Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3134322e302f32332d3233203d3e203232313737.roa
File:                     3230302e3136322e3134322e302f32332d3233203d3e203232313737.roa (raw, json)
Hash identifier:          0VJzmlmnHKDiIBcf8T9JM5b3iNV5x/gIWJPptfOZqeM=
Subject key identifier:   69:9F:44:AE:B6:85:B9:C5:A3:75:34:80:52:6A:2B:67:C3:BF:78:00
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       4CD374FFD86422F7AA06706A820CAAAB2C4C81DC
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3134322e302f32332d3233203d3e203232313737.roa
Signing time:             Fri 14 Apr 2023 20:41:56 +0000
ROA not before:           Fri 14 Apr 2023 20:36:56 +0000
ROA not after:            Fri 12 Apr 2024 20:41:56 +0000
asID:                     22177
IP address blocks:        200.162.142.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d3:74:ff:d8:64:22:f7:aa:06:70:6a:82:0c:aa:ab:2c:4c:81:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Apr 14 20:36:56 2023 GMT
            Not After : Apr 12 20:41:56 2024 GMT
        Subject: CN=699F44AEB685B9C5A3753480526A2B67C3BF7800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:22:fd:26:77:02:d9:f3:d8:57:bb:d3:de:
                    b3:82:97:c0:19:9a:cc:0b:31:54:ad:e5:c9:16:99:
                    5c:ec:44:75:f6:fb:b2:1f:a4:a2:76:32:09:79:10:
                    74:20:67:06:fd:01:c2:07:77:08:71:de:a0:a5:39:
                    18:f6:77:90:4e:c6:3d:9d:69:aa:e6:b6:d0:f9:cb:
                    20:91:27:4f:ad:39:ef:26:df:70:8f:10:ac:e2:14:
                    b9:2b:c8:48:54:ce:dc:cd:8d:38:70:b8:fb:51:13:
                    cf:24:5c:62:f7:a1:84:56:cd:6f:c2:c0:06:06:db:
                    40:57:c3:be:d3:da:62:95:f7:50:6b:ba:c1:2c:14:
                    7d:28:9d:21:d1:28:1b:26:53:4e:b1:4b:74:dc:03:
                    42:ad:26:a1:e3:50:2b:f6:5d:d6:5f:f5:50:11:0b:
                    3d:5a:30:3b:1a:de:9e:10:45:45:15:4e:2c:7c:98:
                    df:ed:ee:d5:db:83:c9:04:54:31:3c:01:2f:12:8e:
                    15:e4:c6:21:2f:52:e1:3f:42:01:3e:2d:9a:33:2d:
                    72:96:4d:4a:48:2a:f5:6a:a2:74:47:cc:95:d7:e8:
                    5c:a5:00:76:23:79:21:ff:f5:fa:6d:f0:68:85:80:
                    3a:95:8b:3f:7c:40:84:13:e4:66:8d:fd:ba:cd:81:
                    f0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9F:44:AE:B6:85:B9:C5:A3:75:34:80:52:6A:2B:67:C3:BF:78:00
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3134322e302f32332d3233203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:99:b9:c4:35:ca:44:26:13:2b:91:72:12:b1:51:55:f3:c5:
         ea:f9:3d:1f:5b:0e:a4:8e:c5:ff:ea:18:45:bf:47:a8:e3:35:
         fc:15:c6:d3:99:9c:73:00:fa:4d:45:be:d5:4b:6b:07:19:87:
         df:8d:24:d1:49:5a:0e:a5:08:cd:b7:8b:e8:be:89:43:1d:e9:
         b3:41:48:9a:6c:0f:79:cf:b6:7d:42:ca:c8:9d:00:6f:0c:5c:
         1a:76:dc:4c:94:81:89:fe:99:c2:16:da:bc:14:3b:00:55:6a:
         c8:57:7a:f2:22:5d:6d:82:01:4a:aa:0b:3e:22:b0:c1:88:72:
         03:14:8b:2c:18:13:c0:04:a1:bb:94:db:4c:9f:3f:c3:64:9d:
         3d:e5:01:78:04:95:e3:81:5a:97:a9:7a:a2:c0:57:ef:ea:bd:
         06:e3:37:0a:00:e7:e4:7e:e1:b7:a1:27:62:ce:90:29:97:d8:
         71:9f:71:0f:58:d6:39:90:6e:df:9d:ee:7b:87:7d:b0:bc:10:
         01:d8:56:cd:5f:ee:4c:d4:06:08:26:b7:d9:81:b5:d9:54:85:
         1a:74:85:a8:08:b8:2e:b9:04:69:19:77:25:a1:91:6f:99:b2:
         5d:38:6f:4e:d5:0f:15:c6:8a:2a:84:2e:51:b9:28:b5:dd:d6:
         2c:cd:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:51 2025 by rpki-client