Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133362e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133362e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          UwfUadHgPdauCXVJEuPWKuVVmHCf1uL3rP9jm3dfe6E=
Subject key identifier:   FB:5A:C7:E1:08:FE:F2:08:07:60:FC:22:9A:53:81:A3:E0:C9:59:25
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       59E4272FCE6036F76149F5ED293243A93EDE2B90
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133362e302f32342d3234203d3e203232313737.roa
Signing time:             Fri 15 Mar 2024 16:30:21 +0000
ROA not before:           Fri 15 Mar 2024 16:25:21 +0000
ROA not after:            Fri 14 Mar 2025 16:30:21 +0000
asID:                     22177
IP address blocks:        200.162.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e4:27:2f:ce:60:36:f7:61:49:f5:ed:29:32:43:a9:3e:de:2b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Mar 15 16:25:21 2024 GMT
            Not After : Mar 14 16:30:21 2025 GMT
        Subject: CN=FB5AC7E108FEF2080760FC229A5381A3E0C95925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ae:84:95:cb:65:1b:e8:27:26:ea:ab:d2:5e:
                    7e:71:64:ac:11:09:f1:91:02:c5:71:6c:34:bc:ba:
                    4f:02:d5:84:64:9f:b0:83:b5:d9:47:5b:09:2d:43:
                    9d:37:54:6e:35:70:3b:a7:24:3c:34:33:d2:36:f7:
                    fd:3a:43:6b:23:8a:1d:5e:f9:f8:4e:f6:e2:d1:8d:
                    f0:c3:5a:2f:3f:58:79:c2:fe:3a:7f:6e:d7:2b:86:
                    e3:4d:f4:0f:0d:e1:ec:5c:c1:c9:ec:53:1c:d0:8f:
                    8a:1a:11:c7:d1:bd:4f:2f:75:fd:65:7a:38:72:e7:
                    bc:7e:7d:d3:ff:d5:d9:b4:7d:4a:84:1c:ce:fd:11:
                    fe:86:5d:90:e9:cc:56:3d:31:75:6d:b2:ed:88:fc:
                    8a:75:a5:f3:d3:6a:90:9e:e9:d7:20:fb:3d:a1:3e:
                    59:85:85:f2:52:39:1e:29:92:32:bf:fe:2f:57:38:
                    3f:3d:a4:c6:fd:0c:c9:36:cd:02:82:f3:3a:61:83:
                    bf:3b:01:7f:6a:aa:5e:a2:5c:07:55:c9:96:48:c4:
                    ff:65:1d:50:43:ab:14:e8:ee:97:e8:cf:1a:75:ee:
                    8f:f8:d6:9f:5b:97:c5:14:48:90:f7:3b:80:a2:91:
                    fa:cf:23:4e:0f:0a:4f:2c:6a:4c:70:c6:9a:d8:16:
                    fa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5A:C7:E1:08:FE:F2:08:07:60:FC:22:9A:53:81:A3:E0:C9:59:25
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133362e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:e9:2d:90:f4:63:3b:04:f1:c3:2c:46:48:92:14:f9:2f:59:
         5c:26:8a:0e:07:62:13:48:e0:ad:bd:ab:81:b2:d9:1a:26:8f:
         86:bc:73:22:59:96:51:57:6a:51:53:79:7e:49:f9:29:dd:c4:
         42:aa:a3:12:de:32:d4:15:0e:07:2b:06:09:52:8b:05:f0:6b:
         00:73:7c:2c:89:71:d5:c1:fb:fd:b5:f0:b8:2f:60:e7:f6:85:
         54:26:65:cc:ec:b9:e0:be:0b:0a:64:e7:d6:27:07:c7:55:a1:
         48:b0:a8:c8:b3:23:f1:33:96:d5:07:42:76:35:d7:ce:a1:ad:
         68:d4:6d:8e:70:d1:52:45:3f:43:7d:34:2b:03:64:74:e7:71:
         ac:1b:92:77:a2:dc:64:5d:cc:2e:21:e4:8a:4d:03:a0:cc:7e:
         bf:9c:37:76:4c:84:ed:9d:22:34:58:a9:08:db:5b:67:3f:4a:
         a7:b0:ab:fa:dd:8b:bf:db:09:3b:b3:66:5c:a6:2d:00:2c:b0:
         3c:95:a9:e9:42:b1:5d:1c:fa:85:29:13:fa:75:02:5b:98:f7:
         1e:8f:5b:f7:f4:1b:39:a4:72:30:7c:31:b9:21:57:f4:81:4c:
         b6:64:52:7f:0f:94:6c:16:4e:0f:7f:00:9b:fa:dc:36:9b:fd:
         78:18:46:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:16 2025 by rpki-client