Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130342e302f32322d3232203d3e203533313533.roa
File:                     3138372e36312e3130342e302f32322d3232203d3e203533313533.roa (raw, json)
Hash identifier:          wVykm6KQkFWP/NqTp3bFk0FT0SnDWSSpCnyx1jqzNqw=
Subject key identifier:   7F:DF:F0:80:5B:65:8B:4D:BC:FB:1B:DE:3D:22:5E:D8:88:2D:19:45
Certificate issuer:       /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial:       09D7714CF8C06A740D321BA76FBA04F010637970
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130342e302f32322d3232203d3e203533313533.roa
Signing time:             Wed 15 Mar 2023 20:09:28 +0000
ROA not before:           Wed 15 Mar 2023 20:04:28 +0000
ROA not after:            Wed 13 Mar 2024 20:09:28 +0000
asID:                     53153
IP address blocks:        187.61.104.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d7:71:4c:f8:c0:6a:74:0d:32:1b:a7:6f:ba:04:f0:10:63:79:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
        Validity
            Not Before: Mar 15 20:04:28 2023 GMT
            Not After : Mar 13 20:09:28 2024 GMT
        Subject: CN=7FDFF0805B658B4DBCFB1BDE3D225ED8882D1945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9f:4d:8a:37:65:d3:9b:21:42:4e:a7:03:95:
                    f8:74:c5:a6:a8:13:76:51:54:bd:69:84:c3:9f:f0:
                    5f:ee:9b:11:ee:a5:aa:06:13:8b:83:71:02:67:6b:
                    84:73:37:4a:fe:19:bc:f0:33:3c:3e:49:29:fc:fc:
                    3c:37:d3:56:a0:97:49:65:bf:c3:23:44:5a:e9:c5:
                    59:3d:25:1c:ef:a2:02:12:96:b5:b8:5f:51:16:d5:
                    d7:2b:6d:7b:ef:68:6c:c1:1f:78:44:c0:5c:c3:6f:
                    1c:1a:00:cd:ee:bb:46:ac:15:8c:c3:a2:5a:5d:fc:
                    58:6e:2c:9d:15:04:b8:af:bc:7f:f5:a6:2b:7f:be:
                    29:2d:d5:7a:b2:aa:3b:3d:bc:04:6d:97:31:8f:fd:
                    43:2d:1b:d7:0d:42:a0:26:38:6d:26:fb:f0:b3:30:
                    c6:0f:fc:00:f8:b0:19:1b:70:ca:76:a8:d3:01:80:
                    7c:5b:3e:90:3b:31:83:a4:e3:6d:7e:46:18:b0:38:
                    0a:99:80:71:2c:e9:8b:4b:53:5d:0c:06:83:ed:61:
                    35:3c:fc:66:11:80:a6:dd:5b:a3:49:8e:bf:85:a1:
                    df:42:b6:76:46:6a:3e:61:0a:39:23:55:1a:23:2c:
                    e8:58:b7:8c:00:7e:62:45:04:d1:32:32:da:8f:66:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DF:F0:80:5B:65:8B:4D:BC:FB:1B:DE:3D:22:5E:D8:88:2D:19:45
            X509v3 Authority Key Identifier:
                keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130342e302f32322d3232203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:6c:08:62:6e:9b:a2:59:a7:59:2f:d1:d3:bf:84:77:bd:80:
         d7:16:67:68:fe:8a:4b:75:e1:56:38:99:39:10:bf:59:f9:e1:
         cf:96:bb:88:22:95:18:88:30:82:9c:ff:0d:ff:6f:96:b3:28:
         b2:f7:67:dd:02:68:27:68:df:5d:87:e3:33:20:b4:fb:83:bc:
         5d:a5:72:b7:94:74:3f:82:ff:34:dd:50:9d:fc:7f:c8:43:26:
         28:89:e7:e5:75:58:da:b6:dc:90:b1:e1:fb:47:c8:bb:d9:aa:
         fa:47:c3:ef:ce:ac:91:cb:8a:af:da:46:f2:cc:86:dc:8b:a6:
         a1:a6:82:34:d1:71:c0:a8:35:ee:9d:5a:4c:c3:b4:49:07:db:
         09:33:9c:af:10:95:2f:ba:6a:d9:63:ba:60:9f:10:a8:9a:0f:
         11:21:d7:8e:53:2c:b6:8d:5e:36:bd:26:64:ef:60:16:ac:56:
         b2:25:9e:6c:c7:75:e9:b8:dd:bc:2f:22:6b:1c:83:c1:28:67:
         3c:b6:42:c5:fe:ad:cc:0f:69:d8:6e:fa:13:1d:32:92:9d:d0:
         04:9f:a9:e3:76:35:d2:cc:d2:ea:61:57:2c:40:6c:4d:2d:8e:
         a2:e5:41:5e:b7:1f:57:5a:72:4a:73:f8:82:ca:7a:38:e0:a2:
         b5:6e:15:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org