Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/3138372e31372e33322e302f32302d3230203d3e203238323632.roa
File:                     3138372e31372e33322e302f32302d3230203d3e203238323632.roa (raw, json)
Hash identifier:          bO7a3cNfjdUrKAd1L6GpIiynKQcqu6w+br+AONh4naE=
Subject key identifier:   2D:D2:E8:9B:BB:30:34:D6:90:C4:17:B3:92:EB:42:EE:8A:60:D1:30
Certificate issuer:       /CN=A1C9646671EAA2886E18B798876F4FDB5FBB0DD0
Certificate serial:       165ECE9565A6467737F0E8CC7195407A37332787
Authority key identifier: A1:C9:64:66:71:EA:A2:88:6E:18:B7:98:87:6F:4F:DB:5F:BB:0D:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1C9646671EAA2886E18B798876F4FDB5FBB0DD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/3138372e31372e33322e302f32302d3230203d3e203238323632.roa
Signing time:             Fri 16 Dec 2022 22:15:01 +0000
ROA not before:           Fri 16 Dec 2022 22:10:01 +0000
ROA not after:            Fri 15 Dec 2023 22:15:01 +0000
asID:                     28262
IP address blocks:        187.17.32.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5e:ce:95:65:a6:46:77:37:f0:e8:cc:71:95:40:7a:37:33:27:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1C9646671EAA2886E18B798876F4FDB5FBB0DD0
        Validity
            Not Before: Dec 16 22:10:01 2022 GMT
            Not After : Dec 15 22:15:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:63:e6:99:af:56:da:b3:12:03:57:aa:5c:f4:
                    5e:4d:54:08:4a:7c:d2:0d:f9:76:2a:d6:b4:db:30:
                    9a:e4:79:dc:39:86:16:1d:9c:4a:fe:5e:45:4d:44:
                    e5:ee:09:2d:8f:f0:66:df:6c:6b:56:62:74:c6:04:
                    af:59:b9:15:7f:45:e3:8e:fc:9d:b5:71:5c:72:f1:
                    5d:44:e6:57:32:39:75:34:93:24:66:e6:45:61:6e:
                    6c:4c:7f:3a:8b:4d:4a:7b:5f:2a:ba:e6:f7:92:7f:
                    6a:71:3e:f8:7c:d8:e8:f0:d1:f7:f3:58:f7:06:6a:
                    67:1a:59:a1:c2:fb:ec:e8:71:a8:8e:ff:ba:06:5e:
                    15:17:38:e2:be:9e:53:1d:21:0f:dc:58:19:02:e4:
                    d0:43:28:48:42:a3:43:d5:86:7b:64:19:19:b1:45:
                    a4:26:b3:9b:7b:e8:fc:9f:90:86:f6:a8:1f:5f:15:
                    f9:dc:e2:62:e1:04:c6:e7:b0:d2:14:48:13:0d:04:
                    18:7b:49:e1:ec:ea:9e:bf:f1:5e:a7:b0:b9:5f:36:
                    cc:5f:f1:ca:fd:3a:73:05:fd:fc:a7:7b:b7:4e:63:
                    2b:2d:a9:4a:ff:82:76:04:e2:29:9e:99:2f:81:39:
                    90:26:fd:75:c5:5a:fe:d1:4d:5f:34:8c:c5:8c:6f:
                    2d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D2:E8:9B:BB:30:34:D6:90:C4:17:B3:92:EB:42:EE:8A:60:D1:30
            X509v3 Authority Key Identifier:
                keyid:A1:C9:64:66:71:EA:A2:88:6E:18:B7:98:87:6F:4F:DB:5F:BB:0D:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/A1C9646671EAA2886E18B798876F4FDB5FBB0DD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1C9646671EAA2886E18B798876F4FDB5FBB0DD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RuhnUFPLy8HSnFv9nbG1B7BLApuKshrvEzjhktjbwEk/0/3138372e31372e33322e302f32302d3230203d3e203238323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:37:12:7e:eb:d5:16:83:bc:be:73:d9:a8:0c:92:d3:31:9f:
         c8:64:76:9f:4a:98:9b:69:58:e6:d9:75:ec:5d:27:80:3a:be:
         e5:80:97:6c:b1:ce:3d:81:a9:ed:fe:ad:39:38:80:71:cf:2c:
         71:b1:38:a5:db:b2:b5:5e:be:38:4a:6c:28:85:87:85:48:a5:
         c0:ce:c9:67:c6:c0:7d:1c:b8:fd:ce:64:fd:53:f0:66:3e:67:
         09:bc:9a:54:1e:df:0b:4f:e3:1b:ae:42:09:fd:0f:27:3d:d9:
         82:32:fd:7e:4c:12:79:5d:98:a9:29:2b:85:ef:e6:81:8c:c8:
         f1:78:5e:da:23:ad:bb:0e:94:ff:e0:b4:54:4e:a0:ec:ce:64:
         86:fa:7c:30:d7:67:2c:18:ad:14:00:c6:f4:1d:a0:04:fa:39:
         fd:bc:93:38:ca:f1:24:21:15:71:3c:87:44:5c:64:53:e1:a6:
         e1:6c:5a:ce:bc:55:be:e7:32:8a:38:5f:88:3f:89:d7:57:16:
         ab:50:b4:07:28:5f:c7:a6:d8:29:91:b9:2e:e0:af:7c:7c:a5:
         60:6c:5d:cd:fd:c1:13:6c:d5:13:03:71:0f:7b:fd:3d:57:88:
         1a:ae:fd:26:5f:ef:81:f1:94:b2:89:58:a3:36:71:6c:bd:9b:
         8f:64:26:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org