Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133352e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133352e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          c9B2r89uFHOGtmrkPjlGe767wlBYyu+r7rYY9UwHfX4=
Subject key identifier:   41:60:AE:25:DC:24:CA:57:23:79:DF:E8:CA:3A:DF:24:25:CB:47:06
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       0DCCB3E72B00DDB82697C28694A8DE2FED3E9DB2
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133352e302f32342d3234203d3e203232313737.roa
Signing time:             Fri 15 Mar 2024 16:30:20 +0000
ROA not before:           Fri 15 Mar 2024 16:25:20 +0000
ROA not after:            Fri 14 Mar 2025 16:30:20 +0000
asID:                     22177
IP address blocks:        200.162.135.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:cc:b3:e7:2b:00:dd:b8:26:97:c2:86:94:a8:de:2f:ed:3e:9d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Mar 15 16:25:20 2024 GMT
            Not After : Mar 14 16:30:20 2025 GMT
        Subject: CN=4160AE25DC24CA572379DFE8CA3ADF2425CB4706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:65:2f:32:d6:b7:d9:08:99:87:b1:fd:ca:
                    9d:85:ff:ee:59:c2:5b:84:c9:8a:f9:a8:e5:cc:7e:
                    46:c2:e9:42:2b:66:60:6d:b0:3b:56:12:76:88:8f:
                    cf:e7:5e:a3:b0:36:b6:3d:b8:ea:4c:a5:9f:42:ce:
                    0d:c2:7e:f0:ad:79:92:2e:e2:57:08:02:f4:04:aa:
                    c4:06:e1:06:ce:f2:a0:a7:8a:bc:bd:c2:c7:65:7d:
                    89:c6:e8:5f:7a:98:7a:8d:be:26:fe:ec:ae:85:48:
                    1a:03:c2:b8:68:b7:77:e8:ff:0b:64:cb:c0:4d:4c:
                    d0:cd:cf:dc:65:ea:eb:82:36:6e:c7:36:55:14:59:
                    02:d8:e8:28:7c:1f:88:0e:4d:d0:4f:1b:3d:cf:c3:
                    b3:cd:45:88:c8:bc:5b:4b:db:69:1d:ad:e6:9d:50:
                    73:9b:ce:0d:92:37:b4:7f:de:ef:a3:80:a7:b6:11:
                    c5:8c:47:dd:c2:bf:9e:4c:25:84:50:04:e2:2a:28:
                    f9:4d:2f:c1:79:34:08:a8:30:40:99:64:b1:4a:35:
                    61:9f:8a:ab:32:4e:cd:f5:0a:f7:46:45:90:20:0a:
                    c8:b3:da:af:b1:9f:20:3b:ae:96:71:7b:25:0e:4d:
                    9e:bf:dd:1c:fd:3c:40:ce:3d:5f:87:51:34:ee:95:
                    c3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:60:AE:25:DC:24:CA:57:23:79:DF:E8:CA:3A:DF:24:25:CB:47:06
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133352e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:6d:18:17:b2:c4:e0:1b:89:dc:91:f4:3c:5e:74:c5:8f:3e:
         e2:92:fb:f6:81:30:50:f3:cd:0b:e2:4f:20:00:c4:df:24:ff:
         ef:99:39:39:0e:75:9e:51:8a:47:78:62:23:9f:64:12:1d:3b:
         01:4a:29:31:54:0c:2d:94:35:4b:91:4f:fc:75:ff:9e:9c:04:
         c7:f9:c1:1c:4f:96:65:79:cb:79:7e:c4:01:b9:a7:36:1c:c5:
         a3:47:4e:78:92:ec:ea:d1:ac:7e:cb:bf:d2:fa:2f:59:9b:41:
         1a:0a:04:7f:01:82:11:b4:1d:90:b2:e3:8e:76:4e:3d:f5:cd:
         47:0c:d4:92:e0:50:21:2a:f7:27:d4:10:06:cd:61:67:43:b0:
         0b:11:94:fe:7f:96:f2:6f:f5:78:e6:8d:22:af:55:56:8a:2c:
         24:64:9e:d3:1f:3a:12:83:d1:d4:f3:f8:88:7b:8c:6b:19:aa:
         4e:d7:3d:c1:29:8b:50:d9:56:c9:c0:df:26:4b:26:00:c2:2f:
         b4:1e:ae:fa:91:9c:08:8d:7e:07:a1:63:f2:76:dc:36:d7:9d:
         fe:f5:ec:01:fa:cb:cf:8e:69:14:93:12:38:c4:8a:73:68:38:
         0c:56:73:dc:e1:5b:e6:4b:fb:7b:f9:25:d8:5f:31:11:60:15:
         a9:92:85:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:50:15 2025 by rpki-client