Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133342e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133342e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          Rrhe6+oimw9jBgcD0kVQv2EzjQEyGoKR9LpIL9suNT8=
Subject key identifier:   C3:52:A7:BA:78:34:71:C1:1F:48:0C:9D:80:A7:BD:BE:7E:6C:2F:05
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       25E0E355165E861B6398B194A8CFD86B87E63C3C
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133342e302f32342d3234203d3e203232313737.roa
Signing time:             Fri 15 Mar 2024 16:30:22 +0000
ROA not before:           Fri 15 Mar 2024 16:25:22 +0000
ROA not after:            Fri 14 Mar 2025 16:30:22 +0000
asID:                     22177
IP address blocks:        200.162.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:e0:e3:55:16:5e:86:1b:63:98:b1:94:a8:cf:d8:6b:87:e6:3c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Mar 15 16:25:22 2024 GMT
            Not After : Mar 14 16:30:22 2025 GMT
        Subject: CN=C352A7BA783471C11F480C9D80A7BDBE7E6C2F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:39:4b:df:f5:46:81:9b:55:a7:b0:cb:b5:19:
                    21:51:45:c0:e3:06:28:29:50:88:5f:ae:7a:d7:be:
                    98:2a:19:e4:85:75:8f:a3:a1:98:54:78:36:2e:ff:
                    8f:0a:90:d8:1e:49:df:9a:22:ef:c6:5c:81:e5:ac:
                    e8:a0:af:a3:57:8e:c3:2c:12:a8:60:43:7f:f4:ea:
                    60:a3:1f:23:0a:e9:f6:cc:e9:13:3a:3a:99:e4:9f:
                    71:f1:f1:66:cf:c9:49:2d:7d:6f:91:07:af:71:69:
                    af:90:9c:a4:41:55:95:d6:f2:67:df:f3:ae:e9:11:
                    91:15:b5:aa:30:ca:02:d3:c1:cb:d1:c2:ae:40:6c:
                    b7:2d:fe:73:04:76:85:ac:75:97:aa:55:a0:9c:ff:
                    7e:d8:46:65:dc:0a:4d:2c:50:4d:2d:7d:bd:c5:d7:
                    a5:1c:01:d8:f2:b5:eb:67:24:2b:27:4a:74:7a:ac:
                    dd:7b:1a:3b:10:96:2c:30:d7:09:ad:bc:23:a0:7b:
                    e3:2a:4f:a9:38:18:3f:ba:e5:bc:4c:e3:fe:7e:c7:
                    c4:ac:12:a1:51:0f:3c:b1:31:b9:66:bb:90:ea:e9:
                    55:db:95:9b:73:91:e6:44:ed:c1:bd:6e:7e:f6:3d:
                    c3:39:b3:57:5e:69:63:d8:e3:9f:86:5d:05:78:2d:
                    29:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:52:A7:BA:78:34:71:C1:1F:48:0C:9D:80:A7:BD:BE:7E:6C:2F:05
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133342e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:c0:bd:39:3a:e5:8a:0f:b5:58:c1:39:c0:06:d4:06:56:a8:
         a4:c1:aa:f8:9f:79:f1:87:90:66:f0:d9:9f:c8:8d:f7:ac:a1:
         01:5d:26:74:60:f9:d1:c3:2e:86:07:0f:de:44:68:1a:3d:bd:
         64:85:ba:62:4d:49:79:da:3b:54:00:1d:8e:6a:27:22:1e:d0:
         79:26:ed:1f:f9:00:fe:ad:36:83:ba:f0:02:2c:57:89:8a:1f:
         f4:5f:d2:43:05:e7:1a:dc:47:67:47:73:7f:f1:95:14:18:ca:
         87:a5:a9:87:5f:0e:b9:b8:0a:57:57:a7:f0:31:59:d5:3f:9c:
         0c:cf:99:53:15:9a:ca:9f:96:7a:a4:f1:3a:78:70:f5:a1:1d:
         cd:7a:30:2d:7a:00:11:0f:56:71:70:6e:4a:d9:1e:22:92:2d:
         64:49:53:65:94:83:3b:55:35:28:92:9d:bc:2a:04:37:76:85:
         4d:01:b4:79:4f:ae:74:98:13:a9:13:40:ac:50:03:33:5e:4a:
         6f:58:64:a8:31:88:3c:30:ab:dd:97:56:77:ae:f2:f5:c2:d0:
         aa:41:77:13:03:a5:d5:e0:71:22:d3:9d:05:6f:40:2c:64:0e:
         95:63:76:d5:89:57:a1:1a:7d:19:cd:cf:7c:8b:9b:f8:2f:22:
         8c:8f:c8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org