Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133322e302f32322d3232203d3e203232313737.roa
File:                     3230302e3136322e3133322e302f32322d3232203d3e203232313737.roa (raw, json)
Hash identifier:          lJfqIszAeoixrGJtR/BkgeIBIcscHHofDnW3ckr5C+U=
Subject key identifier:   15:E8:82:25:E6:74:B8:44:CF:A9:4E:10:DB:C4:C8:14:C8:13:DC:10
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       2C952A521B601CD651EA46F6193CE4EBB54C24CC
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133322e302f32322d3232203d3e203232313737.roa
Signing time:             Mon 15 May 2023 20:35:31 +0000
ROA not before:           Mon 15 May 2023 20:30:31 +0000
ROA not after:            Mon 13 May 2024 20:35:31 +0000
asID:                     22177
IP address blocks:        200.162.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:95:2a:52:1b:60:1c:d6:51:ea:46:f6:19:3c:e4:eb:b5:4c:24:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: May 15 20:30:31 2023 GMT
            Not After : May 13 20:35:31 2024 GMT
        Subject: CN=15E88225E674B844CFA94E10DBC4C814C813DC10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:18:6b:31:b3:5c:46:a4:03:d1:9f:c9:b4:36:
                    72:aa:01:46:ee:19:be:47:9a:a9:61:b2:12:20:30:
                    a0:6e:af:95:eb:b5:24:4c:14:45:19:ba:67:43:7b:
                    b5:40:60:1e:71:41:4a:4e:ac:23:89:5a:17:83:44:
                    a7:a6:aa:ff:e4:48:f2:50:49:97:94:d3:35:28:79:
                    db:65:d9:c6:92:07:b8:79:74:2f:24:b7:be:1b:13:
                    d4:3b:78:c0:2f:7b:a7:3c:a6:ed:3c:0b:41:7a:fd:
                    3f:9a:d6:c7:44:c6:6b:8e:8d:2a:22:9b:b1:b1:3d:
                    96:5d:86:ef:f8:5a:b5:63:f9:35:1f:02:1e:40:d9:
                    8e:1f:7a:4f:a6:01:56:af:b3:9a:e9:2f:90:f2:a2:
                    2e:a6:3d:73:cf:76:3b:5b:d8:41:0b:fa:37:d2:b8:
                    90:89:ae:4a:69:e2:5d:af:12:7d:fd:11:11:69:17:
                    35:7c:a1:da:74:a6:a6:6f:79:db:41:d6:7c:0e:9b:
                    b2:7f:66:80:89:94:7f:0c:52:6e:e8:cc:25:3c:4b:
                    c8:b7:7c:31:69:00:1b:92:1c:27:4b:91:7a:19:18:
                    8d:ee:44:27:79:b1:00:61:79:c2:2d:b5:02:f4:64:
                    85:a7:a5:3f:8d:be:ff:73:e5:fc:87:fe:d3:9a:62:
                    e7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E8:82:25:E6:74:B8:44:CF:A9:4E:10:DB:C4:C8:14:C8:13:DC:10
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133322e302f32322d3232203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:18:53:d1:3f:04:60:a5:d6:e4:9d:8e:9c:fc:b3:ef:0c:d8:
         cb:c4:12:19:96:0b:ef:4b:0b:95:c1:b9:16:ab:f8:b2:bb:f3:
         d7:96:cb:73:13:a3:b5:54:22:f2:78:c9:35:e2:e7:9d:82:6c:
         6c:ad:5e:ff:38:9a:db:50:5e:00:ba:d6:31:8a:66:42:4a:5a:
         f5:02:42:40:0e:44:e1:61:5b:f1:01:f0:aa:9d:63:a7:7c:ac:
         f0:73:d8:37:3a:e6:61:a3:e2:76:e9:69:c1:11:aa:9f:e9:10:
         9d:f6:14:9b:92:cc:08:32:2d:91:04:48:af:b2:0d:72:c8:11:
         ac:56:e8:0c:45:dc:b7:08:14:0a:42:1f:61:9a:e7:32:e9:f7:
         bf:03:79:a3:da:79:a3:0a:26:d4:ef:15:ba:a6:bf:d4:1e:07:
         f5:07:ae:10:79:32:f5:90:20:00:2d:f8:da:5f:e6:69:45:cb:
         be:ae:06:51:1e:b8:3c:37:c7:53:71:1b:a9:70:c4:ef:5f:47:
         88:cf:c4:f6:82:49:a3:24:65:25:52:4c:61:f3:1c:1b:1e:07:
         e9:34:df:36:66:4a:9d:ba:b0:e9:91:68:97:79:8a:ae:b6:e0:
         72:34:03:2a:2f:1f:12:d8:01:15:13:e4:82:4b:6e:66:81:3c:
         a3:a3:59:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org