Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3138392e35312e31332e302f32342d3234203d3e203232313737.roa
File:                     3138392e35312e31332e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          cgjVlf75YFSrR8bwg6CHpuakmZJMAb7L+fVDTaFgAUQ=
Subject key identifier:   47:98:D1:6E:8D:E9:6D:98:F2:B4:56:42:2B:31:80:89:2F:04:52:E5
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       043C36201A8E60AFA1B42A9B0F938A9CCEFB4AC0
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3138392e35312e31332e302f32342d3234203d3e203232313737.roa
Signing time:             Fri 14 Apr 2023 20:37:41 +0000
ROA not before:           Fri 14 Apr 2023 20:32:41 +0000
ROA not after:            Fri 12 Apr 2024 20:37:41 +0000
asID:                     22177
IP address blocks:        189.51.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3c:36:20:1a:8e:60:af:a1:b4:2a:9b:0f:93:8a:9c:ce:fb:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Apr 14 20:32:41 2023 GMT
            Not After : Apr 12 20:37:41 2024 GMT
        Subject: CN=4798D16E8DE96D98F2B456422B3180892F0452E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:93:2b:85:10:ed:02:2f:08:6c:64:ee:27:f9:
                    ff:5e:ac:6b:49:43:b7:5d:a7:92:59:88:38:13:b5:
                    e9:f4:d9:38:8e:73:3b:00:3d:96:0e:bb:e4:ce:98:
                    a4:80:04:49:a7:4e:cf:b0:4a:24:7d:13:10:05:03:
                    e1:9e:22:a2:46:ef:45:42:fb:4e:f1:a6:e1:57:8f:
                    25:eb:0a:65:db:b8:05:f9:93:97:35:b6:e6:35:c8:
                    e5:6e:1a:d2:b9:0a:ec:99:19:43:a9:3e:46:4e:0e:
                    c9:b8:77:21:dd:0f:52:12:d2:a6:0d:f5:e0:14:a2:
                    47:8c:b5:de:08:d4:04:a1:c6:e8:92:00:df:57:74:
                    7b:05:3c:ab:0a:0e:c4:aa:56:cd:ef:bf:56:8c:3a:
                    61:c3:c7:22:d5:14:da:76:f4:4a:0f:ce:2b:0c:1f:
                    0a:f9:ef:99:74:0a:ad:67:65:dc:b2:5b:d5:aa:f3:
                    d7:0d:e7:44:03:87:45:c1:b2:e7:4b:d7:56:ef:d9:
                    4b:89:07:4d:8c:47:3e:bf:53:9f:00:2e:67:ae:1a:
                    6d:70:fd:ee:44:bb:1e:3a:4e:6f:f7:82:4b:40:39:
                    16:4d:8a:82:50:af:24:bc:22:3d:f0:5c:05:ae:13:
                    07:52:54:9f:8c:2d:51:9e:f1:52:05:97:f1:fc:2d:
                    55:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:98:D1:6E:8D:E9:6D:98:F2:B4:56:42:2B:31:80:89:2F:04:52:E5
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3138392e35312e31332e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:32:96:5c:33:89:6a:52:9f:f4:ef:2c:4f:bf:9d:25:2f:c0:
         99:c3:ea:d3:20:cf:2d:b6:39:a0:3a:6f:c6:d6:74:4c:95:7d:
         cd:a6:16:0f:88:ca:0e:3a:bf:68:a5:70:33:4e:7d:01:6b:b9:
         20:cc:6c:5c:bb:ec:56:97:76:1d:9c:05:75:92:17:f2:c9:3d:
         cc:7b:0d:bc:5e:e7:39:26:c7:af:b6:d8:84:47:8e:2e:6a:ab:
         2e:34:4e:b9:e4:fb:d0:07:5e:3d:ee:60:cd:7f:9a:b2:81:6f:
         a3:74:6e:1f:e6:0c:22:d7:91:e7:b4:e6:11:05:74:ab:de:be:
         88:94:ab:07:c3:b1:2c:1e:2f:e3:96:cb:9b:71:6b:d4:fa:6e:
         0d:db:85:fc:3a:af:99:80:40:f9:1b:d9:8e:28:a3:67:be:b3:
         62:a7:48:5b:52:9d:16:4f:50:4c:76:de:73:ed:31:b3:3e:79:
         3a:c4:cd:af:1e:97:a9:7b:20:0f:bf:03:ae:af:04:9b:3b:05:
         99:a9:8d:0a:2e:f7:46:39:b1:f9:88:21:dd:2f:fc:de:56:0a:
         84:13:60:d2:3d:2a:02:00:35:4d:2b:df:5a:ca:9e:c6:57:f7:
         fb:ab:0c:49:ca:13:63:1b:eb:af:2c:8e:4e:5e:15:a2:5e:78:
         fb:f8:4a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:24 2025 by rpki-client