Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3132382e302f32302d3230203d3e203232313737.roa
File:                     3230302e3136322e3132382e302f32302d3230203d3e203232313737.roa (raw, json)
Hash identifier:          05Dhg8gJlveewqxx5s8ICcyjiGKlmJyCBJYWWYBwznk=
Subject key identifier:   8F:99:7F:08:DA:25:8A:6C:36:3C:39:D6:49:56:B8:86:9F:93:45:E9
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       10DE8BCAF1269A673E74CC9685C85A1EE34D3A46
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3132382e302f32302d3230203d3e203232313737.roa
Signing time:             Fri 15 Mar 2024 16:30:22 +0000
ROA not before:           Fri 15 Mar 2024 16:25:22 +0000
ROA not after:            Fri 14 Mar 2025 16:30:22 +0000
asID:                     22177
IP address blocks:        200.162.128.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:de:8b:ca:f1:26:9a:67:3e:74:cc:96:85:c8:5a:1e:e3:4d:3a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Mar 15 16:25:22 2024 GMT
            Not After : Mar 14 16:30:22 2025 GMT
        Subject: CN=8F997F08DA258A6C363C39D64956B8869F9345E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:13:76:d7:1c:8f:62:d7:99:c3:0f:5a:31:22:
                    19:a3:37:4a:b8:8a:0c:a3:aa:76:ae:4e:94:31:f6:
                    47:02:6a:46:5d:6c:44:5d:ab:96:cd:6d:6b:14:4a:
                    c8:90:81:54:ed:88:b3:bc:60:a5:71:da:bb:ea:29:
                    ac:ff:af:87:29:05:a5:4a:ee:6c:1b:1d:d1:16:94:
                    f7:06:54:cf:78:bf:1c:e3:29:ec:91:c6:3e:34:bd:
                    a6:f2:d5:dd:17:d1:20:2e:1e:08:77:46:41:90:4b:
                    ec:a4:b4:19:e7:16:07:4f:74:a7:34:bb:eb:b7:0c:
                    4a:91:f1:5b:65:07:ce:26:bb:f6:97:02:a7:57:69:
                    af:60:a6:b1:d3:46:14:49:83:00:1c:01:88:d5:08:
                    c0:a0:fe:88:1a:df:6b:90:fd:94:f1:6e:c2:b3:15:
                    d2:99:f8:6b:4b:86:0d:f0:3a:ea:0f:ba:91:72:58:
                    bb:05:19:78:c6:b5:c4:43:a8:ed:15:98:08:fe:db:
                    9f:6b:12:68:ad:7a:54:ef:b0:8b:ec:af:8d:55:ec:
                    78:c8:d5:86:a4:1e:a7:42:df:54:d2:c7:d1:dc:98:
                    7f:2e:99:03:48:5f:69:7f:da:df:07:6c:b0:42:e2:
                    43:62:02:49:91:75:22:51:42:68:4f:8a:1b:51:10:
                    b4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:99:7F:08:DA:25:8A:6C:36:3C:39:D6:49:56:B8:86:9F:93:45:E9
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3132382e302f32302d3230203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:ed:c8:e6:5d:af:8b:01:79:40:06:5d:f6:b0:6f:b3:3b:b2:
         cd:eb:f3:14:c9:35:05:87:9b:7d:58:b9:15:00:d1:a9:0c:b3:
         70:47:90:a5:3e:16:74:6a:06:9a:e2:33:92:95:9b:d8:5d:a6:
         b7:7a:96:ab:ff:91:51:9c:79:06:af:71:42:d3:23:b4:76:2b:
         06:07:41:f2:75:cf:48:7e:04:29:87:d4:f9:76:0b:d4:cb:04:
         b3:08:e4:e7:5f:ea:71:4b:7b:03:70:bd:71:77:41:e5:0b:bb:
         69:de:02:82:cb:6e:6c:50:68:71:21:30:93:20:bc:62:b8:80:
         31:14:bf:4d:39:03:9d:0d:1c:47:73:32:09:04:a7:8d:b2:d9:
         24:f0:bb:92:23:d3:61:f2:f1:4f:c2:a3:0c:ab:15:87:a6:64:
         13:11:4b:bb:96:da:b5:e7:4c:f9:e9:fd:38:a8:22:96:d6:68:
         97:e7:72:38:c8:69:70:1f:30:dc:25:3e:25:f8:d8:9f:b0:9c:
         3d:41:c7:f8:ff:4c:b6:09:64:45:30:ca:98:b7:e8:17:f1:4c:
         6a:94:95:93:5a:ea:24:b2:15:70:29:77:61:e2:7a:6e:69:41:
         33:fb:09:92:03:80:d4:76:d9:ff:9a:ed:cd:f1:b9:fd:22:1d:
         7b:72:14:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:36 2025 by rpki-client