Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32332d3233203d3e203533313533.roa
File:                     3138362e3230392e3130342e302f32332d3233203d3e203533313533.roa (raw, json)
Hash identifier:          rWXeKsGg9WS4bq9N5WsReaLMG9ZSDTPdHD7XjCiuNCE=
Subject key identifier:   3E:E1:B8:1F:01:2F:00:C3:09:58:29:8D:81:6E:49:BC:D1:7A:9D:BD
Certificate issuer:       /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial:       51B20905AA6ED5586AC18F8B8B322D44ADAC26B7
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32332d3233203d3e203533313533.roa
Signing time:             Mon 19 Feb 2024 11:23:53 +0000
ROA not before:           Mon 19 Feb 2024 11:18:53 +0000
ROA not after:            Mon 17 Feb 2025 11:23:53 +0000
asID:                     53153
IP address blocks:        186.209.104.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b2:09:05:aa:6e:d5:58:6a:c1:8f:8b:8b:32:2d:44:ad:ac:26:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
        Validity
            Not Before: Feb 19 11:18:53 2024 GMT
            Not After : Feb 17 11:23:53 2025 GMT
        Subject: CN=3EE1B81F012F00C30958298D816E49BCD17A9DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:90:66:de:54:a6:ed:08:b4:90:c1:ae:88:23:
                    05:c4:0a:f9:98:1b:62:34:07:1a:17:85:3b:9e:7b:
                    3e:04:7e:ea:ef:81:52:a4:c9:dc:0c:a5:6c:8d:40:
                    50:4f:05:70:c5:7a:22:d5:38:56:82:7e:25:25:52:
                    ca:12:5f:d4:20:2d:7a:29:dd:17:b2:74:6e:c0:d3:
                    1d:1d:3e:b6:d5:f0:f9:d7:68:a9:18:04:c1:d3:22:
                    c2:34:04:41:f8:09:a9:88:1e:52:8c:2b:d3:36:c1:
                    3a:95:93:a4:9e:82:7b:a9:8e:44:6b:90:c4:2b:c9:
                    1b:d0:82:62:89:00:fe:ef:36:85:87:f3:75:7b:dc:
                    e7:ff:23:a1:92:e4:97:26:9b:3b:f0:13:ff:ea:9d:
                    b1:6b:3e:7f:84:0c:fc:71:a6:21:76:23:f4:eb:27:
                    76:d0:e0:1e:15:34:54:41:8a:52:bb:ab:57:f6:64:
                    1b:06:3d:61:e2:80:2f:ac:c4:65:1d:d6:11:16:b0:
                    39:c5:95:84:f3:a1:c5:c5:18:ee:14:ef:15:f1:9b:
                    d9:3a:8f:fc:7c:4c:7e:14:1d:f7:21:c8:4c:10:40:
                    67:f5:6b:26:8b:da:fb:e3:75:1f:7f:b5:c2:a2:15:
                    14:85:69:17:12:b5:9f:95:24:c4:b8:7e:e7:9d:86:
                    e6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E1:B8:1F:01:2F:00:C3:09:58:29:8D:81:6E:49:BC:D1:7A:9D:BD
            X509v3 Authority Key Identifier:
                keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32332d3233203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:23:a7:c1:57:a5:7a:2b:95:38:cb:27:eb:96:b0:42:1f:5f:
         25:b7:f7:63:96:81:28:94:41:5f:32:d1:b7:8c:29:52:63:00:
         51:f0:67:5e:ef:8d:dc:d3:8a:e8:bd:9c:aa:ee:fc:64:58:36:
         39:c1:6b:34:18:b5:c1:9b:4c:64:9d:68:8c:52:9d:b2:07:db:
         93:ab:d3:0f:8c:d2:95:47:da:a2:97:d7:dc:73:13:d6:ff:55:
         75:1a:bc:92:00:1d:61:48:56:11:48:3e:31:70:91:0a:b6:51:
         66:e7:49:af:a2:12:3c:dc:f5:e6:65:52:6e:83:a1:61:eb:1c:
         ac:6c:5e:7c:a0:11:8c:bb:96:fc:12:fd:7b:b9:ad:db:88:88:
         c1:f4:5b:8c:89:52:75:03:91:c1:1a:eb:47:db:72:ff:32:a0:
         99:8b:33:d3:cd:91:4c:a5:67:bc:fe:e6:d3:45:fc:db:c6:fa:
         59:ff:4d:90:e9:21:b2:c0:63:3e:73:a9:29:23:e8:d7:99:82:
         53:18:61:62:31:57:6f:e6:de:f4:c5:2b:5c:60:ce:88:d2:09:
         5e:3c:1a:4c:36:74:75:3f:cb:7c:83:f1:b2:67:1b:67:46:62:
         ae:bc:8e:61:2f:4f:9a:eb:01:52:60:80:c8:10:09:76:09:00:
         4f:59:53:37
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUbIJBapu1VhqwY+LizItRK2sJrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdBNjhEQTdDRTQ5NzRGRTgyOTE3MTEwODUyODU1QTYw
MzZBNkFBRjAeFw0yNDAyMTkxMTE4NTNaFw0yNTAyMTcxMTIzNTNaMDMxMTAvBgNV
BAMTKDNFRTFCODFGMDEyRjAwQzMwOTU4Mjk4RDgxNkU0OUJDRDE3QTlEQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXkGbeVKbtCLSQwa6IIwXECvmY
G2I0BxoXhTueez4EfurvgVKkydwMpWyNQFBPBXDFeiLVOFaCfiUlUsoSX9QgLXop
3ReydG7A0x0dPrbV8PnXaKkYBMHTIsI0BEH4CamIHlKMK9M2wTqVk6SegnupjkRr
kMQryRvQgmKJAP7vNoWH83V73Of/I6GS5JcmmzvwE//qnbFrPn+EDPxxpiF2I/Tr
J3bQ4B4VNFRBilK7q1f2ZBsGPWHigC+sxGUd1hEWsDnFlYTzocXFGO4U7xXxm9k6
j/x8TH4UHfchyEwQQGf1ayaL2vvjdR9/tcKiFRSFaRcStZ+VJMS4fuedhua/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPuG4HwEvAMMJWCmNgW5JvNF6nb0wHwYDVR0j
BBgwFoAUF6aNp85JdP6CkXEQhShVpgNqaq8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC8xN0E2OERBN0NFNDk3NEZFODI5MTcxMTA4NTI4NTVBNjAzNkE2QUFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE3QTY4REE3Q0U0OTc0RkU4
MjkxNzExMDg1Mjg1NUE2MDM2QTZBQUYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM2MmUzMjMwMzkyZTMxMzAzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM1
MzMzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG60WgwDQYJKoZIhvcNAQELBQADggEBAAIjp8FX
pXorlTjLJ+uWsEIfXyW392OWgSiUQV8y0beMKVJjAFHwZ17vjdzTiui9nKru/GRY
NjnBazQYtcGbTGSdaIxSnbIH25Or0w+M0pVH2qKX19xzE9b/VXUavJIAHWFIVhFI
PjFwkQq2UWbnSa+iEjzc9eZlUm6DoWHrHKxsXnygEYy7lvwS/Xu5rduIiMH0W4yJ
UnUDkcEa60fbcv8yoJmLM9PNkUylZ7z+5tNF/NvG+ln/TZDpIbLAYz5zqSkj6NeZ
glMYYWIxV2/m3vTFK1xgzojSCV48Gkw2dHU/y3yD8bJnG2dGYq68jmEvT5rrAVJg
gMgQCXYJAE9ZUzc=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:18:34 2025 by rpki-client