:3f:f9:72:d0:05:e9:c2:
         a6:f2:51:68:60:df:e1:d0:cf:ff:5d:fc:66:c0:0a:8a:91:db:
         d9:3b:e8:8f:d3:27:d8:5a:c4:d9:a2:85:40:7c:53:20:c4:4e:
         ac:0c:e0:40:f5:69:6f:56:58:2a:e9:80:dc:1f:33:ef:41:cb:
         3f:19:f3:c1:59:71:4d:2a:26:f4:36:90:7c:ea:a8:43:03:98:
         74:9c:b2:e2:82:b4:c2:11:02:99:31:bd:ee:3f:e6:68:b2:f2:
         ed:e0:83:55:2d:d1:a7:1f:db:79:2b:28:f8:c1:49:b6:9d:95:
         3a:6d:52:ec:99:05:80:2d:02:e4:33:bb:57:72:de:25:52:d8:
         9c:14:b0:cf:33:86:42:9f:ad:2d:37:13:a5:21:92:ca:2a:f5:
         36:47:ae:97:06:a2:27:54:94:00:4c:c5:25:da:cf:c4:dd:73:
         6c:66:da:b6:2d:6e:cd:dd:21:ae:4e:c3:8f:e4:7e:4f:f2:e1:
         5d:c2:04:27:5a:05:64:72:e1:77:2d:41:58:81:a3:7a:e6:64:
         e4:91:a6:1c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUY2vODW1WSsMMNrwl9bGQ8+1H6DgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU2OEM3OTNFQ0Y0NDIyOUVBRUFEMjJBNEVDMjVGODM4
RTFCRkYxODAeFw0yMzA0MTQyMDIxNTRaFw0yNDA0MTIyMDI2NTRaMDMxMTAvBgNV
BAMTKDg0RTk1MDYxRjM1QzNGRTZBRTBFNUQyMjhBNzI4OTczOTMxNzAwRkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC906g84n2gSG4K3KS+5BlsWXs5
kRMssXZpFPU1O1r2T8hiNa8Sk/fWRPQOvomAc3Uhi4jw1vpEJK2rAvui5hqle1Vb
yMYM4pKPUj/9gMtYp6ukG6pfrz0T5a8kLdzSG1hbw4Sdemf6MMuLzSZZH4YNOOEj
PrFGMWspBR6A5xM43M6t81Pkv/GCaWIIfhzjqtDEbS/2lIgGfc4LfRmMKoayd+/z
ewK+5ZWr+uJAq6XBPWBh4e1jSM6FfWQECE0qQMKhl8/KogPNmFI1ZY97P0jlpx7J
uPC3jx2o/oOMBJZre6p9AFZmP0cJ6OvWidDTBEew3ttuQbYask9+suv3ZX+HAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUhOlQYfNcP+auDl0iinKJc5MXAPwwHwYDVR0j
BBgwFoAUlWjHk+z0Qinq6tIqTsJfg44b/xgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMC85NTY4Qzc5M0VDRjQ0MjI5RUFFQUQyMkE0RUMyNUY4MzhFMUJGRjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1NjhDNzkzRUNGNDQyMjlF
QUVBRDIyQTRFQzI1RjgzOEUxQkZGMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzAv
MzEzMzMxMmUzMTMwMzAyZTMxMzczNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzIzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGDZK4wDQYJKoZIhvcNAQELBQADggEBAJieWMxQ
zzBUhxACUl4ncw0KBlmMj48cAH3xoFK6ayZ+iFPcjh6JghfNQ16V10+fP/ly0AXp
wqbyUWhg3+HQz/9d/GbACoqR29k76I/TJ9haxNmihUB8UyDETqwM4ED1aW9WWCrp
gNwfM+9Byz8Z88FZcU0qJvQ2kHzqqEMDmHScsuKCtMIRApkxve4/5miy8u3gg1Ut
0acf23krKPjBSbadlTptUuyZBYAtAuQzu1dy3iVS2JwUsM8zhkKfrS03E6Uhksoq
9TZHrpcGoidUlABMxSXaz8Tdc2xm2rYtbs3dIa5Ow4/kfk/y4V3CBCdaBWRy4Xct
QViBo3rmZOSRphw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:56 2025 by rpki-client