Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39382e302f32332d3233203d3e203533313533.roa
File:                     3138362e3230392e39382e302f32332d3233203d3e203533313533.roa (raw, json)
Hash identifier:          uPaAxu6hZKklp9CQTbOxkzGnCD0BGrxB+OyjmLZaqBk=
Subject key identifier:   AF:4E:9B:CB:5C:A6:9A:12:A4:D7:6A:D2:00:29:00:74:A4:DA:AC:9D
Certificate issuer:       /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial:       3D42985F850CF574A5D9B397CC7109C3BD263111
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39382e302f32332d3233203d3e203533313533.roa
Signing time:             Wed 15 Mar 2023 20:08:12 +0000
ROA not before:           Wed 15 Mar 2023 20:03:12 +0000
ROA not after:            Wed 13 Mar 2024 20:08:12 +0000
asID:                     53153
IP address blocks:        186.209.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:42:98:5f:85:0c:f5:74:a5:d9:b3:97:cc:71:09:c3:bd:26:31:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
        Validity
            Not Before: Mar 15 20:03:12 2023 GMT
            Not After : Mar 13 20:08:12 2024 GMT
        Subject: CN=AF4E9BCB5CA69A12A4D76AD200290074A4DAAC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:32:44:9d:84:9d:9f:a8:45:80:36:be:d9:
                    c4:0f:15:7a:c0:ec:73:a2:00:09:68:9f:bd:47:a7:
                    9f:6c:13:d4:1e:a3:2e:ca:64:2a:51:1b:bc:8f:11:
                    28:9b:34:33:5c:bd:8b:73:78:49:dc:78:e7:28:8f:
                    ea:ed:63:c2:00:85:bc:3c:9d:77:e8:a2:8d:be:e6:
                    0d:14:84:69:78:76:a1:e1:a6:bb:6b:7f:30:b9:67:
                    6f:88:05:f9:a3:6c:aa:81:0d:a5:99:df:47:ab:fc:
                    fe:26:6f:59:b8:e0:f4:54:c0:5b:b3:55:95:cf:11:
                    e8:10:ee:6d:2d:9f:d9:3c:48:5f:03:18:82:0a:3c:
                    64:f4:45:1f:bb:26:d2:d8:7e:ef:90:19:33:93:74:
                    3a:67:ad:e9:f6:87:a8:57:96:04:8f:df:7c:32:e3:
                    26:e3:0c:bd:9d:4a:38:41:bb:ea:b3:04:81:bc:28:
                    bf:76:b6:72:02:03:c4:9d:93:bd:13:41:f2:b7:e3:
                    8b:06:40:ba:68:17:a4:22:e2:86:39:2c:de:8a:63:
                    58:38:65:cb:9a:a2:53:25:5e:f6:a6:18:5c:fa:13:
                    17:3b:d7:bb:53:21:7b:8b:cd:21:0e:5c:5f:0e:c0:
                    59:f2:74:29:4a:70:f6:65:e8:59:d8:37:5d:e3:33:
                    2e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4E:9B:CB:5C:A6:9A:12:A4:D7:6A:D2:00:29:00:74:A4:DA:AC:9D
            X509v3 Authority Key Identifier:
                keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39382e302f32332d3233203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:04:eb:c8:30:9f:0a:66:9e:c2:5a:81:c9:ea:8e:5b:2d:91:
         2c:7c:80:19:24:4d:ee:ea:19:55:4c:70:19:4d:21:a5:60:d7:
         62:8d:44:0b:d0:c4:45:ac:91:d1:52:32:f7:65:fd:b6:8d:fb:
         65:1f:a5:cb:2b:ae:04:f1:d2:87:9b:f9:63:15:63:f3:7e:94:
         89:bb:cb:25:b1:bc:f0:d2:e3:2c:24:a7:ff:97:7e:99:3a:7f:
         bf:67:db:f6:f6:c6:49:30:6c:e3:8d:52:ba:2b:b9:fa:cb:de:
         0e:0e:d9:db:37:90:3f:93:b0:ef:96:d8:2e:9b:51:46:61:63:
         55:59:66:18:d8:a6:88:82:ad:fd:64:a6:d4:6a:be:a1:0c:43:
         ee:eb:b6:29:dc:27:83:4f:c3:b9:ae:84:fb:06:4e:8a:9d:af:
         7c:6f:e3:94:84:1d:a3:35:b6:44:b9:c8:ed:c7:cb:fa:3a:69:
         63:91:77:3a:33:69:2d:e2:ea:bb:5d:64:1a:23:f7:e7:6d:9d:
         15:34:f6:ad:83:9a:f6:c6:b5:e6:5b:43:4e:b3:7a:e8:9a:f2:
         b7:da:26:3b:1f:0e:ef:b0:4f:20:63:9c:41:17:1c:ea:54:dc:
         f4:a8:6c:a0:a3:4c:cd:ad:5c:57:93:f8:a4:07:f9:b8:a3:5e:
         9d:d5:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org