Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3138392e35312e31342e302f32332d3233203d3e203232313737.roa
File:                     3138392e35312e31342e302f32332d3233203d3e203232313737.roa (raw, json)
Hash identifier:          e3yBgBMu/a8HndMYqFJHglJiVY020iSmx5GT3kxierk=
Subject key identifier:   44:E7:2B:95:23:03:A3:0B:2E:50:35:36:B3:19:70:25:DB:22:08:A8
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       0EE80CC1E9DBCC6C9FA6320BF2A5568733932852
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3138392e35312e31342e302f32332d3233203d3e203232313737.roa
Signing time:             Fri 14 Apr 2023 20:37:55 +0000
ROA not before:           Fri 14 Apr 2023 20:32:55 +0000
ROA not after:            Fri 12 Apr 2024 20:37:55 +0000
asID:                     22177
IP address blocks:        189.51.14.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e8:0c:c1:e9:db:cc:6c:9f:a6:32:0b:f2:a5:56:87:33:93:28:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Apr 14 20:32:55 2023 GMT
            Not After : Apr 12 20:37:55 2024 GMT
        Subject: CN=44E72B952303A30B2E503536B3197025DB2208A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:82:ea:63:9f:ec:5c:d3:61:70:59:fc:cc:
                    2e:4d:d1:57:31:5c:0c:9c:2f:d6:27:3d:e1:41:ff:
                    41:f9:7c:ce:5d:bb:2b:8e:bb:b1:80:4b:98:03:82:
                    2c:4c:63:dc:ee:a2:fb:43:19:81:fc:4c:d0:ec:46:
                    54:a3:9f:dd:7a:74:37:58:bd:21:9b:88:80:f4:3f:
                    8d:a0:d3:8d:7f:d1:21:af:f9:ad:ee:ab:12:4d:cd:
                    4e:0c:0a:13:c9:dd:3d:62:d6:c3:74:ed:bf:4b:50:
                    f7:03:94:d4:10:85:3f:33:16:52:2a:03:0d:98:c4:
                    50:78:2d:73:78:33:9e:52:fa:b3:30:f3:fc:f7:fc:
                    37:6c:50:fb:bc:34:19:b2:9c:8f:72:2b:29:41:a5:
                    9d:23:fc:27:b8:2e:c2:4e:10:65:7c:f0:9b:e7:b2:
                    8e:f7:2d:f9:ce:16:0b:eb:62:c1:7f:2d:88:b6:3f:
                    07:7c:c3:a4:92:f0:99:a2:0f:ae:1a:e5:6e:69:52:
                    98:6f:ae:65:14:f3:b9:7e:91:ee:f3:7d:49:3f:87:
                    ef:c4:34:d5:8f:46:f5:08:0f:c5:a5:2b:95:f8:77:
                    53:7f:9e:2e:af:fa:72:cd:92:62:9d:09:32:20:88:
                    b3:0b:29:a6:66:60:fa:0f:2b:d7:44:93:c4:f8:b4:
                    d0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E7:2B:95:23:03:A3:0B:2E:50:35:36:B3:19:70:25:DB:22:08:A8
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3138392e35312e31342e302f32332d3233203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:cc:ae:39:00:a7:3f:4f:ea:52:f9:ff:30:e1:bd:24:f8:87:
         9c:eb:fb:d5:ba:35:0b:2a:ab:9f:0a:40:4b:cb:11:21:b4:de:
         6d:55:33:50:bf:91:80:5f:74:fa:dd:31:58:49:1f:46:4a:e4:
         b4:d1:b2:0c:da:e3:16:c7:a6:9b:a8:90:b9:41:e8:00:35:a3:
         20:05:11:1a:24:c8:58:18:ed:7f:a4:53:2a:e9:64:47:c2:2f:
         18:70:28:67:46:d8:47:7f:9a:82:7f:83:27:ac:4f:54:02:07:
         d2:23:37:40:7b:f0:3c:f2:a3:2d:23:dd:2f:e4:44:a4:07:67:
         9f:c2:45:0f:2c:05:22:a6:63:a5:fe:83:fe:75:2b:a6:56:c8:
         1b:23:9b:0e:36:5f:ef:a4:24:81:80:f9:bf:02:9b:52:af:61:
         9b:19:aa:43:9f:bd:9f:e5:ff:80:3d:22:ae:f3:46:56:ed:1a:
         bd:e3:4c:25:30:05:a7:14:33:ec:ae:2d:90:96:15:d2:db:f4:
         0d:81:03:e4:1f:02:b6:1e:75:bb:3a:7d:67:f0:0f:81:17:e7:
         f4:b2:f9:18:cc:10:92:aa:27:52:7c:01:21:07:4e:2c:74:45:
         1d:87:c1:69:db:b4:19:2a:3d:0e:a1:57:bf:03:83:2d:1b:67:
         09:44:ac:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:29 2025 by rpki-client