Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          xLMiVB9jbzYXj88ES2kPTuHmEbm358LbrFvXbA1L5GY=
Subject key identifier:   4F:7E:27:00:9E:8B:32:9C:92:00:8C:8E:3B:24:4D:DF:EC:9D:5E:8A
Certificate issuer:       /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial:       05633C276DEF2BF5B8EF489E02B483333CFEBA0C
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa
Signing time:             Thu 05 Oct 2023 14:19:04 +0000
ROA not before:           Thu 05 Oct 2023 14:14:04 +0000
ROA not after:            Thu 03 Oct 2024 14:19:04 +0000
asID:                     53153
IP address blocks:        186.209.100.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:63:3c:27:6d:ef:2b:f5:b8:ef:48:9e:02:b4:83:33:3c:fe:ba:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
        Validity
            Not Before: Oct  5 14:14:04 2023 GMT
            Not After : Oct  3 14:19:04 2024 GMT
        Subject: CN=4F7E27009E8B329C92008C8E3B244DDFEC9D5E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:61:72:07:e9:88:fd:53:2e:9f:c2:ef:7d:
                    b3:dd:45:3e:6d:51:1f:9b:64:7b:06:f2:19:ab:e1:
                    cf:42:66:14:2a:fc:ba:88:a8:cc:05:b1:1d:aa:09:
                    29:d5:31:67:07:c0:9c:17:ca:10:31:1f:bc:ad:06:
                    2a:f9:e5:1a:40:c2:af:a8:a8:8e:6d:51:5c:e7:06:
                    83:fc:8b:49:b9:c1:59:90:5b:38:ba:f0:c8:86:c1:
                    5e:66:a5:41:6a:21:d2:ca:01:e0:b8:b1:7a:e7:b1:
                    54:8c:34:5b:bb:bd:31:f4:1a:8a:63:21:9d:ab:3e:
                    9c:71:2c:a2:11:5e:6d:71:89:91:94:94:04:44:d6:
                    0e:cc:eb:64:35:e8:b1:08:e6:ff:e9:67:29:79:a9:
                    26:4a:9a:da:84:26:ec:3a:db:3a:71:4d:7f:e9:c5:
                    f4:5e:dc:cd:e1:b2:a8:14:2f:29:76:7e:aa:b1:0b:
                    e7:59:f2:69:ea:4d:a2:5e:a0:f7:61:2d:58:7c:bc:
                    9e:52:09:52:73:58:97:18:b0:95:d8:5d:99:82:69:
                    5b:4d:a1:55:af:1a:a7:c2:2a:9c:9a:3d:51:d3:c6:
                    5e:7a:29:0d:4a:23:8d:02:c7:ef:bf:bc:c8:bf:0f:
                    73:3c:58:1b:ca:40:2e:78:c7:61:f7:87:26:e1:0d:
                    e1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7E:27:00:9E:8B:32:9C:92:00:8C:8E:3B:24:4D:DF:EC:9D:5E:8A
            X509v3 Authority Key Identifier:
                keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:f4:8c:07:d4:0a:1d:95:ab:99:8b:ee:fd:93:06:6e:e8:2c:
         b6:8a:07:3d:65:e5:93:ad:d4:3e:be:35:2f:69:14:3f:31:84:
         62:26:31:de:49:75:3f:92:95:1b:08:3e:0a:aa:5f:19:af:9d:
         e7:7b:f0:bd:ce:f4:fc:24:1a:9c:a2:6a:8e:a8:63:fe:97:7f:
         13:1b:1c:7f:7e:e8:6a:49:dd:3e:77:13:3f:94:02:56:f3:ce:
         20:8d:a2:bc:46:d8:73:aa:43:bc:2e:a5:fa:eb:8c:07:de:7f:
         be:73:dd:0c:c2:cc:61:82:48:e2:b1:9e:99:19:41:30:c5:34:
         74:7f:9f:0e:b5:17:5d:f7:68:f4:3c:65:27:ac:e1:dd:a9:15:
         fb:04:2c:93:ee:3e:a4:5a:c2:45:c1:a1:ad:8e:5f:74:7e:37:
         b0:01:cd:1d:78:f5:d0:25:69:36:6e:09:99:f8:71:6a:c3:77:
         b6:e3:17:9b:30:2e:18:ef:6f:4c:2c:92:ba:42:22:db:08:6b:
         ab:3e:a9:fc:fe:ee:ac:1e:3d:8b:a3:f6:41:a7:41:e7:3a:13:
         3b:7f:2e:39:b9:bc:39:cb:8a:31:d4:3e:70:1e:41:3e:b2:c7:
         b0:79:4f:68:91:3a:0e:18:05:97:ac:df:a3:6a:38:ab:1e:4d:
         90:0d:9c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org