Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133342e302f32332d3233203d3e203232313737.roa
File:                     3230302e3136322e3133342e302f32332d3233203d3e203232313737.roa (raw, json)
Hash identifier:          UhJ3r8OkRTHZ6LAb1JSOIO3suvEykfuR9LhoPf17k6Q=
Subject key identifier:   91:31:A5:67:FF:8F:66:43:39:66:F8:8C:D0:02:2D:01:3B:C2:AC:3D
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       15E2A3E658382E384751D6755465C25FE13C0793
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133342e302f32332d3233203d3e203232313737.roa
Signing time:             Fri 14 Apr 2023 20:41:05 +0000
ROA not before:           Fri 14 Apr 2023 20:36:05 +0000
ROA not after:            Fri 12 Apr 2024 20:41:05 +0000
asID:                     22177
IP address blocks:        200.162.134.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e2:a3:e6:58:38:2e:38:47:51:d6:75:54:65:c2:5f:e1:3c:07:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Apr 14 20:36:05 2023 GMT
            Not After : Apr 12 20:41:05 2024 GMT
        Subject: CN=9131A567FF8F66433966F88CD0022D013BC2AC3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:14:35:5b:9f:17:88:a2:61:63:fb:a6:e4:b7:
                    d1:92:3e:73:fe:72:f1:0b:0c:16:af:c9:6c:33:ea:
                    94:3d:4a:95:c5:c9:64:5d:9b:b6:c2:ca:86:c4:74:
                    0a:0d:9e:03:c2:55:44:97:d1:fc:66:b7:8c:41:4f:
                    9e:1a:41:5e:fe:51:1c:67:d7:50:a8:1d:60:48:12:
                    3a:28:33:92:d0:05:bf:77:6d:72:1b:da:51:33:95:
                    7f:9b:35:16:81:e1:37:03:e7:80:ee:fe:3b:8a:cc:
                    29:94:cf:0a:de:01:5c:d8:a2:6e:b0:91:29:eb:c8:
                    b4:b1:f1:f2:10:45:f9:b6:bf:a0:f2:ef:56:c5:f9:
                    52:a1:1c:62:39:31:8b:7b:35:08:31:3c:b1:5c:48:
                    a0:f8:b8:2f:c1:a1:87:46:de:71:18:4d:06:57:55:
                    7e:82:3d:c8:31:04:39:fb:28:7d:bb:0b:78:63:95:
                    ab:26:e8:f6:27:40:7f:35:0c:ea:b2:19:80:56:30:
                    67:b3:9c:63:75:2e:5e:c0:a3:c6:c4:09:79:ac:0b:
                    a2:7d:6f:70:db:80:35:fe:b2:8b:b2:14:3f:ff:b7:
                    f5:b6:3f:d7:04:32:5f:d8:40:fb:93:10:49:ff:e8:
                    dd:e4:81:1c:17:3d:37:72:d0:85:08:2d:6b:49:b7:
                    71:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:31:A5:67:FF:8F:66:43:39:66:F8:8C:D0:02:2D:01:3B:C2:AC:3D
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133342e302f32332d3233203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:b6:83:52:cc:fb:e1:f9:1b:11:70:75:43:b9:b4:4e:83:90:
         45:f8:57:e2:6c:02:68:96:2c:f0:6d:72:1e:e9:3d:f5:a5:00:
         43:ff:e2:6c:ae:4b:b2:10:fa:c1:fd:95:1e:cb:4f:78:bb:ea:
         a0:bb:fa:9e:c6:b0:fe:31:eb:b4:22:fe:96:38:3b:a4:9b:11:
         ba:bb:d0:a8:52:b8:7b:41:88:78:64:ec:0f:b7:81:32:27:91:
         07:77:87:8b:36:f0:5d:24:86:10:22:b6:4e:d1:0e:09:35:0b:
         ba:24:6e:8e:54:1b:4c:bb:e0:30:a0:3f:a8:22:60:83:39:a7:
         27:11:91:bc:22:a3:93:6b:2f:8c:a8:bb:a5:f6:d0:1f:dd:bb:
         60:12:2c:68:a1:eb:89:47:f3:01:e7:00:78:97:a1:cf:ed:6c:
         e2:c9:88:fd:09:9c:4f:a8:28:ab:c1:22:2b:ab:1d:04:71:88:
         3d:3c:be:82:60:08:74:fa:79:92:96:8e:90:0e:7f:e3:4a:80:
         ba:66:1c:2d:a2:5e:fc:aa:b3:65:2b:97:80:0b:35:b6:dc:80:
         94:6a:e5:00:9e:81:04:64:47:e5:bd:fc:6f:3d:d4:d8:9e:c5:
         a5:56:28:e6:76:38:c1:53:83:64:e6:5c:12:36:6a:b0:ba:ff:
         53:17:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:43:19 2025 by rpki-client