Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3132382e302f32342d3234203d3e203232313737.roa
File:                     3230302e3136322e3132382e302f32342d3234203d3e203232313737.roa (raw, json)
Hash identifier:          8FVNwo6PbWX7Ig3apDrozbcAFpZ/Vb4YHfBzFhnzbv0=
Subject key identifier:   99:FD:76:42:DA:DB:CA:87:E1:11:0E:FB:40:04:9D:DF:37:56:B1:C7
Certificate issuer:       /CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
Certificate serial:       04098E245D1B9A33FC46D069830279F999A02162
Authority key identifier: 95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3132382e302f32342d3234203d3e203232313737.roa
Signing time:             Fri 15 Mar 2024 15:30:19 +0000
ROA not before:           Fri 15 Mar 2024 15:25:19 +0000
ROA not after:            Fri 14 Mar 2025 15:30:19 +0000
asID:                     22177
IP address blocks:        200.162.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:09:8e:24:5d:1b:9a:33:fc:46:d0:69:83:02:79:f9:99:a0:21:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9568C793ECF44229EAEAD22A4EC25F838E1BFF18
        Validity
            Not Before: Mar 15 15:25:19 2024 GMT
            Not After : Mar 14 15:30:19 2025 GMT
        Subject: CN=99FD7642DADBCA87E1110EFB40049DDF3756B1C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:77:7b:df:9d:7f:0f:de:39:d0:d6:4d:cb:
                    b8:40:4d:61:0f:32:4a:7e:51:ee:35:4f:20:24:7b:
                    fd:1c:69:cb:10:fc:24:eb:60:a5:46:28:5b:9e:99:
                    1d:32:e6:a1:5d:8d:69:43:a5:24:bc:77:4e:66:bb:
                    b2:1f:19:f7:63:05:11:f2:26:bd:62:55:a9:ad:2d:
                    f7:a6:cb:07:37:40:9a:ef:59:22:8e:34:79:33:b7:
                    01:5e:bb:6f:36:89:e7:6e:3c:96:12:80:16:2d:10:
                    b7:5d:3e:d5:2a:60:34:d5:d7:af:bd:af:ba:be:44:
                    85:13:6e:f7:3f:b2:92:3f:0e:a3:1e:2a:7e:af:79:
                    40:fe:8e:69:f8:c4:ed:87:2f:dc:1b:51:f9:32:57:
                    1c:c4:ba:23:05:20:82:e1:bc:b9:1c:b1:2a:77:85:
                    70:ab:50:19:63:ab:32:97:5f:f8:63:eb:9b:26:18:
                    cc:98:8f:f6:d3:17:69:ff:1a:f8:12:bf:ba:d9:d3:
                    8a:84:a0:d8:4c:81:b5:41:13:31:8f:2a:c7:8e:38:
                    75:53:91:8c:1b:fc:78:c3:0f:1a:ac:99:b7:d1:5d:
                    f3:90:28:52:69:99:5b:a5:a0:db:66:28:2b:e5:42:
                    b9:07:8b:29:0a:71:05:3a:2d:4c:ea:c0:43:6e:fd:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FD:76:42:DA:DB:CA:87:E1:11:0E:FB:40:04:9D:DF:37:56:B1:C7
            X509v3 Authority Key Identifier:
                keyid:95:68:C7:93:EC:F4:42:29:EA:EA:D2:2A:4E:C2:5F:83:8E:1B:FF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9568C793ECF44229EAEAD22A4EC25F838E1BFF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B7Xy8QcCoMyYF81UtiAFKQ82jQ3kTno47vuPNVWrf8Nk/0/3230302e3136322e3132382e302f32342d3234203d3e203232313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.162.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:24:3f:6d:69:ae:ee:97:12:7f:93:b9:f7:b3:d1:f7:35:51:
