Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130342e302f32332d3234203d3e20323632353935.roa
File:                     3138372e36312e3130342e302f32332d3234203d3e20323632353935.roa (raw, json)
Hash identifier:          pTvX2FSQsKs4Q2TpuzYuNP7easv0fwSm7u9WymCeRVA=
Subject key identifier:   CE:B6:01:BB:E9:79:06:54:47:43:D0:B7:B9:C2:7C:97:C1:0D:69:52
Certificate issuer:       /CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
Certificate serial:       2FB590188BC02C3F5AF85BBB068ABE7E2557DD34
Authority key identifier: F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130342e302f32332d3234203d3e20323632353935.roa
Signing time:             Sat 04 Feb 2023 13:33:59 +0000
ROA not before:           Sat 04 Feb 2023 13:28:59 +0000
ROA not after:            Sat 03 Feb 2024 13:33:59 +0000
asID:                     262595
IP address blocks:        187.61.104.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b5:90:18:8b:c0:2c:3f:5a:f8:5b:bb:06:8a:be:7e:25:57:dd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F16C1087BB1A5260CB32E45FBAB05BFC61177DDE
        Validity
            Not Before: Feb  4 13:28:59 2023 GMT
            Not After : Feb  3 13:33:59 2024 GMT
        Subject: CN=CEB601BBE97906544743D0B7B9C27C97C10D6952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:96:53:20:7d:9c:96:b4:0f:1a:8f:0d:90:e5:
                    89:d5:89:c8:bf:45:ac:61:2a:94:d7:db:ad:6f:d1:
                    0e:44:2a:99:f2:c3:73:90:e1:9c:f6:ab:4c:c5:f2:
                    bb:d9:18:7a:28:3a:10:7d:0e:3c:bb:77:0f:eb:39:
                    85:3b:88:f0:8a:7f:cf:ce:f9:1f:28:6d:9c:23:7b:
                    40:8a:db:a8:62:96:68:62:c0:af:1a:b5:5a:54:95:
                    fb:5c:19:33:1f:28:e5:25:dd:cd:af:19:44:a6:76:
                    6d:ff:2b:45:16:93:7d:16:9b:de:5f:b2:df:83:59:
                    f9:c8:79:a4:f3:1c:50:4b:ee:09:fc:53:98:08:16:
                    23:56:bc:47:76:61:97:9c:42:ea:98:1c:e0:2a:b1:
                    81:d3:be:b5:fd:9d:6f:21:31:12:67:30:b0:27:0d:
                    41:f3:4d:3a:94:b5:e1:e0:d5:1a:3f:c9:62:e8:71:
                    4f:62:51:82:a4:a1:ef:7d:3d:ca:f0:be:06:e1:75:
                    0b:fb:b3:ef:90:86:22:59:1d:09:b3:0e:ab:70:07:
                    87:92:8e:0a:fd:3b:bc:50:d8:d4:ec:72:90:b5:3e:
                    c2:8f:36:93:af:5b:7a:6e:24:20:60:54:36:df:04:
                    3a:14:3d:5c:1e:24:0d:c9:ef:dc:54:c4:94:4c:52:
                    ca:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B6:01:BB:E9:79:06:54:47:43:D0:B7:B9:C2:7C:97:C1:0D:69:52
            X509v3 Authority Key Identifier:
                keyid:F1:6C:10:87:BB:1A:52:60:CB:32:E4:5F:BA:B0:5B:FC:61:17:7D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F16C1087BB1A5260CB32E45FBAB05BFC61177DDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130342e302f32332d3234203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:bb:77:aa:72:5c:26:8e:2c:d1:e9:0f:3b:d1:55:34:e9:e4:
         8f:e8:b4:40:1b:a2:bf:12:92:bc:20:75:e0:ec:92:b2:3c:79:
         23:e7:dd:22:d8:ab:2d:d4:01:57:44:28:36:67:c3:f7:fe:05:
         d7:05:de:b1:17:36:1d:79:21:69:97:f9:f5:0b:6e:d4:10:e6:
         d5:2e:6b:17:c1:b3:b4:7a:57:5a:51:b6:49:fb:b3:a5:7c:09:
         c6:2d:97:42:72:36:07:68:26:54:47:c9:c9:ad:bb:f8:29:be:
         d6:f1:75:a9:55:86:ad:d0:71:71:3f:87:0f:fd:78:43:c1:cb:
         74:49:b3:6f:c7:70:3a:56:5a:68:90:66:87:89:94:73:bc:18:
         2a:71:58:f2:72:38:a7:59:c5:2b:4b:c9:91:15:43:2c:bb:5a:
         24:e4:e8:5b:35:53:4d:2a:5a:98:5d:be:b9:45:d7:dc:4b:40:
         a1:34:fa:23:50:87:3f:f9:72:2f:c4:27:75:03:5b:61:7d:75:
         5d:dd:d5:ac:60:b0:f2:43:9c:b1:95:82:d2:1d:b9:65:ec:05:
         ec:95:e7:ec:12:f9:3a:77:bb:8d:20:6b:6d:2a:07:de:2a:51:
         28:a7:82:f6:42:00:ac:5c:14:bd:93:72:42:ec:bf:53:cd:7a:
         3b:10:cd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org