Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133362e302f32332d3233203d3e203232313737.roa
File:                     3230302e3136322e3133362e302f32332d3233203d3e203232313737.roa (raw, json)
Hash identifier:          0896qZ8qRRktzRWeCFT/pVgTIxaUwsRhK5lPR41kBh8=
Subject key identifier:   12:2D:8F:99:50:80:EA:7C:64:4C:B9:2C:F7:E3:9F:6D:15:5D:8F:88
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       7F7EA8A3873B5D05E8749CA096B9FB4C70F26D17
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133362e302f32332d3233203d3e203232313737.roa
Signing time:             Fri 14 Apr 2023 20:41:15 +0000
ROA not before:           Fri 14 Apr 2023 20:36:15 +0000
ROA not after:            Fri 12 Apr 2024 20:41:15 +0000
asID:                     22177
IP address blocks:        200.162.136.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:7e:a8:a3:87:3b:5d:05:e8:74:9c:a0:96:b9:fb:4c:70:f2:6d:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Apr 14 20:36:15 2023 GMT
            Not After : Apr 12 20:41:15 2024 GMT
        Subject: CN=122D8F995080EA7C644CB92CF7E39F6D155D8F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:21:50:ad:3d:b7:92:88:17:2a:83:a6:62:c7:
                    a1:cd:d8:68:e0:ba:a1:6c:34:24:00:bb:8f:06:98:
                    15:7c:e8:47:1d:b1:bb:a9:a9:f3:71:1f:7b:24:3e:
                    60:04:b4:2d:a2:28:37:45:82:80:08:d4:f0:2f:f3:
                    25:ba:44:20:a4:c5:e0:8a:c4:97:84:fd:3f:82:4b:
                    05:1c:a3:b4:0e:7b:c5:72:ee:14:52:a3:4d:75:1a:
                    d5:47:1c:22:6d:6e:85:fc:9b:18:56:12:7e:13:d7:
                    d9:6f:66:00:77:5c:54:10:4a:68:77:5e:cd:c7:65:
                    ba:76:b1:73:3d:21:5b:8f:28:5a:d4:b5:76:72:a8:
                    23:cd:e8:5d:f7:5e:91:28:a4:78:f4:a2:79:ff:bd:
                    10:67:4a:7f:69:c8:05:90:49:44:31:11:ed:c7:b0:
                    20:83:d0:7d:46:86:b3:ed:41:da:f2:83:4f:26:bc:
                    37:bf:0f:e7:f1:58:08:e9:1f:f5:f3:f6:27:61:88:
                    37:e2:6c:40:bf:eb:e0:88:1c:6d:ef:53:40:b5:19:
                    fe:0c:de:d4:95:7f:80:a5:c4:9f:16:ba:36:1f:27:
                    e6:fd:ed:54:e1:e0:28:37:c7:76:1d:e1:e1:ad:d5:
                    ce:4f:f0:16:cc:6e:9d:40:76:5c:f3:45:b6:54:b6:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2D:8F:99:50:80:EA:7C:64:4C:B9:2C:F7:E3:9F:6D:15:5D:8F:88
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133362e302f32332d3233203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:02:a0:ec:ed:be:bc:c7:d1:d6:ad:a2:0b:19:10:c4:88:0f:
         cb:b4:06:fd:71:00:c4:a5:b0:ce:c5:64:cf:39:36:43:db:09:
         b5:ae:19:f2:a9:67:4e:c8:c3:40:d6:01:ca:ae:47:5b:3e:34:
         83:2d:0b:be:4a:e7:ef:a4:9c:97:99:32:cc:48:d5:67:4d:ac:
         5d:f6:02:f0:c4:42:62:a7:4d:89:1f:16:45:c3:29:66:c6:44:
         41:4e:5e:0c:35:31:55:3c:14:bb:ac:a4:97:fa:71:12:3a:78:
         37:c5:eb:c8:bd:f9:bd:96:7a:0b:44:68:cf:b2:a1:10:1a:39:
         c9:14:ea:e5:3f:29:61:20:5d:27:22:5b:10:7e:7d:50:ec:f6:
         ff:9d:52:f4:cc:47:ea:8b:4c:fe:19:08:d9:27:e6:35:e2:fe:
         24:ab:f9:0c:26:d0:65:73:f7:a8:57:15:31:9a:57:8d:45:4b:
         0e:be:4c:e7:c7:bc:b3:79:30:5d:9f:8f:7a:96:fd:02:99:0d:
         fb:4f:3b:99:7b:d1:95:5f:cf:67:8f:4f:10:c5:ce:f4:d1:ef:
         00:dc:2c:ec:71:b9:6a:09:c1:fc:8e:e1:e2:92:4e:2e:40:12:
         3b:02:9e:c1:3e:ec:ad:2d:e4:69:d6:a5:e1:92:0f:8f:b2:eb:
         fa:72:2b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:01:35 2025 by rpki-client