Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/3137372e3232332e3136302e302f31392d3234203d3e203238333030.roa
File:                     3137372e3232332e3136302e302f31392d3234203d3e203238333030.roa (raw, json)
Hash identifier:          nNBIHzueU8G3/8MDufJi2RG9+vFvMeQrKyHz0eax7y8=
Subject key identifier:   67:52:07:13:06:1F:F0:27:9F:B9:1E:51:F0:B7:55:AF:71:A0:BC:A7
Certificate issuer:       /CN=FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E
Certificate serial:       734CAB074CAEC406F140B9986B206117AF02783A
Authority key identifier: FC:0F:0B:AA:A7:91:BC:20:BB:92:36:3E:D7:04:50:B3:EA:08:AB:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/3137372e3232332e3136302e302f31392d3234203d3e203238333030.roa
Signing time:             Thu 23 Mar 2023 19:40:13 +0000
ROA not before:           Thu 23 Mar 2023 19:35:13 +0000
ROA not after:            Thu 21 Mar 2024 19:40:13 +0000
asID:                     28300
IP address blocks:        177.223.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:4c:ab:07:4c:ae:c4:06:f1:40:b9:98:6b:20:61:17:af:02:78:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E
        Validity
            Not Before: Mar 23 19:35:13 2023 GMT
            Not After : Mar 21 19:40:13 2024 GMT
        Subject: CN=67520713061FF0279FB91E51F0B755AF71A0BCA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:97:0b:5d:b9:21:43:e5:05:c4:c0:b0:fa:c2:
                    c0:51:09:4a:42:a1:f5:77:87:60:b3:f2:b4:f3:5c:
                    1c:f0:04:ff:24:a3:27:bf:a8:42:e0:71:30:f0:18:
                    49:8e:ff:22:45:23:5f:6f:5a:de:63:ea:b9:8a:03:
                    38:d2:8c:ce:68:e4:0b:7a:8b:53:09:1b:d6:26:8f:
                    40:15:b4:1e:45:1f:78:bf:ec:3e:6a:81:42:c2:85:
                    91:3f:7c:1b:96:92:3b:67:b3:09:b1:79:c4:07:94:
                    ff:ef:b2:b8:8a:12:cf:ca:73:81:d8:46:9e:2a:3e:
                    cf:ed:99:c8:b2:54:47:2b:a4:88:87:f6:e2:c3:c5:
                    10:cf:80:30:52:6a:3f:f0:df:55:12:77:a1:25:97:
                    42:11:9e:d2:d2:cd:98:96:79:ea:ef:64:bf:d6:80:
                    0c:02:7f:93:32:46:1c:b3:30:b9:7d:3c:11:0f:3a:
                    8d:c3:d9:ad:e3:6b:8a:4b:63:0f:dc:86:cc:f1:35:
                    77:1b:ca:48:a2:b3:5c:d6:23:29:9a:1c:1e:d7:1b:
                    dc:2f:a4:11:b9:8b:e9:62:48:e9:06:9a:6f:e9:ef:
                    a0:48:ec:aa:d8:f5:9c:24:15:e2:e8:82:a8:6e:f0:
                    7c:69:fb:9d:6d:4d:9d:18:88:d4:23:51:ff:5d:05:
                    f2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:52:07:13:06:1F:F0:27:9F:B9:1E:51:F0:B7:55:AF:71:A0:BC:A7
            X509v3 Authority Key Identifier:
                keyid:FC:0F:0B:AA:A7:91:BC:20:BB:92:36:3E:D7:04:50:B3:EA:08:AB:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC0F0BAAA791BC20BB92363ED70450B3EA08AB9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/1/3137372e3232332e3136302e302f31392d3234203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.223.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         cb:2f:ef:09:0f:af:df:c0:98:4a:86:a3:4c:5c:0f:41:59:8f:
         d7:ff:53:08:62:78:b6:0d:53:b3:8c:e1:38:48:cb:60:0d:24:
         39:fd:54:20:47:d4:07:34:45:f8:f2:ea:79:aa:23:23:64:ef:
         c0:0b:8a:ef:29:de:a4:8b:63:54:2b:39:2b:19:44:38:b1:4b:
         03:04:cf:a6:a7:a7:10:f5:3d:61:a5:7a:87:96:6a:de:ac:25:
         bd:cb:55:6b:86:1d:c1:11:6b:89:98:2b:30:5e:37:b9:47:ba:
         ba:bb:e6:c1:98:15:3c:90:11:4d:20:f5:7a:78:54:40:65:03:
         eb:59:b6:f0:f0:a9:05:cf:44:9a:bc:4f:66:4b:6d:e7:7c:78:
         2b:37:07:09:da:27:2e:47:09:bf:c9:75:5e:30:ec:be:b0:50:
         c0:17:53:6e:46:e4:9a:f3:a1:a3:8a:b3:e4:e0:1a:81:4b:9b:
         2f:54:1f:6a:48:0c:1b:62:f8:f1:20:f4:3c:3a:71:a3:a3:f1:
         02:fe:cf:43:a9:28:fb:f9:48:4f:dd:ef:22:b9:11:bf:9b:1c:
         7a:cf:8b:94:54:14:ee:24:9a:47:76:4b:a7:ff:32:f2:b0:7a:
         d4:f8:4c:3f:2d:97:e8:ad:d6:8d:15:ae:c1:91:12:45:33:62:
         14:da:2f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:09:56 2025 by rpki-client