Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32312d3231203d3e203533313533.roa
File:                     3138362e3230392e39362e302f32312d3231203d3e203533313533.roa (raw, json)
Hash identifier:          RID2kXbVeCMke0Z88koLIc2CkLPIiwuUeC1FaUdDL64=
Subject key identifier:   76:31:D2:01:36:2D:3E:90:1F:64:64:71:E0:5B:61:88:C5:C4:0F:E6
Certificate issuer:       /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial:       6A228E0185FBA2CEAF7C6A6B76CF589A6BEAFEA1
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32312d3231203d3e203533313533.roa
Signing time:             Wed 15 Mar 2023 20:04:30 +0000
ROA not before:           Wed 15 Mar 2023 19:59:30 +0000
ROA not after:            Wed 13 Mar 2024 20:04:30 +0000
asID:                     53153
IP address blocks:        186.209.96.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:22:8e:01:85:fb:a2:ce:af:7c:6a:6b:76:cf:58:9a:6b:ea:fe:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
        Validity
            Not Before: Mar 15 19:59:30 2023 GMT
            Not After : Mar 13 20:04:30 2024 GMT
        Subject: CN=7631D201362D3E901F646471E05B6188C5C40FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:7f:89:33:2d:a8:3b:41:da:42:43:8c:5c:
                    0b:cb:be:84:69:86:3f:6f:8b:20:11:dd:58:95:af:
                    a2:06:8d:1f:8c:00:21:82:e6:c4:3f:ac:f1:b2:c8:
                    94:75:28:d3:e9:f4:03:f1:30:96:f5:33:18:e3:7e:
                    36:fe:cc:6d:dc:f1:d5:c6:38:89:4d:8a:18:e0:89:
                    a0:dd:6b:c2:80:1d:30:ed:f2:8a:92:36:28:26:eb:
                    f2:34:bf:f6:1e:f9:55:d4:3d:8b:bf:0c:2a:77:75:
                    22:c2:85:9b:4c:bf:db:1f:fa:bd:fb:0d:08:79:47:
                    00:38:c5:01:a2:72:7e:69:52:09:a2:da:53:a4:d9:
                    a6:04:b3:2c:fd:31:7f:15:d3:ac:81:d6:9f:14:3f:
                    88:45:b6:a6:f7:60:d2:e4:c6:ce:21:11:f8:88:65:
                    9e:df:ff:7a:bd:eb:cd:4c:25:ea:b5:c5:9d:3e:ce:
                    25:c5:92:45:af:35:04:c5:bf:6d:b8:dc:35:65:4f:
                    5a:be:15:40:11:6e:08:18:e3:a3:49:b9:3e:a6:4e:
                    18:92:4e:a8:51:e6:cb:85:22:58:ab:ba:95:77:ab:
                    1f:3f:b5:3b:47:7f:44:d5:ad:d7:0d:21:1c:59:75:
                    81:88:27:4f:66:d1:a6:8e:ba:95:12:bb:00:ba:96:
                    bf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:31:D2:01:36:2D:3E:90:1F:64:64:71:E0:5B:61:88:C5:C4:0F:E6
            X509v3 Authority Key Identifier:
                keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39362e302f32312d3231203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         33:83:be:8a:81:74:4d:10:a0:86:09:75:c8:4c:36:56:79:5c:
         0d:dc:c4:d0:de:db:03:03:c0:1f:a0:7c:f0:c0:bf:da:90:48:
         87:6c:b9:3f:40:56:af:7a:90:31:d1:42:d5:68:6f:98:a2:42:
         27:a2:f6:60:da:4d:af:98:5d:44:50:5f:57:f6:a7:24:f2:d1:
         8a:2b:2d:df:2e:63:86:a9:75:9e:cd:e9:72:05:46:1c:02:b0:
         61:83:40:b3:2e:72:1b:ef:c9:af:e1:e4:86:7a:97:73:65:25:
         6f:6a:c0:54:0e:db:4f:d9:57:ef:58:b4:94:5e:86:58:a8:b2:
         de:ad:95:93:8a:72:7c:51:a6:f1:0a:e9:d4:86:8a:d8:78:c3:
         35:17:48:2a:24:ee:e4:10:a7:17:05:be:e6:78:1b:ed:75:e0:
         e8:ef:54:eb:65:e3:0c:43:97:b3:12:fa:05:81:e5:a8:33:f2:
         76:3e:39:8e:1a:e3:23:22:f1:66:85:20:6b:b5:e9:23:ee:cf:
         56:c2:b6:1c:b5:89:62:af:43:26:e7:ba:64:d6:80:89:3f:f4:
         22:c8:a9:16:54:19:76:f9:4b:08:ef:cc:8d:d6:77:7a:e2:59:
         a2:4f:37:ee:4e:3e:2a:9e:0f:43:cc:ec:fa:ea:ce:0d:2b:b1:
         0e:58:54:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org