         30:15:1f:28:6a:30:25:cf:70:68:64:a1:f1:a0:c7:a0:e1:2f:
         bb:54:e3:a7:9f:91:fd:12:53:04:21:45:84:fa:09:3f:eb:b7:
         b4:74:09:44:6e:a5:2b:cf:9d:93:1b:96:cf:7c:f6:09:cd:7f:
         bf:d5:ed:0c:bd:2f:a6:5e:a8:4e:92:e5:06:54:24:82:85:a8:
         b1:12:4a:32:8a:45:be:e2:c2:bb:1c:6a:f8:3f:fe:bd:af:a1:
         d5:c7:9e:02:d9:51:f3:ea:cd:fd:b3:7a:4d:73:12:80:1e:2c:
         fc:56:c5:63:ee:ca:c7:6b:32:21:f5:5f:61:30:b6:d9:f9:92:
         9e:59:73:8a:45:3f:7b:74:4d:71:f9:20:1c:19:95:2f:3c:76:
         02:a0:89:66:89:76:da:51:7e:1b:94:c6:e2:39:56:35:d6:04:
         64:45:4b:2b:81:6a:bb:b0:da:38:32:88:5d:02:58:2a:3b:c8:
         be:ca:c5:44:eb:ab:a3:6d:18:ee:e6:bc:48:72:41:ef:2d:d3:
         4e:9c:ba:19:bf:b7:ee:bb:2a:bb:cf:3a:ed:6f:69:b9:0f:6b:
         4d:3c:cc:d6:3f:70:41:b3:6d:08:1d:02:44:45:b3:e9:88:a9:
         59:ac:d8:8c
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUBAmOJF0bmjP8RtBpgwJ5+ZmgIWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU2OEM3OTNFQ0Y0NDIyOUVBRUFEMjJBNEVDMjVGODM4
RTFCRkYxODAeFw0yNDAzMTUxNTI1MTlaFw0yNTAzMTQxNTMwMTlaMDMxMTAvBgNV
BAMTKDk5RkQ3NjQyREFEQkNBODdFMTExMEVGQjQwMDQ5RERGMzc1NkIxQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CHd7351/D9450NZNy7hATWEP
Mkp+Ue41TyAke/0cacsQ/CTrYKVGKFuemR0y5qFdjWlDpSS8d05mu7IfGfdjBRHy
Jr1iVamtLfemywc3QJrvWSKONHkztwFeu282ieduPJYSgBYtELddPtUqYDTV16+9
r7q+RIUTbvc/spI/DqMeKn6veUD+jmn4xO2HL9wbUfkyVxzEuiMFIILhvLkcsSp3
hXCrUBljqzKXX/hj65smGMyYj/bTF2n/GvgSv7rZ04qEoNhMgbVBEzGPKseOOHVT
kYwb/HjDDxqsmbfRXfOQKFJpmVuloNtmKCvlQrkHiykKcQU6LUzqwENu/eOtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUmf12QtrbyofhEQ77QASd3zdWsccwHwYDVR0j
BBgwFoAUlWjHk+z0Qinq6tIqTsJfg44b/xgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjdYeThRY0NvTXlZRjgxVXRpQUZLUTgyalEza1RubzQ3dnVQTlZXcmY4
TmsvMC85NTY4Qzc5M0VDRjQ0MjI5RUFFQUQyMkE0RUMyNUY4MzhFMUJGRjE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1NjhDNzkzRUNGNDQyMjlF
QUVBRDIyQTRFQzI1RjgzOEUxQkZGMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I3WHk4UWNDb015WUY4MVV0aUFGS1E4MmpRM2tUbm80N3Z1UE5WV3JmOE5rLzAv
MzIzMDMwMmUzMTM2MzIyZTMxMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzIzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIooAwDQYJKoZIhvcNAQELBQADggEBAJwkP21p
ru6XEn+Tufez0fc1UTAVHyhqMCXPcGhkofGgx6DhL7tU46efkf0SUwQhRYT6CT/r
t7R0CURupSvPnZMbls989gnNf7/V7Qy9L6ZeqE6S5QZUJIKFqLESSjKKRb7iwrsc
avg//r2vodXHngLZUfPqzf2zek1zEoAeLPxWxWPuysdrMiH1X2Ewttn5kp5Zc4pF
P3t0TXH5IBwZlS88dgKgiWaJdtpRfhuUxuI5VjXWBGRFSyuBaruw2jgyiF0CWCo7
yL7KxUTrq6NtGO7mvEhyQe8t006cuhm/t+67KrvPOu1vabkPa008zNY/cEGzbQgd
AkRFs+mIqVms2Iw=
-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:11 2024 by rpki-client on console.sobornost.net