Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32302d3230203d3e203533313533.roa
File:                     3138362e3230392e39362e302f32302d3230203d3e203533313533.roa (raw, json)
Hash identifier:          sBHP6mF6ReIbVxvNx0ke34olSBruCYK3MoWZl5xam9M=
Subject key identifier:   1D:EE:A2:4A:06:FF:1C:83:28:52:E0:19:33:05:92:3F:68:9F:92:18
Certificate issuer:       /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial:       0C116663D732DDE92818BF6732226C2B4CFC9CB3
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32302d3230203d3e203533313533.roa
Signing time:             Wed 15 Mar 2023 20:04:21 +0000
ROA not before:           Wed 15 Mar 2023 19:59:21 +0000
ROA not after:            Wed 13 Mar 2024 20:04:21 +0000
asID:                     53153
IP address blocks:        186.209.96.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:11:66:63:d7:32:dd:e9:28:18:bf:67:32:22:6c:2b:4c:fc:9c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
        Validity
            Not Before: Mar 15 19:59:21 2023 GMT
            Not After : Mar 13 20:04:21 2024 GMT
        Subject: CN=1DEEA24A06FF1C832852E0193305923F689F9218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8b:52:dd:7b:15:9c:21:13:f9:9d:0c:26:da:
                    32:ca:23:68:9f:3f:77:85:56:b9:7e:31:37:00:fb:
                    d0:db:23:71:18:77:93:f9:aa:c1:6f:c1:2a:c4:b9:
                    12:a7:bc:82:f3:f6:71:c5:fa:87:e2:70:ab:75:b8:
                    d5:a4:c3:06:6b:8a:fc:a1:83:64:da:84:a9:17:af:
                    9f:7d:91:2f:77:78:44:50:6e:e1:23:f7:88:a6:77:
                    e4:c2:2c:67:df:00:33:3a:c8:0b:0e:75:0b:cd:d6:
                    dc:ad:2f:76:24:bd:da:49:31:c0:d6:b5:ec:2c:50:
                    63:60:a6:e8:de:3e:7d:18:d8:42:a8:b1:ef:96:48:
                    2d:e2:af:d5:28:59:a7:12:08:fa:45:77:1d:87:bc:
                    82:e0:c0:f2:13:27:70:dd:66:09:a3:34:08:1b:7b:
                    f4:dc:15:04:32:6c:96:04:1a:65:3c:03:06:77:f9:
                    fb:31:ec:6c:14:22:64:99:81:22:1d:cc:f4:7d:51:
                    db:d5:4f:ef:d7:71:0a:1b:d0:35:a9:de:a0:6d:cf:
                    27:16:f1:a1:df:83:a0:b0:4d:ae:2c:08:65:2e:e0:
                    1d:d3:8c:b0:eb:7d:97:32:a7:54:22:a7:fb:84:16:
                    3e:ea:3c:d2:91:cf:f8:4b:e8:6a:20:70:38:8b:93:
                    0b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EE:A2:4A:06:FF:1C:83:28:52:E0:19:33:05:92:3F:68:9F:92:18
            X509v3 Authority Key Identifier:
                keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32302d3230203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:93:d4:12:c7:0f:e5:1d:59:11:27:c4:64:d8:5a:bc:18:99:
         fe:dc:6f:fe:8e:da:93:27:d5:11:a8:61:a5:d0:bb:67:c1:5f:
         83:90:bb:6f:73:a0:0b:63:29:0c:21:33:ba:c5:77:c5:73:d8:
         4a:7b:db:4f:75:5f:f5:3e:9a:e1:1c:67:49:91:09:73:7d:0f:
         2a:c9:7b:27:d4:0d:77:2f:c1:94:49:41:89:80:28:5a:7c:b4:
         18:de:f8:d7:6f:d5:c2:36:31:40:a3:d3:8c:17:56:f0:3d:35:
         6b:aa:a2:d2:98:0a:b4:eb:8d:da:a7:f9:1d:03:c9:ba:d3:72:
         51:83:18:f0:8a:af:d5:43:88:fa:36:52:a9:c5:e7:7b:6e:41:
         35:f9:ac:26:f7:5e:86:ad:9e:84:0f:12:64:1d:70:b0:2c:01:
         38:78:86:20:7d:5b:b4:7f:a9:21:37:f9:03:60:a7:44:4e:9f:
         80:e6:fa:93:72:6c:c3:e4:11:3c:fe:ee:14:fd:f4:ae:78:70:
         ad:db:28:fe:e9:19:9a:3e:6e:3e:1c:8e:b9:d3:ca:2d:00:3b:
         f0:df:97:c6:f1:7b:71:62:3f:5d:ee:47:a8:5d:d9:16:12:fb:
         27:d3:e3:91:f4:8b:c0:61:b8:9b:bb:25:0a:81:c4:01:de:eb:
         1f:9f:6e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org