Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3132382e302f32312d3231203d3e203232313737.roa
File:                     3230302e3136322e3132382e302f32312d3231203d3e203232313737.roa (raw, json)
Hash identifier:          ONfXiT273Lh/rWb59hNcaTVI0XCPhvg8crA9kO52Al0=
Subject key identifier:   98:17:56:2B:CC:18:39:16:7A:96:08:82:6D:6F:50:93:B0:F3:4D:08
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       7125151B4043F1A6782F1B7809C0C1658DC3D402
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3132382e302f32312d3231203d3e203232313737.roa
Signing time:             Mon 15 May 2023 20:35:15 +0000
ROA not before:           Mon 15 May 2023 20:30:15 +0000
ROA not after:            Mon 13 May 2024 20:35:15 +0000
asID:                     22177
IP address blocks:        200.162.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:25:15:1b:40:43:f1:a6:78:2f:1b:78:09:c0:c1:65:8d:c3:d4:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: May 15 20:30:15 2023 GMT
            Not After : May 13 20:35:15 2024 GMT
        Subject: CN=9817562BCC1839167A9608826D6F5093B0F34D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:de:5f:4a:1a:0c:45:5b:9f:0e:cb:73:71:c2:
                    a6:f1:f1:32:cd:52:3c:c7:0f:03:fb:38:c0:44:c3:
                    76:a6:f6:97:cd:01:1d:ee:05:07:6e:bf:ab:19:a8:
                    32:a1:21:ad:49:a7:86:c4:3f:bd:12:38:0e:2f:f2:
                    4f:5d:57:ee:98:4a:b7:c5:83:3d:bd:8b:80:9a:bf:
                    a0:e5:d2:eb:1d:d1:29:cc:3d:a5:7b:d6:77:f8:d0:
                    63:f5:02:a6:31:e5:f6:02:20:23:5f:1a:cf:25:50:
                    82:4f:02:31:ba:f0:72:29:2f:1e:2a:e2:62:ff:dd:
                    11:63:2c:a7:28:7f:94:64:80:3c:f5:76:a9:e2:c1:
                    94:6f:7b:53:b9:c1:0e:2c:64:ad:4a:86:0e:24:4b:
                    59:8e:98:f2:ad:69:42:97:97:5c:2c:01:6c:f0:4e:
                    90:db:96:cd:44:87:b2:f2:77:c7:e9:7f:22:62:00:
                    64:e2:64:6d:39:c2:02:9b:f2:f3:df:de:63:98:aa:
                    ab:9c:64:ad:a6:52:41:78:2d:b8:66:e3:d4:c2:d0:
                    bf:21:f5:75:da:2f:0e:00:4c:a0:b8:94:cc:e4:24:
                    41:d2:d7:24:35:a3:68:27:22:70:45:66:49:bc:b4:
                    a6:c0:8c:c9:57:22:0b:ab:83:68:6e:5c:44:d6:ea:
                    8a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:17:56:2B:CC:18:39:16:7A:96:08:82:6D:6F:50:93:B0:F3:4D:08
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3132382e302f32312d3231203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6c:7a:59:bf:aa:ba:36:80:52:be:4e:89:91:3e:80:80:32:ca:
         e8:f2:f9:49:79:b6:00:44:68:4c:18:85:36:ff:b3:2b:70:db:
         57:ee:cb:f3:2f:7c:58:42:b1:bc:54:a1:73:2f:e4:24:5d:5c:
         95:74:65:c5:a6:89:fa:64:10:9a:c1:24:6f:f4:de:c3:7d:c6:
         4e:cf:19:65:9f:44:d3:b2:fb:0f:80:21:f1:b6:13:94:5c:25:
         6d:bc:7c:14:8e:0c:cd:2f:1c:27:a0:9b:24:d4:95:d5:63:44:
         3b:ef:91:48:a6:86:69:da:f8:25:f5:b6:b2:c4:08:82:45:88:
         00:31:9c:16:51:0f:dc:d9:e4:9b:c9:76:35:fa:fd:a1:4a:59:
         fb:78:83:00:e3:85:ea:b0:b0:3c:59:b6:f2:4c:1b:52:07:94:
         b0:98:1e:de:72:e7:ff:38:b8:9a:41:a4:78:1f:42:d7:7b:f2:
         d5:59:df:1c:0a:66:a8:31:22:39:38:41:e6:bd:57:26:44:27:
         42:db:07:a8:33:30:44:45:42:89:5e:89:d5:ca:56:f2:89:04:
         52:9d:87:89:38:46:77:91:a6:fd:4f:75:aa:c4:4b:bd:b5:8e:
         17:0c:78:d9:60:9a:f3:07:f6:c3:d9:02:f9:03:48:aa:fe:46:
         2b:e7:f6:9b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcSUVG0BD8aZ4Lxt4CcDBZY3D1AIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU2OEM3OTNFQ0Y0NDIyOUVBRUFEMjJBNEVDMjVGODM4
RTFCRkYxODAeFw0yMzA1MTUyMDMwMTVaFw0yNDA1MTMyMDM1MTVaMDMxMTAvBgNV
BAMTKDk4MTc1NjJCQ0MxODM5MTY3QTk2MDg4MjZENkY1MDkzQjBGMzREMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT3l9KGgxFW58Oy3Nxwqbx8TLN
UjzHDwP7OMBEw3am9pfNAR3uBQduv6sZqDKhIa1Jp4bEP70SOA4v8k9dV+6YSrfF
gz29i4Cav6Dl0usd0SnMPaV71nf40GP1AqYx5fYCICNfGs8lUIJPAjG68HIpLx4q
4mL/3RFjLKcof5RkgDz1dqniwZRve1O5wQ4sZK1Khg4kS1mOmPKtaUKXl1wsAWzw
TpDbls1Eh7Lyd8fpfyJiAGTiZG05wgKb8vPf3mOYqqucZK2mUkF4Lbhm49TC0L8h
9XXaLw4ATKC4lMzkJEHS1yQ1o2gnInBFZkm8tKbAjMlXIgurg2huXETW6oo/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmBdWK8wYORZ6lgiCbW9Qk7DzTQgwHwYDVR0j
BBgwFoAUlWjHk+z0Qinq6tIqTsJfg44b/xgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMC85NTY4Qzc5M0VDRjQ0MjI5RUFFQUQyMkE0RUMyNUY4MzhFMUJGRjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1NjhDNzkzRUNGNDQyMjlF
QUVBRDIyQTRFQzI1RjgzOEUxQkZGMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzAv
MzIzMDMwMmUzMTM2MzIyZTMxMzIzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzIzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPIooAwDQYJKoZIhvcNAQELBQADggEBAGx6Wb+q
ujaAUr5OiZE+gIAyyujy+Ul5tgBEaEwYhTb/sytw21fuy/MvfFhCsbxUoXMv5CRd
XJV0ZcWmifpkEJrBJG/03sN9xk7PGWWfRNOy+w+AIfG2E5RcJW28fBSODM0vHCeg
myTUldVjRDvvkUimhmna+CX1trLECIJFiAAxnBZRD9zZ5JvJdjX6/aFKWft4gwDj
heqwsDxZtvJMG1IHlLCYHt5y5/84uJpBpHgfQtd78tVZ3xwKZqgxIjk4Qea9VyZE
J0LbB6gzMERFQoleidXKVvKJBFKdh4k4RneRpv1PdarES721jhcMeNlgmvMH9sPZ
AvkDSKr+Rivn9ps=
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:54:50 2025 by rpki-client