Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3138392e35312e302e302f32332d3233203d3e203232313737.roa
File:                     3138392e35312e302e302f32332d3233203d3e203232313737.roa (raw, json)
Hash identifier:          BWYVmqHJjGnwHInvJlTwJEgQD1Dkvba6f2Ztarq/oo8=
Subject key identifier:   31:48:97:64:07:F8:1E:2F:F3:B1:D2:C2:EE:E7:B6:A9:E8:16:7E:47
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       4C7F3902A0DE901C4457BB33A9FC8FF7A76F3EBD
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3138392e35312e302e302f32332d3233203d3e203232313737.roa
Signing time:             Fri 14 Apr 2023 20:26:30 +0000
ROA not before:           Fri 14 Apr 2023 20:21:30 +0000
ROA not after:            Fri 12 Apr 2024 20:26:30 +0000
asID:                     22177
IP address blocks:        189.51.0.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:7f:39:02:a0:de:90:1c:44:57:bb:33:a9:fc:8f:f7:a7:6f:3e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Apr 14 20:21:30 2023 GMT
            Not After : Apr 12 20:26:30 2024 GMT
        Subject: CN=3148976407F81E2FF3B1D2C2EEE7B6A9E8167E47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e8:4f:24:cf:da:b8:ee:5c:88:6b:dd:bd:66:
                    48:c7:c8:4c:ed:5d:43:c1:55:07:49:1f:6b:5d:e0:
                    fe:e9:66:53:6b:fc:22:5b:1d:d0:29:66:f7:d2:21:
                    1e:a5:00:f5:48:e5:f9:52:37:1f:14:c7:43:b5:c2:
                    14:81:f1:18:12:e9:52:49:b4:03:4f:16:82:04:43:
                    c9:3c:3f:ca:87:35:e0:01:d6:a0:6e:d9:d1:1d:ca:
                    88:df:5f:46:41:dc:1b:81:a2:3f:e7:e7:42:46:f2:
                    f0:6d:a3:53:43:ab:97:41:88:30:15:47:01:19:8c:
                    7f:df:54:03:59:7d:c7:e4:28:67:9c:d8:66:0b:fc:
                    67:79:13:56:b1:cb:6f:74:84:2a:07:ed:e5:87:0a:
                    d0:12:60:51:7e:e4:9f:e0:92:ef:e8:1f:85:37:40:
                    53:37:4a:4f:bf:ba:dc:21:d1:05:46:ac:05:25:b3:
                    6a:b5:99:5c:1a:63:73:c1:8f:17:55:1f:ac:48:37:
                    91:2f:31:8e:1c:23:2b:99:fe:b1:10:dd:0b:4d:20:
                    eb:4e:23:b1:9c:4e:6a:1e:f2:4e:94:be:1e:e0:c7:
                    19:0f:92:79:2c:57:0e:27:3f:df:f3:57:3c:4c:6a:
                    65:5d:99:b3:f1:3d:14:85:96:9e:08:9e:ae:33:9b:
                    1a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:48:97:64:07:F8:1E:2F:F3:B1:D2:C2:EE:E7:B6:A9:E8:16:7E:47
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3138392e35312e302e302f32332d3233203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:1b:d8:b9:96:cc:fb:e1:5e:25:19:e7:b7:aa:bc:d9:ab:a5:
         e1:5f:bf:9d:f7:a8:c4:f9:f7:58:a2:e3:8c:cb:93:89:7b:f6:
         9b:ec:23:d5:83:c5:86:1c:29:0b:ff:f6:56:07:ca:4a:7f:57:
         7b:d5:c6:ae:44:28:47:e7:b2:8d:90:c8:6a:2b:9d:4a:cd:89:
         c5:c8:3f:1b:cc:8b:f2:67:d0:17:72:17:05:a8:15:e1:1c:62:
         87:f8:66:30:6b:fe:99:43:26:9f:68:be:a9:f1:f7:1b:12:04:
         53:e0:19:ca:27:e7:54:8a:93:6e:da:54:0b:89:d4:0d:b7:3d:
         45:c3:d8:d2:51:6a:cd:1a:83:70:61:bb:3e:c9:04:0b:eb:c6:
         2a:8c:c1:1e:cf:e8:e7:e0:c5:5b:17:2f:6a:3b:f2:04:f8:22:
         20:30:fd:84:8b:f6:1a:99:c9:4a:c0:1b:59:6a:91:9b:b4:69:
         4a:2b:ed:01:22:34:c7:e9:b1:5a:99:8c:f1:7d:62:1b:55:da:
         0e:b1:81:59:19:aa:32:7e:07:02:a6:f8:bc:7b:da:ef:f4:e0:
         18:50:05:59:f3:2c:51:0e:fe:9b:b3:f7:5e:95:58:1e:dc:a3:
         62:4a:f4:6f:bc:e7:eb:26:75:7c:cb:28:26:84:78:9b:5e:3a:
         e4:62:ca:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:05 2025 by rpki-client