Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133322e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133322e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          gxKdkGecFk5N9AfR6yTVdQ8PutuQM20nrnduxB+KyQU=
Subject key identifier:   32:8C:81:4A:53:37:36:2E:9B:97:6A:58:B1:5C:4C:F0:3D:EB:D0:76
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       346A09985417B5728A3A5CBA5B512A18EB16ECD0
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133322e302f32342d3234203d3e203232313737.roa
Signing time:             Fri 15 Mar 2024 16:30:20 +0000
ROA not before:           Fri 15 Mar 2024 16:25:20 +0000
ROA not after:            Fri 14 Mar 2025 16:30:20 +0000
asID:                     22177
IP address blocks:        200.162.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:6a:09:98:54:17:b5:72:8a:3a:5c:ba:5b:51:2a:18:eb:16:ec:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Mar 15 16:25:20 2024 GMT
            Not After : Mar 14 16:30:20 2025 GMT
        Subject: CN=328C814A5337362E9B976A58B15C4CF03DEBD076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:28:14:e5:ee:af:46:4d:bf:a5:60:24:d4:e5:
                    05:68:7b:ef:97:52:0f:98:6c:53:00:e6:8b:87:52:
                    62:5f:10:1e:a2:b9:3b:08:89:2f:f9:37:1b:c9:db:
                    20:74:bb:2d:08:57:3c:e7:a9:0f:35:08:e7:c0:00:
                    a4:fc:09:3b:4b:d7:cf:c2:21:c8:23:ca:d6:fc:63:
                    d5:d1:c4:a6:7f:16:7d:ba:02:7a:be:c0:b9:6a:0a:
                    be:c3:8d:30:bd:ee:74:32:56:f2:e0:70:50:04:fa:
                    ce:d6:99:3c:58:88:53:5e:82:c0:bc:14:9e:7d:81:
                    a6:3e:b0:58:9c:95:33:67:18:7f:7c:5e:ed:44:5c:
                    a9:ce:01:01:32:c9:20:21:50:c5:15:02:23:82:1d:
                    0d:de:fc:9b:22:f5:08:09:cc:d7:6e:fe:1d:8c:b7:
                    6d:0d:5f:71:5e:1b:91:f6:e4:f3:b8:3d:27:4d:14:
                    16:0a:f0:85:9a:cb:77:d8:b4:48:81:5c:63:d5:b0:
                    30:58:29:ba:9b:6a:e2:ad:6c:3b:a6:8b:fe:28:e3:
                    e4:bf:a3:88:9e:b4:7d:79:97:69:23:90:a5:03:0a:
                    76:f9:78:ea:5c:ee:67:3e:c3:d5:b0:02:7a:23:a7:
                    a4:94:b2:a7:cf:8c:04:4e:6c:a1:d2:b2:9d:3d:cc:
                    90:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8C:81:4A:53:37:36:2E:9B:97:6A:58:B1:5C:4C:F0:3D:EB:D0:76
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133322e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ef:72:72:ad:40:8c:cc:a0:fc:d4:f3:86:0f:f3:53:ff:b4:
         ad:d1:c4:f8:51:2a:7a:b1:1d:91:ef:50:e1:6b:53:b6:d7:de:
         78:9e:77:eb:60:d1:7f:0e:bc:94:8a:da:f2:ab:52:03:72:06:
         49:05:90:23:57:5c:f1:89:bd:d9:34:04:80:a6:80:cc:ce:f6:
         bf:24:fd:75:e2:f2:a4:14:3a:63:7b:c7:88:e9:38:c4:4b:3c:
         98:a0:86:2d:50:ac:ff:3b:4d:33:19:1a:a4:d1:a3:e2:02:01:
         37:22:7d:92:de:50:d7:3d:83:2d:a9:f9:1d:6e:52:2a:18:ed:
         c3:40:aa:1a:e3:c6:9c:f9:59:dc:9c:3d:b5:82:54:f6:40:f3:
         90:d6:5e:a9:29:5d:19:be:5e:d0:e1:40:52:29:f3:5f:29:a2:
         fa:5a:56:62:08:a4:37:7f:65:12:9f:62:11:12:eb:f5:ee:3f:
         3c:dc:45:f2:ea:f9:63:1e:fa:73:4e:3b:6e:23:97:34:33:45:
         fb:3a:3e:4b:0f:7f:71:45:e0:6e:28:05:ad:b6:25:80:d2:d2:
         c6:f3:5c:b9:82:63:a7:91:ea:a1:66:b1:5f:cf:fe:92:e7:87:
         d0:95:db:ac:23:39:90:fa:67:e2:f7:5e:d4:cc:e5:e8:af:1f:
         f2:bd:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:40:46 2025 by rpki-client