Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133362e302f32312d3231203d3e203232313737.roa
File:                     3230302e3136322e3133362e302f32312d3231203d3e203232313737.roa (raw, json)
Hash identifier:          KOGV8s7AyEcYxrrVwi8grjuGLIDjVIfyGtRbE4hq/yk=
Subject key identifier:   AB:2E:CA:CB:1D:21:6F:7A:E9:0A:29:58:81:BA:30:8B:D3:CB:18:B8
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       51BB943A0E513C93202E12F8E6C73F845C818A0E
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133362e302f32312d3231203d3e203232313737.roa
Signing time:             Mon 15 May 2023 20:36:43 +0000
ROA not before:           Mon 15 May 2023 20:31:43 +0000
ROA not after:            Mon 13 May 2024 20:36:43 +0000
asID:                     22177
IP address blocks:        200.162.136.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bb:94:3a:0e:51:3c:93:20:2e:12:f8:e6:c7:3f:84:5c:81:8a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: May 15 20:31:43 2023 GMT
            Not After : May 13 20:36:43 2024 GMT
        Subject: CN=AB2ECACB1D216F7AE90A295881BA308BD3CB18B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:57:ae:1f:90:30:bf:72:ab:58:9c:32:85:00:
                    29:b5:01:28:52:2d:de:fc:49:a7:c7:71:38:de:a4:
                    c6:29:d0:6f:93:2b:df:d5:2c:61:cf:c9:ac:75:f7:
                    c5:5d:e4:a0:9f:2c:58:ee:62:0d:45:92:b0:87:34:
                    7d:cb:8f:8d:78:fe:98:66:be:bd:97:e3:a6:1f:21:
                    55:53:31:40:7b:b3:40:e4:d9:45:ca:34:3d:da:24:
                    9d:83:6d:31:b2:b8:4b:02:89:54:bf:4f:61:a3:c8:
                    a8:51:e6:82:42:a7:d6:a3:de:29:6a:3a:34:8f:3f:
                    ea:31:f2:8e:00:3c:59:c7:95:10:a9:1c:84:24:01:
                    d7:ab:48:b8:36:55:6d:5c:cc:4f:72:bb:87:6f:d9:
                    99:1b:36:2d:c6:69:de:69:96:8a:07:0f:a9:98:c5:
                    51:30:09:ba:40:c7:98:2e:5c:ad:26:9a:8a:a9:81:
                    02:6a:4b:81:0a:98:bb:4a:35:09:cd:02:5c:7f:44:
                    46:90:70:94:6b:f3:fe:e1:2f:23:35:ea:8b:7f:a1:
                    70:9a:59:68:40:ed:4c:94:39:6c:3f:53:f5:a7:3f:
                    4c:be:35:d0:9c:da:27:60:f0:61:8d:1b:63:02:9c:
                    a5:14:64:7b:7a:1a:11:fa:66:d0:4d:84:19:56:9d:
                    16:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2E:CA:CB:1D:21:6F:7A:E9:0A:29:58:81:BA:30:8B:D3:CB:18:B8
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133362e302f32312d3231203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:78:c2:63:f1:03:ed:c9:b4:36:89:7c:2d:cb:79:e5:e1:f3:
         f0:17:5f:84:a6:d6:1a:15:5a:c4:de:2f:2a:2a:9d:6e:e3:9a:
         52:40:05:3b:99:67:d3:e7:b3:c9:ec:34:27:68:f7:a0:5b:8a:
         bc:d3:c8:83:9a:5f:3e:01:d6:bc:1a:5f:f7:d2:35:05:34:42:
         79:c8:0c:bd:06:1d:62:6f:46:5a:5e:5d:f7:2e:22:95:1a:f6:
         6c:a6:36:e4:64:31:03:f7:5d:b7:a9:cc:f1:2e:a2:f6:b6:44:
         da:02:5a:4d:c6:5c:f6:6b:2b:fc:51:45:71:55:9c:23:0b:c3:
         6c:56:24:ec:b2:e1:ad:3b:bd:56:7a:f9:7e:60:3d:30:9a:c5:
         78:3d:3e:c7:d5:9a:5b:bd:5f:08:92:bb:5d:b7:a5:f7:4c:66:
         7c:de:99:13:a2:fb:21:94:62:ef:81:0b:ee:75:13:bc:6b:db:
         a1:64:f2:1b:24:6c:e7:56:2d:2b:47:a3:43:33:f4:7b:dd:f2:
         aa:48:ab:8e:8f:02:53:40:31:78:85:fe:e2:fd:6e:a9:5b:5d:
         8b:61:96:a2:8b:35:41:45:4c:e6:ab:a1:90:34:3a:e7:ec:ed:
         04:42:3b:ec:af:62:f1:e6:03:6a:5b:f3:c3:0f:43:65:6b:78:
         32:7d:27:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:18:50 2025 by rpki-client