Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3132382e302f32332d3233203d3e203232313737.roa
File:                     3230302e3136322e3132382e302f32332d3233203d3e203232313737.roa (raw, json)
Hash identifier:          Gpm4Y+vt/5uI42ae9V2O5uSquG5Rjvg/A1LhqFBXCK8=
Subject key identifier:   62:A5:61:AF:82:8D:F1:A6:37:89:80:D1:D7:0A:2A:98:20:E3:FE:07
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       18A11B6D296D95D49C68C658B2764BFB5286ACF1
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3132382e302f32332d3233203d3e203232313737.roa
Signing time:             Fri 14 Apr 2023 20:39:57 +0000
ROA not before:           Fri 14 Apr 2023 20:34:57 +0000
ROA not after:            Fri 12 Apr 2024 20:39:57 +0000
asID:                     22177
IP address blocks:        200.162.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a1:1b:6d:29:6d:95:d4:9c:68:c6:58:b2:76:4b:fb:52:86:ac:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Apr 14 20:34:57 2023 GMT
            Not After : Apr 12 20:39:57 2024 GMT
        Subject: CN=62A561AF828DF1A6378980D1D70A2A9820E3FE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:25:0d:11:89:9c:99:10:c8:4e:60:27:6a:6d:
                    76:df:e3:cb:e1:3c:00:6c:37:2b:b2:22:d1:d1:54:
                    7e:cb:6f:2a:28:36:3e:04:0f:d8:5b:d8:f0:2a:f4:
                    85:e2:7f:e1:71:6b:f7:89:26:e4:98:a6:9c:90:3c:
                    1d:5a:94:39:2b:d8:0c:ce:aa:57:6d:0b:90:fb:2a:
                    58:6f:27:49:09:3b:82:70:e3:03:5e:e4:b2:9b:cc:
                    eb:55:1b:f7:54:63:93:33:19:63:b7:e8:6c:66:f6:
                    78:f1:0a:7e:3c:d9:94:58:62:1a:02:8d:57:8d:03:
                    94:80:20:21:0b:7e:b2:57:86:9c:96:e5:f9:05:10:
                    c4:5b:85:86:a5:46:4d:54:d0:c0:b9:b1:96:e7:29:
                    d8:f1:24:9a:1d:c8:37:99:38:cc:60:30:dd:85:a7:
                    18:9b:f6:55:a4:43:7e:b4:cc:a5:97:94:0d:39:52:
                    f5:6f:18:94:d1:05:f5:7d:a0:48:7a:f9:b8:2c:7e:
                    ff:c4:fd:12:38:fe:94:5d:b5:67:b8:91:1b:01:ec:
                    a2:31:01:45:e0:16:09:4c:34:4f:39:36:e4:e7:7d:
                    11:e6:fa:92:85:77:bd:55:9b:c3:42:42:e9:17:0a:
                    58:4d:d6:04:af:24:4d:a1:e6:90:66:24:fe:36:76:
                    48:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A5:61:AF:82:8D:F1:A6:37:89:80:D1:D7:0A:2A:98:20:E3:FE:07
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3132382e302f32332d3233203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:52:79:2f:47:ba:33:6c:0d:c8:00:64:86:c5:2e:82:d4:1f:
         34:4e:be:47:be:4e:38:4c:6e:42:26:da:13:13:99:27:42:ab:
         63:a0:5f:c5:ea:ba:83:36:c0:70:9d:c0:5f:28:31:f0:53:d1:
         a8:87:32:a8:64:05:6e:db:86:b8:a0:3d:0e:23:a2:93:25:5e:
         0b:2e:4e:dc:0d:c0:01:32:5a:0c:ae:b9:fc:1c:89:90:ca:32:
         db:7d:49:50:3d:b0:df:ff:bc:2c:e0:c8:9d:af:c4:16:b9:d0:
         6f:0e:23:0b:06:77:fd:2b:5d:ea:05:33:02:01:35:70:6b:29:
         54:66:88:2f:99:81:b8:07:9c:83:b5:de:3e:fd:6a:ac:73:6c:
         ff:99:79:22:49:4e:4f:96:d7:d4:0e:4c:73:01:bc:32:c8:75:
         e4:6f:67:e8:84:fd:86:1b:a1:dd:ec:06:7f:15:c2:a7:86:41:
         67:41:fb:be:a0:37:2f:5b:48:14:29:c0:58:c8:79:b6:b7:bd:
         a8:ab:4d:eb:2e:cd:c6:a2:0a:d0:14:b7:36:c1:41:22:ef:59:
         87:c0:5e:77:5f:e3:0f:e0:5b:12:95:91:71:7f:54:8d:82:d3:
         e6:69:9f:8c:15:88:3e:b9:59:5a:20:19:7b:a7:09:dc:d5:2e:
         3e:3d:78:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org