Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130302e302f32332d3234203d3e203533313533.roa
File:                     3138372e36312e3130302e302f32332d3234203d3e203533313533.roa (raw, json)
Hash identifier:          9+/YzpjpUJanehzA4EYcEh1PKvzaCx+oSO6q1GraDe4=
Subject key identifier:   D2:32:50:93:19:DF:19:D2:A3:E4:15:C0:99:44:4D:63:A1:73:24:15
Certificate issuer:       /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial:       5B63AAF0FC3023E668E65288A26C476282880B43
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130302e302f32332d3234203d3e203533313533.roa
Signing time:             Fri 06 Oct 2023 12:16:00 +0000
ROA not before:           Fri 06 Oct 2023 12:11:00 +0000
ROA not after:            Fri 04 Oct 2024 12:16:00 +0000
asID:                     53153
IP address blocks:        187.61.100.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:63:aa:f0:fc:30:23:e6:68:e6:52:88:a2:6c:47:62:82:88:0b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
        Validity
            Not Before: Oct  6 12:11:00 2023 GMT
            Not After : Oct  4 12:16:00 2024 GMT
        Subject: CN=D232509319DF19D2A3E415C099444D63A1732415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:70:12:fe:ae:a3:e5:91:3e:d0:55:93:9a:
                    b0:e2:f1:27:c5:d8:96:a1:0b:c3:db:df:cd:19:75:
                    a8:93:b8:96:0d:c0:12:f8:c4:af:c4:40:11:78:dc:
                    7a:7a:e9:04:47:12:53:f6:26:a0:dc:c6:16:a8:ac:
                    79:fe:f9:39:78:b6:f5:ba:7a:7c:32:f7:00:43:d3:
                    c6:bc:68:cc:63:69:42:b6:94:ec:00:1a:61:9e:d3:
                    ed:10:ee:8d:3b:61:ff:f9:b1:25:4c:56:0d:79:a6:
                    b8:b5:43:2b:28:76:a6:a4:50:c6:c0:42:43:74:2e:
                    1b:8f:53:6a:7d:bd:ec:1a:d3:19:14:ca:ad:bc:f0:
                    39:1d:f4:2a:36:ff:b3:50:ef:79:f5:5e:fc:a9:8f:
                    7f:47:56:15:13:f7:49:e8:31:72:ca:5c:db:03:1e:
                    1e:fb:05:2d:99:7b:71:95:c9:31:9d:13:20:d3:22:
                    ac:07:ab:d0:7d:d7:44:47:e9:33:5a:3e:cf:f1:d6:
                    3f:e4:8d:e7:40:b1:4f:6c:12:b8:76:6a:4a:20:dc:
                    4d:2e:82:c1:fa:de:2d:45:02:84:c1:f2:1e:f8:0c:
                    c3:21:e6:10:a8:48:9d:91:ca:88:ed:b8:13:1f:88:
                    89:27:41:8c:d0:67:f7:e0:2c:f7:75:ec:eb:b1:3e:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:32:50:93:19:DF:19:D2:A3:E4:15:C0:99:44:4D:63:A1:73:24:15
            X509v3 Authority Key Identifier:
                keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130302e302f32332d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:c6:c4:5f:0a:a6:ca:19:3c:cb:86:b3:b2:e0:f4:04:f0:04:
         ee:c4:35:a4:60:c3:65:5a:85:aa:27:31:dd:1a:ef:bd:90:96:
         61:d8:f9:aa:f9:86:ea:b7:67:63:71:19:07:28:e3:e2:c8:3b:
         38:8e:27:e7:42:23:cd:7c:64:27:25:0f:27:a6:97:67:d3:ae:
         b1:ec:64:9a:b9:7c:1c:7e:47:33:ed:43:18:3f:36:43:bf:69:
         38:b0:83:8f:c5:70:d4:05:f5:dd:54:34:0e:9f:41:6b:c5:99:
         9c:99:3e:40:3b:6d:30:9c:8c:1a:de:7f:5c:0b:90:10:4d:49:
         6f:3d:ad:a3:14:63:51:e2:13:4f:c0:23:1a:d6:ac:6e:8d:26:
         5a:7e:60:92:2f:13:52:43:01:8a:98:68:40:13:61:60:96:82:
         ba:bd:16:5f:96:95:51:6c:58:fe:6b:f0:23:ed:1f:dc:71:b8:
         c9:70:c3:b3:e2:46:66:48:eb:62:35:db:ff:96:f1:23:7b:06:
         a8:5b:dc:f1:60:3f:99:c6:d2:4f:86:f6:51:c7:58:32:f7:0c:
         71:e5:53:d6:6f:53:8f:9c:d1:44:e0:17:33:a2:27:f2:bd:4b:
         9b:50:78:9b:d3:91:64:db:69:fd:96:b5:0b:ef:73:25:9d:ef:
         ba:16:fc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org