Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3138392e35312e342e302f32332d3233203d3e203232313737.roa
File:                     3138392e35312e342e302f32332d3233203d3e203232313737.roa (raw, json)
Hash identifier:          0AXhlhWj2rUGbNSXVdi+/MlpTP0ir2ntmyc2nY1K5zQ=
Subject key identifier:   3D:58:15:36:F1:1B:FE:00:10:18:B8:D4:6D:D3:6D:00:E3:0F:DA:EA
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       730DF3801ED17222D20C5BCCD0B5D346DEF7327F
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3138392e35312e342e302f32332d3233203d3e203232313737.roa
Signing time:             Fri 14 Apr 2023 20:27:58 +0000
ROA not before:           Fri 14 Apr 2023 20:22:58 +0000
ROA not after:            Fri 12 Apr 2024 20:27:58 +0000
asID:                     22177
IP address blocks:        189.51.4.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0d:f3:80:1e:d1:72:22:d2:0c:5b:cc:d0:b5:d3:46:de:f7:32:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Apr 14 20:22:58 2023 GMT
            Not After : Apr 12 20:27:58 2024 GMT
        Subject: CN=3D581536F11BFE001018B8D46DD36D00E30FDAEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:78:80:fc:38:f0:a9:a7:c6:2e:07:e4:2d:a8:
                    2c:5b:d2:72:e5:83:7a:44:21:a3:a3:0c:ab:95:ea:
                    a2:d8:ab:28:e0:c8:e3:c2:3a:ca:7e:02:af:57:21:
                    4a:87:ff:01:06:80:fc:c6:ee:41:ac:99:29:dd:c9:
                    c2:c7:16:65:e5:7d:d1:9e:b4:9f:64:e5:50:10:0c:
                    3d:79:20:d7:00:74:85:1e:29:20:d7:d6:de:e9:d0:
                    be:1c:65:de:42:12:4b:1a:fa:02:ae:bb:96:cd:d1:
                    86:6e:14:a9:f3:0e:c7:87:a3:2a:13:66:65:1a:f2:
                    a8:76:4b:e8:bc:21:e1:fe:58:4b:7d:c4:6a:1e:19:
                    11:e9:7a:6e:52:de:24:9e:19:f9:4f:28:70:5d:8c:
                    37:12:bf:c6:37:bc:02:28:c2:bd:0f:cb:b7:37:75:
                    e4:1c:07:24:52:86:50:7c:40:55:8d:0d:83:22:f5:
                    cd:51:37:37:97:b0:8c:5f:c7:94:c8:de:50:4a:5a:
                    d7:12:f1:3c:52:c6:e6:f6:67:ef:39:1d:7f:93:0b:
                    39:35:3b:dc:53:24:a6:b0:90:56:52:34:5c:93:ce:
                    12:7d:25:e5:e9:84:6b:6e:72:2e:1a:0e:d7:a4:e9:
                    f9:74:97:9f:b4:ad:37:9b:3b:44:56:48:a3:32:05:
                    41:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:58:15:36:F1:1B:FE:00:10:18:B8:D4:6D:D3:6D:00:E3:0F:DA:EA
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3138392e35312e342e302f32332d3233203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:cf:d7:76:35:6e:8c:ed:65:0e:6e:12:01:6f:dc:b5:0d:35:
         91:e3:42:14:51:e8:76:04:b8:bc:61:94:01:77:8f:c7:2f:91:
         1e:19:14:16:4e:0d:1e:3b:0f:b8:0a:29:5c:90:26:29:c5:f6:
         75:84:c5:52:4c:74:4c:7c:21:5d:64:d6:41:fe:45:b5:3e:a8:
         f5:9c:df:05:a9:1b:25:a9:6d:b8:33:9f:7e:f8:01:1d:08:9c:
         bb:7d:28:0e:c6:a1:93:59:68:c2:3c:42:62:b9:09:9c:2b:0c:
         7e:26:6e:27:18:08:6f:9d:93:6b:dc:0d:71:83:ea:b3:3d:f1:
         67:d3:ff:21:19:b7:d7:98:e8:be:00:40:90:09:14:bb:61:ef:
         67:5e:d8:59:34:97:da:46:d6:5c:c4:da:90:41:07:64:25:4f:
         0f:ae:ff:54:e4:60:cd:d2:ed:09:4f:13:79:42:d3:42:12:b4:
         25:4f:81:f4:b9:24:cd:6f:b5:a1:86:9d:be:37:73:a2:e7:74:
         2f:e0:b3:5e:c8:e6:06:30:70:49:de:22:2d:b0:0e:14:12:61:
         dd:d6:4e:90:9d:a5:9e:4f:63:f3:56:27:91:76:48:1f:ca:6c:
         6d:67:08:67:f8:f2:6d:0d:51:25:d2:04:58:8c:2b:3e:3f:b1:
         f4:1e:98:f5
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUcw3zgB7RciLSDFvM0LXTRt73Mn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU2OEM3OTNFQ0Y0NDIyOUVBRUFEMjJBNEVDMjVGODM4
RTFCRkYxODAeFw0yMzA0MTQyMDIyNThaFw0yNDA0MTIyMDI3NThaMDMxMTAvBgNV
BAMTKDNENTgxNTM2RjExQkZFMDAxMDE4QjhENDZERDM2RDAwRTMwRkRBRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/eID8OPCpp8YuB+QtqCxb0nLl
g3pEIaOjDKuV6qLYqyjgyOPCOsp+Aq9XIUqH/wEGgPzG7kGsmSndycLHFmXlfdGe
tJ9k5VAQDD15INcAdIUeKSDX1t7p0L4cZd5CEksa+gKuu5bN0YZuFKnzDseHoyoT
ZmUa8qh2S+i8IeH+WEt9xGoeGRHpem5S3iSeGflPKHBdjDcSv8Y3vAIowr0Py7c3
deQcByRShlB8QFWNDYMi9c1RNzeXsIxfx5TI3lBKWtcS8TxSxub2Z+85HX+TCzk1
O9xTJKawkFZSNFyTzhJ9JeXphGtuci4aDtek6fl0l5+0rTebO0RWSKMyBUFtAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUPVgVNvEb/gAQGLjUbdNtAOMP2uowHwYDVR0j
BBgwFoAUlWjHk+z0Qinq6tIqTsJfg44b/xgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMC85NTY4Qzc5M0VDRjQ0MjI5RUFFQUQyMkE0RUMyNUY4MzhFMUJGRjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1NjhDNzkzRUNGNDQyMjlF
QUVBRDIyQTRFQzI1RjgzOEUxQkZGMTguY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzAv
MzEzODM5MmUzNTMxMmUzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzIzMTM3
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAG9MwQwDQYJKoZIhvcNAQELBQADggEBAAfP13Y1boztZQ5u
EgFv3LUNNZHjQhRR6HYEuLxhlAF3j8cvkR4ZFBZODR47D7gKKVyQJinF9nWExVJM
dEx8IV1k1kH+RbU+qPWc3wWpGyWpbbgzn374AR0InLt9KA7GoZNZaMI8QmK5CZwr
DH4mbicYCG+dk2vcDXGD6rM98WfT/yEZt9eY6L4AQJAJFLth72de2Fk0l9pG1lzE
2pBBB2QlTw+u/1TkYM3S7QlPE3lC00IStCVPgfS5JM1vtaGGnb43c6LndC/gs17I
5gYwcEneIi2wDhQSYd3WTpCdpZ5PY/NWJ5F2SB/KbG1nCGf48m0NUSXSBFiMKz4/
sfQemPU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:48 2025 by rpki-client