Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130362e302f32332d3233203d3e203533313533.roa
File:                     3138362e3230392e3130362e302f32332d3233203d3e203533313533.roa (raw, json)
Hash identifier:          4AYOnpVz2qEtuxw2zftkT6DMeg0otWGfvOjqOYGBpqQ=
Subject key identifier:   C2:4C:6C:CF:A1:94:BC:18:22:80:2F:46:E4:DE:FD:A2:5B:3A:D2:65
Certificate issuer:       /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial:       1002920543F5048175DD0464D76A4F996C0993AC
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130362e302f32332d3233203d3e203533313533.roa
Signing time:             Wed 15 Mar 2023 20:08:40 +0000
ROA not before:           Wed 15 Mar 2023 20:03:40 +0000
ROA not after:            Wed 13 Mar 2024 20:08:40 +0000
asID:                     53153
IP address blocks:        186.209.106.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:02:92:05:43:f5:04:81:75:dd:04:64:d7:6a:4f:99:6c:09:93:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
        Validity
            Not Before: Mar 15 20:03:40 2023 GMT
            Not After : Mar 13 20:08:40 2024 GMT
        Subject: CN=C24C6CCFA194BC1822802F46E4DEFDA25B3AD265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:06:47:55:8f:7f:fe:bd:86:06:7a:b3:86:
                    e1:8a:d3:98:ad:ee:6d:53:0e:0a:8a:b5:1e:6a:16:
                    ca:77:ec:b3:10:c0:39:b7:1c:f9:4b:02:70:da:85:
                    09:33:93:a9:30:de:0c:49:f6:b8:75:c0:52:34:94:
                    9f:26:0f:9d:cb:f2:0e:ba:32:25:82:5c:4f:a3:02:
                    98:40:b0:bb:88:7b:47:bf:57:ce:24:6a:4a:c5:ba:
                    3b:9a:c2:ae:68:a7:5e:6f:b6:37:23:c5:19:7f:08:
                    40:a7:58:1f:f1:54:84:26:43:97:cc:22:e3:68:a0:
                    ba:59:06:af:60:60:a1:c0:2d:a6:0e:6b:69:b8:d5:
                    05:93:c8:95:40:94:2e:7d:6b:04:cf:9e:8c:69:5f:
                    9e:42:02:f5:0f:e0:a6:42:ae:62:12:0e:93:c6:2a:
                    99:d5:57:68:36:88:e1:c5:35:fc:0c:93:be:f3:9d:
                    b8:72:29:5b:fb:da:56:b4:f8:02:4a:55:76:2b:3b:
                    1b:9a:ba:ee:f7:be:c5:76:4e:e3:b5:08:95:90:34:
                    1d:25:a2:aa:6f:fb:42:a9:62:9e:03:67:87:4e:e2:
                    1d:f2:f9:05:e0:ac:4d:dc:62:d3:35:4e:24:c2:e1:
                    70:84:8f:47:a0:ac:ad:3d:37:43:96:e4:07:65:17:
                    e5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:6C:CF:A1:94:BC:18:22:80:2F:46:E4:DE:FD:A2:5B:3A:D2:65
            X509v3 Authority Key Identifier:
                keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130362e302f32332d3233203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:97:e7:a7:6d:b4:6f:00:1f:95:a6:71:ac:98:ae:a3:99:33:
         ab:75:00:f7:66:b5:09:63:d0:f4:47:b8:3b:3d:6e:d0:49:b2:
         db:5b:bb:24:9f:e2:97:1a:b6:19:25:c3:7a:53:0c:aa:bb:31:
         84:ac:1a:c0:6f:2c:83:da:ac:64:70:17:94:c9:57:a7:8b:66:
         c3:f3:38:a3:3b:37:32:6c:2b:5a:2e:59:25:22:cd:f0:69:cc:
         53:ed:7f:0f:4d:46:0b:ac:e9:1c:64:94:c9:e6:24:53:99:92:
         59:d9:84:1d:cf:3c:2b:7b:66:53:53:e3:2b:ef:2e:8d:48:f9:
         67:5f:7b:c0:be:45:dc:58:b6:30:bd:5f:a4:09:24:66:c7:bf:
         11:03:e7:af:c6:36:68:7e:34:b0:cc:0c:0d:a8:80:00:cd:96:
         76:45:d2:67:86:d1:f2:50:da:59:4a:86:d2:c1:b9:94:41:ad:
         a5:02:03:64:de:b7:f8:b7:c9:4f:18:34:90:85:88:6c:f7:bd:
         41:2b:d3:e0:8c:df:34:fc:9e:cf:67:0c:75:ba:45:84:84:6b:
         4a:26:54:73:e0:f7:02:66:f1:a8:87:65:a6:69:1d:4c:37:42:
         4c:8d:11:d7:59:be:d9:53:8d:64:23:44:7c:27:db:c9:a6:68:
         21:a6:bd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org