Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133382e302f32332d3233203d3e203232313737.roa
File:                     3230302e3136322e3133382e302f32332d3233203d3e203232313737.roa (raw, json)
Hash identifier:          1lx0dW8xpcYXE0UCL9qXWeKixtoaMfP8t0gWQtJVH6M=
Subject key identifier:   63:74:A2:B2:02:94:64:02:15:47:E7:31:85:F8:38:95:2D:3B:32:EB
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       58229769B3457C90C63A97C5AA6EAD80528D5310
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133382e302f32332d3233203d3e203232313737.roa
Signing time:             Fri 14 Apr 2023 20:41:25 +0000
ROA not before:           Fri 14 Apr 2023 20:36:25 +0000
ROA not after:            Fri 12 Apr 2024 20:41:25 +0000
asID:                     22177
IP address blocks:        200.162.138.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:22:97:69:b3:45:7c:90:c6:3a:97:c5:aa:6e:ad:80:52:8d:53:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Apr 14 20:36:25 2023 GMT
            Not After : Apr 12 20:41:25 2024 GMT
        Subject: CN=6374A2B2029464021547E73185F838952D3B32EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:85:58:53:9e:80:c6:2d:cd:6b:e8:f2:81:99:
                    a4:58:ee:ae:cc:31:5e:06:a5:77:08:c0:f4:ce:56:
                    53:70:61:8e:06:d2:83:1e:73:6b:ff:d4:84:e6:18:
                    b2:a4:ca:1a:8c:0b:bb:4b:4c:c5:d5:95:30:38:ba:
                    2e:22:51:e0:db:6d:3a:2a:fe:bb:96:2f:f1:98:01:
                    2b:ed:f7:a7:98:f9:c6:1c:1f:c9:b0:a9:3d:38:41:
                    d9:ca:b1:ce:dc:c7:bb:cc:1b:16:dd:ef:82:7b:1f:
                    6d:ef:fc:38:68:b9:39:e4:8f:53:43:69:40:06:5c:
                    89:b1:70:70:14:bc:c3:d6:c1:72:2d:fe:be:2c:cb:
                    30:b5:9c:37:0b:81:1d:80:c4:0e:e7:13:ca:fe:00:
                    a9:9d:d8:b8:75:9c:f2:39:a9:d6:67:67:2a:dd:3c:
                    fb:5d:45:a1:0c:bb:98:61:15:0a:30:79:17:69:e1:
                    31:7b:5a:2c:bc:09:fc:14:69:c2:a2:a6:e8:1c:91:
                    1c:76:99:e6:5c:e7:4d:35:f2:fc:fe:56:d5:8a:d1:
                    22:6c:79:95:e8:33:a2:71:2a:8f:33:90:3d:15:53:
                    7c:a0:58:43:46:b4:a6:97:9f:a3:be:3d:b7:88:52:
                    38:8a:04:81:95:23:db:89:fb:c2:66:cb:a8:2b:ab:
                    69:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:74:A2:B2:02:94:64:02:15:47:E7:31:85:F8:38:95:2D:3B:32:EB
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3133382e302f32332d3233203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:37:75:9d:a5:56:16:4a:6a:3c:a5:9f:9b:48:ee:83:41:77:
         43:af:24:6b:7e:f5:4f:c5:00:4b:77:5b:ca:81:20:f3:7e:0b:
         83:7a:3d:12:76:c6:ac:c0:0f:b6:45:f4:93:64:4d:66:2b:57:
         ff:7a:67:f7:8f:9e:05:0e:be:ba:49:a8:66:73:04:61:95:82:
         93:4f:48:28:12:1a:d5:8a:07:68:b8:79:66:20:6e:6f:31:90:
         d5:8b:f7:bd:6c:f5:5e:67:28:dc:6e:4f:c6:a9:df:c7:27:66:
         02:73:b2:61:de:ab:50:50:5b:46:10:9b:24:07:20:e0:04:6c:
         38:e6:2b:0b:63:ea:f7:73:b7:8d:aa:7c:57:ba:c7:57:18:30:
         0e:57:73:4a:06:f8:4e:e1:90:b8:ed:55:b0:2f:63:87:5c:7f:
         ca:d8:56:f5:5a:ab:02:71:5d:42:16:65:0a:e8:48:84:7e:ad:
         19:35:cd:2c:bd:12:16:06:74:63:4f:15:12:b9:ac:7d:20:81:
         8e:79:27:8f:3f:ed:3a:63:81:7f:3c:08:7b:ef:b4:cc:32:22:
         58:f6:d9:e9:fe:f7:e5:b9:bd:3d:20:33:42:8a:67:37:f7:85:
         57:18:0c:04:1a:72:2d:44:6a:93:65:23:54:7a:e9:77:d8:4e:
         ba:3d:b8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:29 2025 by rpki-client