Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/3138372e31372e3136302e302f32302d3234203d3e203238323633.roa
File:                     3138372e31372e3136302e302f32302d3234203d3e203238323633.roa (raw, json)
Hash identifier:          K21PTFG1RfxJ/ZSjyfzeoRn7689NCRWbHWPB9FrJXbw=
Subject key identifier:   82:9C:FD:15:94:34:01:BB:4D:27:6E:95:3E:7A:BC:55:F5:EB:A4:CF
Certificate issuer:       /CN=2C4950C71122E144532D0ECA84E49D609A511FEF
Certificate serial:       10375C66934A32F149E12442D49BB8E2F3F8ED04
Authority key identifier: 2C:49:50:C7:11:22:E1:44:53:2D:0E:CA:84:E4:9D:60:9A:51:1F:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4950C71122E144532D0ECA84E49D609A511FEF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/3138372e31372e3136302e302f32302d3234203d3e203238323633.roa
Signing time:             Fri 03 Nov 2023 12:49:02 +0000
ROA not before:           Fri 03 Nov 2023 12:44:02 +0000
ROA not after:            Fri 01 Nov 2024 12:49:02 +0000
asID:                     28263
IP address blocks:        187.17.160.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:37:5c:66:93:4a:32:f1:49:e1:24:42:d4:9b:b8:e2:f3:f8:ed:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C4950C71122E144532D0ECA84E49D609A511FEF
        Validity
            Not Before: Nov  3 12:44:02 2023 GMT
            Not After : Nov  1 12:49:02 2024 GMT
        Subject: CN=829CFD15943401BB4D276E953E7ABC55F5EBA4CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:38:e2:11:6f:7a:c3:8c:6f:be:58:d4:36:
                    aa:7e:6c:b6:90:b4:71:a8:af:6c:bd:12:ab:8e:53:
                    bd:ad:60:b1:08:94:01:63:08:90:53:38:c9:09:82:
                    01:d7:cf:74:49:09:00:cc:68:3f:bb:1d:2f:2c:1a:
                    1a:44:e3:76:0b:80:4d:20:e2:87:9d:2b:d2:d6:d2:
                    0e:4c:d8:33:ce:fd:aa:79:0d:cb:b9:75:a5:fd:a6:
                    0f:61:de:82:c3:45:b1:60:98:5e:95:05:fd:a8:62:
                    74:1c:88:0a:41:a6:05:72:1c:f5:ca:86:d1:b3:5b:
                    cd:55:48:43:ca:b7:6f:d6:ae:5c:56:b7:d0:25:61:
                    c1:23:9c:aa:77:65:09:fd:c4:ba:1d:91:1a:f1:db:
                    c8:dc:a1:65:e8:7d:ec:86:1f:11:b3:3b:20:11:86:
                    b8:52:33:ff:c6:b7:16:3c:9d:56:40:d7:f6:49:ca:
                    31:2c:dd:74:9f:91:97:2f:8e:09:66:9b:72:9c:e2:
                    e6:d7:98:b5:75:0a:ab:bc:b0:87:47:5e:6d:df:8b:
                    24:69:0a:93:95:d4:70:9f:06:35:2f:b7:fc:2f:71:
                    0a:32:19:b0:23:54:6b:de:0a:46:dd:33:78:f6:32:
                    89:59:d4:27:a9:be:97:c0:e4:8b:2b:17:ee:d1:96:
                    68:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9C:FD:15:94:34:01:BB:4D:27:6E:95:3E:7A:BC:55:F5:EB:A4:CF
            X509v3 Authority Key Identifier:
                keyid:2C:49:50:C7:11:22:E1:44:53:2D:0E:CA:84:E4:9D:60:9A:51:1F:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/2C4950C71122E144532D0ECA84E49D609A511FEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4950C71122E144532D0ECA84E49D609A511FEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f7eY7krXtrN7hvt3xK3p6sf4kDpVCBvTdoXvrAcTKT6/0/3138372e31372e3136302e302f32302d3234203d3e203238323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:31:d7:a3:07:d8:b5:20:23:6b:73:8d:8d:91:c6:4c:13:32:
         93:1b:c5:00:99:f0:30:47:64:71:f4:17:3a:20:77:de:57:df:
         80:d6:cc:39:6f:d9:3f:c7:e2:3b:ff:9a:b2:7c:69:0b:df:b9:
         e3:ab:a0:07:7f:37:60:82:d4:af:0f:ef:c7:d2:3d:31:2d:b3:
         39:be:a3:9b:bc:b8:c5:8d:42:2f:82:17:7d:e6:25:d2:3d:6e:
         f4:66:40:f1:2a:a0:75:19:5e:27:32:ca:73:d6:3b:c0:3e:73:
         37:3b:d6:cd:90:7f:79:b6:9d:95:10:dc:9a:24:94:bb:90:42:
         48:ff:71:74:5f:17:e7:3d:c2:53:5b:c3:1b:c4:89:59:3f:a2:
         b1:e7:f5:3e:e3:e8:e4:35:82:b1:80:d4:63:bf:38:34:f2:fc:
         ea:96:8a:f0:7a:74:4a:fa:a9:be:cd:65:74:65:24:ba:3b:18:
         5f:a0:4f:43:86:e7:47:8c:71:b7:40:e0:eb:3a:27:24:9f:7f:
         a2:6c:b5:c6:2b:86:ab:2b:c0:7e:15:19:0e:a4:b6:14:ae:ff:
         12:24:8e:37:84:a5:13:66:4a:15:d6:bf:dd:80:06:86:c2:23:
         89:7d:fd:12:48:61:92:3e:0c:6e:18:a8:3e:af:df:64:1c:2d:
         e9:53:db:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org