Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32342d3234203d3e20323731363932.roa
File:                     3138362e3230392e3130302e302f32342d3234203d3e20323731363932.roa (raw, json)
Hash identifier:          Mr5YqSiC7jKaOE19mIsi5QBbolu5LlwEh3JA9zf+s8U=
Subject key identifier:   1F:4F:41:C1:AA:93:02:10:84:B0:2B:4B:2A:AD:62:16:DE:5D:30:A8
Certificate issuer:       /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial:       284686B9EEEF37B25802CE270656C20C4D0D88B6
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32342d3234203d3e20323731363932.roa
Signing time:             Fri 06 Oct 2023 12:16:11 +0000
ROA not before:           Fri 06 Oct 2023 12:11:11 +0000
ROA not after:            Fri 04 Oct 2024 12:16:11 +0000
asID:                     271692
IP address blocks:        186.209.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:46:86:b9:ee:ef:37:b2:58:02:ce:27:06:56:c2:0c:4d:0d:88:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
        Validity
            Not Before: Oct  6 12:11:11 2023 GMT
            Not After : Oct  4 12:16:11 2024 GMT
        Subject: CN=1F4F41C1AA93021084B02B4B2AAD6216DE5D30A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:91:59:7a:9e:aa:49:df:d5:05:df:7e:69:
                    61:f4:40:4f:1e:4e:86:f6:eb:5a:92:60:ba:68:3c:
                    1a:fd:a7:ef:61:d6:7b:28:a2:48:fa:b5:10:f6:ee:
                    e1:31:d0:44:d9:42:ee:7a:a2:a8:d5:34:ee:72:b1:
                    ce:21:e4:d6:9e:9b:15:99:7d:8e:51:f4:0b:39:60:
                    11:8c:b1:46:50:18:39:3f:8d:a9:83:09:81:0a:44:
                    88:1f:f9:6b:da:7f:1d:c5:f1:59:45:66:ec:86:90:
                    4b:c9:df:ab:ee:8f:ed:da:a9:09:13:83:25:fb:b6:
                    d8:0c:66:88:e6:32:96:f4:21:93:b1:78:f3:1f:51:
                    af:df:77:fb:83:12:a8:84:8a:6a:57:fc:5d:6c:f1:
                    54:27:cd:4c:39:bc:ee:f8:aa:aa:36:f0:eb:a8:6c:
                    c3:6c:2b:44:d9:13:0c:93:42:a1:18:4c:9f:53:90:
                    b5:eb:45:93:18:20:dc:2c:8f:fb:ba:c6:fb:11:47:
                    f2:07:33:fa:31:56:cd:a0:ae:ae:bc:a8:38:d5:d9:
                    67:8f:52:eb:f9:34:0b:eb:7c:9b:fd:73:a4:8a:bd:
                    a3:39:0c:17:75:3a:72:d7:15:6d:de:1e:0c:de:da:
                    41:3b:f2:6e:bc:bf:ff:ad:4e:94:65:e5:d4:14:3b:
                    62:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4F:41:C1:AA:93:02:10:84:B0:2B:4B:2A:AD:62:16:DE:5D:30:A8
            X509v3 Authority Key Identifier:
                keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32342d3234203d3e20323731363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:72:22:fc:3d:3f:12:62:f3:48:20:b5:02:64:72:a2:e7:a2:
         04:1a:43:a7:13:1e:03:24:25:41:e4:47:5a:92:00:cb:71:0e:
         63:37:2d:05:1a:39:7c:4a:12:a0:82:4e:83:d6:74:ae:93:de:
         2f:92:cb:ed:77:0a:88:67:18:a5:ac:25:8b:62:17:2e:51:7d:
         41:1c:f7:69:49:5f:38:7a:15:29:88:d2:59:ef:3e:74:cc:4f:
         8f:c1:53:24:0b:df:62:bc:cf:c8:60:ed:1e:fd:ec:ae:5a:41:
         7b:92:c4:40:de:b9:5e:10:cd:c8:49:22:ad:c7:09:ad:aa:f1:
         86:c7:64:55:92:05:95:01:54:e7:ba:86:8f:ab:e0:af:7e:8b:
         10:b2:92:75:65:16:5b:d7:d0:87:12:19:53:2d:43:ae:cd:9d:
         26:50:4e:8c:bc:9a:45:60:f7:5a:c6:26:b7:18:f9:52:02:d8:
         71:2b:48:20:85:6c:71:91:24:af:0b:66:d4:8e:67:91:df:5e:
         5a:52:a3:4a:ee:4b:6a:c8:36:fe:59:97:05:88:21:00:9f:cd:
         2a:da:f9:0e:0c:e2:d4:3f:b2:c0:7b:ca:59:45:8c:a3:3f:8b:
         72:cc:0e:8c:89:dc:f1:e2:70:78:83:13:08:36:1d:b4:ad:95:
         db:1b:c3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org