Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3138392e35312e31302e302f32332d3233203d3e203232313737.roa
File:                     3138392e35312e31302e302f32332d3233203d3e203232313737.roa (raw, json)
Hash identifier:          GLQxfkWQkD/UeeLslzorZ4IqhST/tz3lM1D7hZG7Po0=
Subject key identifier:   E8:01:AE:2E:BD:AD:97:FA:AC:ED:BD:5C:BC:8F:D6:89:C2:2A:98:0F
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       3D4378460ACB6A5E764B94D9D6C6351B0F532269
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3138392e35312e31302e302f32332d3233203d3e203232313737.roa
Signing time:             Fri 14 Apr 2023 20:29:40 +0000
ROA not before:           Fri 14 Apr 2023 20:24:40 +0000
ROA not after:            Fri 12 Apr 2024 20:29:40 +0000
asID:                     22177
IP address blocks:        189.51.10.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:43:78:46:0a:cb:6a:5e:76:4b:94:d9:d6:c6:35:1b:0f:53:22:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Apr 14 20:24:40 2023 GMT
            Not After : Apr 12 20:29:40 2024 GMT
        Subject: CN=E801AE2EBDAD97FAACEDBD5CBC8FD689C22A980F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4e:4d:d6:86:23:9f:fc:d6:34:30:52:d7:a1:
                    58:06:c6:74:73:de:3b:5a:cd:59:23:fa:8d:a5:a4:
                    92:6f:ca:8a:01:4f:6d:e6:6f:cc:6f:85:e2:1c:f4:
                    1c:5e:0c:ce:36:7a:bc:60:aa:35:8d:55:a6:7e:37:
                    06:3f:8b:bc:8d:67:f5:0e:10:44:6b:bd:01:26:dc:
                    8b:2d:07:fd:b1:21:3c:6d:21:ef:56:55:f7:13:93:
                    a4:70:65:46:9f:35:8c:cc:e2:6a:c0:19:b4:f1:18:
                    26:b7:27:cb:49:6a:75:e6:3c:4c:1e:e8:2e:c7:71:
                    c9:ac:4a:89:b2:85:fe:30:c0:ce:d5:fb:ca:c8:8b:
                    bf:29:57:0f:e0:57:32:6b:96:36:66:26:2e:4e:7f:
                    f0:9e:d4:f8:f7:6f:ca:03:52:f1:87:34:e2:b3:c5:
                    15:20:93:ae:09:32:12:02:c5:4a:eb:85:da:66:d7:
                    33:4d:07:c5:d5:dc:b5:5d:6e:82:a4:72:79:3e:75:
                    ea:9c:3c:c6:32:f4:39:63:d5:ba:db:11:53:6c:2c:
                    2b:7c:2c:bb:e5:d9:08:23:7b:19:a7:ba:78:18:12:
                    7f:30:52:b5:3b:de:bd:43:f6:59:c2:ca:b7:5f:da:
                    d7:35:da:a2:85:97:96:a4:ba:dd:9a:be:21:3c:6a:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:01:AE:2E:BD:AD:97:FA:AC:ED:BD:5C:BC:8F:D6:89:C2:2A:98:0F
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3138392e35312e31302e302f32332d3233203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:da:78:90:f9:06:57:af:f9:30:73:c1:59:18:c1:a9:9d:bd:
         7e:ca:07:79:63:9f:4d:b3:5c:a8:d6:08:3f:6b:18:85:39:04:
         dd:5d:79:28:aa:87:6b:c1:65:bf:6b:b1:db:c6:60:06:48:3c:
         c3:36:ea:55:c6:20:02:ff:19:44:57:df:be:95:69:90:0a:1f:
         21:f8:79:f7:ff:b3:7c:1c:5c:64:32:e4:91:74:df:9b:7c:c8:
         a8:91:44:a6:1b:f9:33:7d:5a:63:1f:ff:b2:f6:1a:73:7c:00:
         c5:ed:60:ed:3a:b6:85:ec:5d:ea:c2:c2:0b:53:55:29:df:f0:
         32:ee:d9:18:39:8f:8c:d6:63:4e:73:c2:16:19:a1:57:1f:15:
         34:a4:68:b7:c5:9d:a1:75:64:37:ea:a6:59:e6:79:7d:eb:a0:
         84:38:b6:a0:d5:e6:85:ad:2d:13:86:6a:9a:b0:f8:98:55:f2:
         37:30:a5:26:24:71:46:22:b6:a7:2c:4d:f7:71:8a:45:84:4b:
         a5:ba:33:58:50:87:a3:c1:a8:c1:bb:74:f3:15:03:e8:cc:85:
         c3:82:ab:fa:2a:94:71:26:74:d0:45:6e:77:eb:e9:e9:dc:17:
         c2:9a:53:a0:7f:78:7f:45:63:0c:2a:77:0b:a1:26:f9:4b:74:
         27:fb:49:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:21 2025 by rpki-client