Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130382e302f32322d3232203d3e203533313533.roa
File:                     3138372e36312e3130382e302f32322d3232203d3e203533313533.roa (raw, json)
Hash identifier:          2+zPpyK90Ca+nArviX0T7xb2XXmOKL4RS9rZlwMmSTY=
Subject key identifier:   D4:95:73:C1:65:19:18:29:8C:6C:71:05:1A:36:F3:6F:5A:34:E2:C4
Certificate issuer:       /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial:       5E5E0EDA8E4F6C33F5B96E93C9BE7831262CB6C7
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130382e302f32322d3232203d3e203533313533.roa
Signing time:             Wed 14 Feb 2024 20:33:18 +0000
ROA not before:           Wed 14 Feb 2024 20:28:18 +0000
ROA not after:            Wed 12 Feb 2025 20:33:18 +0000
asID:                     53153
IP address blocks:        187.61.108.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5e:0e:da:8e:4f:6c:33:f5:b9:6e:93:c9:be:78:31:26:2c:b6:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
        Validity
            Not Before: Feb 14 20:28:18 2024 GMT
            Not After : Feb 12 20:33:18 2025 GMT
        Subject: CN=D49573C1651918298C6C71051A36F36F5A34E2C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:91:b5:b6:5a:4d:be:a3:e8:1c:39:2f:20:
                    83:62:86:97:f1:35:2e:9a:cf:dd:2e:74:4e:ac:05:
                    5f:02:d2:67:33:4e:9a:a0:eb:f6:6f:56:49:b1:8c:
                    24:15:5e:c9:60:cf:42:e3:ba:d4:23:74:bf:9d:6e:
                    d5:be:7b:26:53:b5:fd:32:cf:a4:c9:a8:18:c8:87:
                    8d:20:91:4b:61:68:36:fc:a1:92:b8:2a:2a:42:e3:
                    37:23:49:b5:f3:9d:62:1a:50:9f:d4:62:15:16:95:
                    d3:18:25:c8:fa:6c:ff:45:e3:fd:4d:cf:29:3b:4c:
                    8e:a7:d4:fb:2d:3e:e4:7e:0e:33:25:04:2e:1c:df:
                    ff:aa:6d:46:5e:09:97:28:ff:79:8c:a2:d6:08:88:
                    55:e9:24:24:a5:99:68:60:1d:20:98:a0:cb:b5:a5:
                    ca:cf:39:af:3e:db:25:b4:1a:8d:71:13:6a:01:c6:
                    74:e2:5b:9b:f1:78:dd:55:42:e3:fd:34:e9:e0:c0:
                    a9:0e:fa:cf:7f:f9:31:2f:e6:9f:68:98:1b:c2:ab:
                    c4:64:d7:b6:6a:a3:31:4e:52:c0:86:78:20:69:22:
                    4e:03:b0:5f:20:8b:4e:fb:80:82:6a:21:6c:dc:82:
                    39:95:11:9d:ad:2f:4f:5d:b9:a8:dd:5c:dd:7c:aa:
                    75:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:95:73:C1:65:19:18:29:8C:6C:71:05:1A:36:F3:6F:5A:34:E2:C4
            X509v3 Authority Key Identifier:
                keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130382e302f32322d3232203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:83:ba:b6:e7:41:45:4b:c6:92:c2:c7:4e:ec:f0:c3:f8:24:
         b5:b5:ee:78:29:44:19:41:0b:df:48:ec:88:ba:cb:67:91:ba:
         65:c8:40:c3:cb:cc:2a:f1:67:cf:83:9c:51:b4:2e:ba:b9:53:
         aa:92:fa:d8:cd:aa:09:cc:7c:aa:02:7e:67:a1:ec:6b:fb:65:
         d9:d4:df:88:76:06:1a:3a:aa:16:41:62:54:50:e7:77:2d:37:
         84:30:76:b8:3a:0f:ca:ab:7e:a6:0e:c8:ba:90:83:a0:3b:be:
         34:35:de:8c:9f:d3:23:c1:20:0a:53:85:87:77:1d:cb:01:6f:
         f7:f0:d5:05:ce:21:9b:83:d8:f3:af:03:80:80:04:7c:d4:3b:
         09:ee:e2:bf:a8:81:9f:81:27:b7:a6:99:ad:26:df:c4:2f:3a:
         fa:f5:ba:32:00:50:32:72:dd:69:07:5d:f7:ed:5b:04:a9:44:
         85:d1:95:ae:ea:ad:4c:fa:f9:79:98:5f:b7:32:f3:ca:2d:df:
         61:9b:e2:75:58:00:c7:e6:5c:83:7c:e6:3a:61:ea:a7:cb:e2:
         f7:75:28:e4:ee:4b:32:22:87:86:60:6c:28:fd:f8:75:72:04:
         c1:55:7c:a7:7f:57:eb:cf:35:79:8f:9f:e0:55:34:f7:28:34:
         65:b3:5f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org