Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3134302e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3134302e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          WFXwbG/EvnYafmB3xwEchZsPdoIHuDql1tL4TTEB5sk=
Subject key identifier:   93:81:C6:B6:B1:B6:F8:80:71:C0:4D:CE:09:02:06:9A:14:47:B5:B7
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       2AF7B71AEC6986AE834399A7AD57284BEDECD154
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3134302e302f32342d3234203d3e203232313737.roa
Signing time:             Fri 15 Mar 2024 16:30:22 +0000
ROA not before:           Fri 15 Mar 2024 16:25:22 +0000
ROA not after:            Fri 14 Mar 2025 16:30:22 +0000
asID:                     22177
IP address blocks:        200.162.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f7:b7:1a:ec:69:86:ae:83:43:99:a7:ad:57:28:4b:ed:ec:d1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Mar 15 16:25:22 2024 GMT
            Not After : Mar 14 16:30:22 2025 GMT
        Subject: CN=9381C6B6B1B6F88071C04DCE0902069A1447B5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:02:45:ab:6f:e6:42:ae:66:52:85:ae:46:
                    e0:c2:b8:25:fc:37:f2:03:22:97:9e:59:e8:7f:bb:
                    e2:79:2d:18:7d:2f:e2:38:79:06:ec:5f:a5:52:b0:
                    0a:94:96:89:c4:4f:53:63:2e:85:a9:ef:93:9a:13:
                    d9:e9:63:41:9d:ff:f8:c3:d9:c3:6a:ce:8a:e0:44:
                    62:90:67:c3:c6:90:e8:46:b6:36:24:1e:24:e5:41:
                    bc:f9:f7:95:ef:8f:47:34:0b:80:f3:df:14:b5:c0:
                    d8:aa:61:36:a2:b4:8c:ab:e7:04:35:00:83:d4:00:
                    e5:0c:02:68:78:da:be:03:44:68:32:58:17:d9:2c:
                    2a:d2:ff:48:e3:9b:08:de:a8:8c:ef:f0:aa:e7:1a:
                    fd:bd:75:48:ef:f7:a3:e4:90:9c:70:7c:3b:26:b1:
                    f6:a5:ce:d4:11:ea:e9:c3:9c:e5:02:22:79:cc:84:
                    67:57:14:5f:f3:5d:e3:98:e0:f4:be:38:05:e6:93:
                    c1:53:fc:d6:6f:cd:d3:ad:b8:ea:83:d3:82:d3:bb:
                    b7:14:dd:1b:99:e2:38:05:07:42:a2:3d:79:d1:3e:
                    e9:b0:67:77:5e:b3:74:f5:98:59:7c:0d:89:39:40:
                    38:5b:04:91:23:8a:78:f1:c3:b7:19:57:2f:0f:9b:
                    fd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:81:C6:B6:B1:B6:F8:80:71:C0:4D:CE:09:02:06:9A:14:47:B5:B7
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3134302e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:bc:ae:8b:23:d2:52:89:3e:b6:22:17:10:d3:56:f0:7c:fa:
         d3:bf:13:03:bf:83:4d:02:df:0c:93:c7:2e:d7:e0:8f:c2:f2:
         a3:46:a9:53:bf:6d:5a:83:b1:68:ea:a9:4a:d4:46:4c:00:88:
         d8:e0:71:3a:93:05:b4:33:89:be:a1:ed:d6:2f:89:1d:13:a0:
         e8:74:52:ea:f0:a7:20:a4:c2:78:fc:6a:a8:52:e2:ae:9e:c2:
         a9:17:bd:10:9f:c1:e3:62:e2:2d:41:44:c4:52:57:95:6d:6f:
         f1:3c:71:64:a8:29:96:11:b6:15:56:5a:6e:de:b1:83:d7:c6:
         e0:74:6c:f4:05:b2:ae:73:b4:c1:eb:47:11:97:96:12:f4:35:
         f5:cd:00:79:f0:e7:b2:f8:a0:b6:93:60:09:77:b4:81:ad:96:
         8b:46:15:15:27:30:a1:30:44:b8:7b:2d:ab:17:da:1e:90:14:
         a5:5e:bd:89:9a:b3:3a:5a:b9:9b:67:4e:4e:db:a0:a7:9c:08:
         62:e9:32:25:07:95:29:88:28:18:70:c6:9a:52:5e:a7:50:1b:
         3a:53:f3:b9:3b:87:39:d7:54:7c:47:9c:05:c1:59:2c:f4:4e:
         e1:b0:88:7f:4b:97:77:6c:26:72:58:24:0b:c9:bb:12:ee:19:
         f2:03:15:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org