Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32322d3232203d3e203533313533.roa
File:                     3138362e3230392e3130302e302f32322d3232203d3e203533313533.roa (raw, json)
Hash identifier:          NCk7tKLotTDD6o9rsYW3OD6gJjEpUv1n/26p5/Kv3n0=
Subject key identifier:   91:6B:11:71:D4:83:55:29:DA:AB:14:AD:EC:EE:06:8A:88:9A:B8:46
Certificate issuer:       /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial:       5FED526701FBA269D4D287A41D792C94652D8590
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32322d3232203d3e203533313533.roa
Signing time:             Wed 15 Mar 2023 20:08:18 +0000
ROA not before:           Wed 15 Mar 2023 20:03:18 +0000
ROA not after:            Wed 13 Mar 2024 20:08:18 +0000
asID:                     53153
IP address blocks:        186.209.100.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ed:52:67:01:fb:a2:69:d4:d2:87:a4:1d:79:2c:94:65:2d:85:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
        Validity
            Not Before: Mar 15 20:03:18 2023 GMT
            Not After : Mar 13 20:08:18 2024 GMT
        Subject: CN=916B1171D4835529DAAB14ADECEE068A889AB846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:75:95:d6:bb:d0:d7:2b:32:b7:f4:ce:77:
                    9b:f0:2f:b7:f9:25:b1:31:23:96:b5:80:2b:68:c5:
                    d2:2e:5a:1c:d6:71:ca:0a:23:27:7d:3e:a9:26:cf:
                    6f:d7:1b:40:d4:75:87:57:5a:e0:1e:e4:3b:ef:44:
                    03:da:7e:84:80:1c:82:51:fb:f0:9e:9d:03:e5:6b:
                    71:9d:40:50:a9:0b:56:57:c1:ee:4c:66:ff:33:53:
                    ea:eb:9c:e2:0b:52:ab:e0:ce:0b:98:fa:85:60:3c:
                    04:db:55:98:27:cd:e5:fe:97:c3:40:b8:6d:3c:47:
                    46:f6:e5:66:60:2c:58:90:ef:bd:f8:1d:15:84:1a:
                    80:11:48:cd:d6:2b:58:ce:70:68:a4:a9:c3:12:f8:
                    e9:81:c7:0d:4d:22:c8:92:33:f8:46:69:68:70:12:
                    80:41:15:23:80:9e:ad:ee:9f:30:e4:12:f3:f0:c1:
                    6b:27:76:d9:fb:ef:32:b1:93:c5:aa:f5:5c:69:7b:
                    bf:b5:ce:f0:01:29:b6:37:f5:e1:7f:e7:8c:02:9f:
                    ab:d2:ce:08:e0:a3:ab:c0:31:5a:33:c3:ab:5d:22:
                    6b:d2:b0:42:4d:ea:8b:16:11:d6:e1:d1:f8:ef:10:
                    bc:9d:7b:78:20:d6:82:21:3f:e6:c9:2f:b8:fa:af:
                    41:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6B:11:71:D4:83:55:29:DA:AB:14:AD:EC:EE:06:8A:88:9A:B8:46
            X509v3 Authority Key Identifier:
                keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32322d3232203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:45:6f:6f:f1:84:61:f2:93:b0:3f:af:29:7d:a7:f7:49:79:
         1d:46:b7:17:d8:7d:54:bf:71:87:79:9e:3d:53:0d:a5:26:a9:
         0d:c6:ee:a5:a8:77:d0:f0:64:76:5e:ac:ef:6d:12:fa:c6:0b:
         5e:97:d1:92:87:48:3c:fc:a0:d8:12:c6:e1:77:6c:5f:81:51:
         42:36:ba:4c:94:6b:e1:c8:3e:03:a5:9b:c6:7c:bc:7d:4f:6e:
         08:90:50:ae:0f:03:90:58:4e:74:f4:ee:3a:28:75:f5:3e:ea:
         d7:56:51:2c:28:0f:a6:70:12:c6:23:10:5e:ab:72:35:d6:0d:
         83:4c:e5:be:fb:db:e1:e9:02:1a:8e:66:98:0a:12:66:69:28:
         1b:71:95:68:5a:d9:31:d2:35:63:ce:f2:7a:2f:48:6d:c9:b9:
         a1:0c:1a:bc:76:9d:ef:3d:20:30:c6:4c:fc:38:0e:ad:bc:20:
         ea:84:b1:1b:c7:2b:c0:c7:d9:0b:f0:48:4f:f5:24:a7:bf:e6:
         7d:a9:ba:76:f8:08:3b:e2:1b:d6:0a:48:cd:23:79:81:76:bb:
         b4:42:43:cf:5f:08:ac:73:f7:c3:8f:8e:91:af:e1:d9:4f:e6:
         f6:95:38:ef:b9:7d:fd:3c:17:ab:22:2f:8c:b5:20:e0:30:bf:
         d0:b4:d1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org