Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3132392e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3132392e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          Li0zp7RFDVEwXvwxOB2z9Hc8QOGSNjCau2OsBWiQS58=
Subject key identifier:   EB:E2:C7:9F:F8:C2:A6:00:41:DE:BF:6A:C3:39:DC:E5:C9:61:C2:91
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       14CC8CC8C667A758D1778FCBEED7D2035184D758
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3132392e302f32342d3234203d3e203232313737.roa
Signing time:             Fri 15 Mar 2024 16:30:21 +0000
ROA not before:           Fri 15 Mar 2024 16:25:21 +0000
ROA not after:            Fri 14 Mar 2025 16:30:21 +0000
asID:                     22177
IP address blocks:        200.162.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cc:8c:c8:c6:67:a7:58:d1:77:8f:cb:ee:d7:d2:03:51:84:d7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Mar 15 16:25:21 2024 GMT
            Not After : Mar 14 16:30:21 2025 GMT
        Subject: CN=EBE2C79FF8C2A60041DEBF6AC339DCE5C961C291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:3c:c1:3c:39:bb:80:b6:86:fa:43:49:c6:30:
                    19:f2:0d:93:d2:d5:bf:59:f7:1f:92:a2:b1:b7:5c:
                    a5:04:7e:d3:78:ae:bb:7d:39:40:a6:b1:b9:71:8e:
                    47:2f:79:77:3b:b5:48:c9:f8:3e:24:f9:1d:5c:77:
                    8b:1b:1a:4a:58:e2:9f:50:03:f0:46:30:25:e2:1f:
                    30:c0:ff:dc:ee:12:37:a2:bd:43:6c:90:3a:55:a9:
                    11:81:88:c6:b6:b8:52:5f:d8:e8:61:39:e9:7d:7c:
                    52:e9:0e:db:04:97:22:f5:ff:6d:dc:b0:60:e0:09:
                    75:d2:86:ff:5f:31:50:4e:9f:65:3d:dc:c8:33:d3:
                    d6:24:36:47:c9:a6:a1:58:33:e3:d9:e2:a9:68:f1:
                    af:6e:94:ae:30:e7:05:a6:29:00:a7:a7:25:a9:e5:
                    5d:19:f9:62:27:05:2c:72:09:58:be:8b:af:f4:27:
                    d4:80:7d:c6:12:29:33:d8:95:2d:e0:aa:04:cb:b8:
                    7c:0a:85:99:8d:16:33:52:88:1e:a3:12:34:ae:36:
                    d2:3d:d7:9f:e6:2e:8e:5e:b6:e5:57:2c:02:e7:38:
                    6f:89:b9:6f:8c:36:7d:c3:57:10:13:d7:10:34:a8:
                    bb:32:2f:d8:1d:08:55:6d:29:6a:9b:66:b0:d5:b0:
                    d0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E2:C7:9F:F8:C2:A6:00:41:DE:BF:6A:C3:39:DC:E5:C9:61:C2:91
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3132392e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:d9:94:83:46:0e:b0:3c:25:85:bf:b5:db:c7:29:e8:05:96:
         b6:e6:1a:2e:31:4f:60:86:54:2b:e4:05:f7:f7:c9:d3:84:8e:
         8a:7c:2e:3d:41:38:b0:c9:6f:6f:7a:3e:e4:86:d0:93:0f:b6:
         bc:e9:77:fe:66:41:98:2e:c4:5c:57:8a:af:0e:a5:45:68:55:
         6f:48:12:d2:2c:e6:97:f4:7a:ec:7a:29:84:a7:b0:c9:d5:61:
         2d:f9:01:ae:39:ff:25:74:be:49:72:63:ab:8b:78:11:9b:43:
         72:40:0a:7c:57:f3:1c:48:7f:b4:b7:46:1f:53:28:3d:18:e3:
         52:e9:61:9d:7b:70:89:b6:c7:8d:fc:9e:2f:12:be:8f:71:0a:
         25:ce:42:e8:13:9d:77:13:91:25:ee:f9:86:44:fd:cf:b7:47:
         26:f3:3f:73:05:0c:33:be:d8:cf:44:fc:54:56:6c:78:c7:42:
         c9:5f:9f:85:d2:f9:b3:ce:e0:0b:31:25:75:af:aa:62:65:e8:
         69:d2:36:c2:8f:c4:28:f3:89:c4:f1:8e:24:b3:a0:f3:f9:fa:
         fb:96:3d:04:49:9c:86:fc:4c:fb:56:38:45:22:91:3c:76:fc:
         49:d0:14:1a:fe:98:f8:09:21:c5:57:1f:3f:e6:b8:81:59:c1:
         81:39:f0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:23:45 2025 by rpki-client