Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          YvVDiczH8dIPJJ4WCaX5b15/eDDpA3uOgCP7pOxL3s8=
Subject key identifier:   55:75:26:58:17:CB:25:85:73:41:66:15:38:36:B5:D8:60:22:DF:82
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       502D0031CE90E50C38C59469A8C7C3A2D071E3DD
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa
Signing time:             Fri 15 Mar 2024 16:30:23 +0000
ROA not before:           Fri 15 Mar 2024 16:25:23 +0000
ROA not after:            Fri 14 Mar 2025 16:30:23 +0000
asID:                     22177
IP address blocks:        200.162.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:2d:00:31:ce:90:e5:0c:38:c5:94:69:a8:c7:c3:a2:d0:71:e3:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Mar 15 16:25:23 2024 GMT
            Not After : Mar 14 16:30:23 2025 GMT
        Subject: CN=5575265817CB2585734166153836B5D86022DF82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fd:19:73:3d:05:0d:a9:da:f8:64:e7:c4:f4:
                    0f:09:15:dd:15:bd:7a:20:bf:21:c4:75:72:a6:ec:
                    44:cd:2e:c2:b8:7e:08:b6:ff:35:03:56:8a:0c:14:
                    e2:0e:a6:73:13:93:d1:61:5a:e9:38:da:13:8c:9b:
                    9c:8a:88:50:6a:94:94:ad:19:83:f0:8a:53:cd:4f:
                    94:17:35:1c:18:bf:f8:62:45:5d:3f:9d:81:dc:98:
                    0e:06:a1:b5:ad:dc:00:c4:db:ec:3c:56:8d:95:27:
                    20:bd:3c:f0:d5:d3:b6:2b:3b:c5:f2:7a:30:5d:bd:
                    36:5a:1b:e6:d3:9a:f0:30:30:b4:02:52:73:a7:67:
                    73:63:b9:73:0b:73:2d:6b:90:29:be:12:e7:75:9c:
                    cf:c7:62:a3:57:65:45:16:1a:2e:46:b7:02:b0:11:
                    4d:4a:37:40:05:d8:44:b1:59:f4:91:f0:47:7b:7f:
                    bf:43:78:d3:49:bf:10:5d:11:b2:9f:8d:5e:b6:df:
                    6d:8a:d7:52:e6:c1:4a:a9:53:13:6d:66:c5:27:58:
                    9c:1e:e9:65:4b:0a:1d:3d:f9:ec:39:cc:55:95:c5:
                    6f:6c:f8:da:9f:ab:bd:d3:bf:64:84:9b:e3:d0:d2:
                    7f:02:0f:21:97:7d:ec:a6:17:ff:32:ec:83:b7:12:
                    09:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:75:26:58:17:CB:25:85:73:41:66:15:38:36:B5:D8:60:22:DF:82
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133372e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:c6:b1:dd:9e:52:ce:69:d7:d4:63:e0:b0:5d:07:1a:48:84:
         98:18:7a:68:ed:14:7d:f5:54:fd:19:4e:9c:23:38:86:b6:0e:
         64:a6:c1:ab:a1:b4:dc:9a:63:23:b1:62:43:a6:2a:5a:6b:da:
         23:28:e4:8d:3e:8b:09:c1:14:6b:3f:1a:7c:04:24:10:77:4a:
         03:bc:ac:7e:68:5e:05:6b:d1:50:c7:84:c8:26:95:25:bc:6b:
         5a:a9:c8:1d:c5:b9:63:df:ad:9b:e2:62:2f:ec:b0:3f:96:4d:
         a7:53:f6:ce:24:6b:1a:ea:c1:d5:de:49:14:7f:51:db:a3:3e:
         83:7b:8a:f2:a3:4b:f9:26:bd:cc:6e:11:ed:7a:ea:c9:04:a8:
         4f:bf:86:0d:12:20:cb:c2:72:db:5d:e1:80:75:d7:77:c4:ba:
         13:67:4a:01:29:49:cf:c1:2d:bc:f1:da:00:3b:c0:36:fe:81:
         56:10:fb:1d:18:7a:cc:00:9e:f0:7d:4c:52:28:e5:83:0f:fe:
         08:8b:91:62:b1:23:fe:6b:01:d5:fd:82:de:9d:33:68:9a:2e:
         f0:22:bf:5f:82:68:59:28:99:eb:2f:3b:27:04:d9:6c:23:73:
         8a:e3:e0:e5:88:dc:ea:2d:57:fa:dd:b6:24:df:cf:50:61:42:
         d2:86:88:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:42 2025 by rpki-client