Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32312d3231203d3e203533313533.roa
File:                     3138372e36312e39362e302f32312d3231203d3e203533313533.roa (raw, json)
Hash identifier:          yLiH68DVGqz6tv5PIaXL0lBt5BgoYlrJvj4Hpp1fxq0=
Subject key identifier:   E0:2E:69:D3:4B:69:67:C9:21:59:BD:C7:ED:73:E3:9D:F5:B5:5F:74
Certificate issuer:       /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial:       2E175202E0D00F95A77198E306CF7AAA723FC746
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32312d3231203d3e203533313533.roa
Signing time:             Wed 15 Mar 2023 20:08:48 +0000
ROA not before:           Wed 15 Mar 2023 20:03:48 +0000
ROA not after:            Wed 13 Mar 2024 20:08:48 +0000
asID:                     53153
IP address blocks:        187.61.96.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:17:52:02:e0:d0:0f:95:a7:71:98:e3:06:cf:7a:aa:72:3f:c7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
        Validity
            Not Before: Mar 15 20:03:48 2023 GMT
            Not After : Mar 13 20:08:48 2024 GMT
        Subject: CN=E02E69D34B6967C92159BDC7ED73E39DF5B55F74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:68:02:96:98:84:aa:51:d5:96:bd:2c:bd:1c:
                    49:15:fb:a9:25:a5:96:ce:98:ba:be:b9:fc:cd:ac:
                    37:08:a8:e2:0e:04:3b:be:02:96:f6:fe:b3:8b:72:
                    b1:b5:b9:97:25:4a:dd:f8:2e:af:7c:27:22:8e:cf:
                    44:01:99:c3:6a:73:73:61:48:19:e9:66:88:6f:5a:
                    89:3a:56:9c:13:c2:87:6b:82:2b:78:98:a6:51:8d:
                    6b:a6:e6:de:3d:f6:2e:b2:52:53:ea:e3:97:d0:b2:
                    e2:0e:80:4b:78:82:a7:68:20:ea:bb:d4:f1:f4:6d:
                    cb:38:9c:bf:0b:31:46:a0:3a:77:da:5e:9b:4e:b4:
                    0d:b5:5d:05:d9:3c:55:80:18:48:44:27:4f:37:a2:
                    1b:aa:2f:e6:84:a6:c8:de:04:29:e9:b6:93:62:9a:
                    79:d9:d8:af:3f:f6:26:e9:ea:46:cb:95:cc:8b:1b:
                    c6:46:73:c7:25:7d:6b:77:25:2d:26:90:03:2e:3e:
                    4c:81:a4:87:63:85:5b:86:ed:21:a0:82:ad:8a:28:
                    03:f7:09:c7:ec:f0:5d:e8:35:20:d4:80:45:02:5f:
                    52:a5:2e:8c:f1:9e:8d:14:17:dd:cc:c3:ad:8d:90:
                    d0:93:6d:aa:4d:8f:bb:a9:40:91:8f:49:d1:57:55:
                    0a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2E:69:D3:4B:69:67:C9:21:59:BD:C7:ED:73:E3:9D:F5:B5:5F:74
            X509v3 Authority Key Identifier:
                keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39362e302f32312d3231203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:f4:0e:d8:d0:bb:76:32:51:2c:28:6b:8e:e7:ed:6e:9c:35:
         7f:8f:cf:0a:a6:24:a8:77:5b:e1:6f:91:23:c8:ac:0d:b8:3a:
         c3:43:19:82:51:36:93:4f:28:48:57:3d:c5:e4:0d:c9:48:6b:
         db:88:8b:29:5e:d5:6b:71:6f:1d:5f:60:ab:d4:81:87:71:41:
         50:c1:88:a2:ec:26:d3:ea:a2:5f:bb:16:4a:66:90:37:c4:c4:
         b1:46:8c:44:6a:dd:2d:a6:67:1f:bc:e4:4e:15:6b:0c:6f:e4:
         db:6f:6a:b8:85:da:c7:e7:50:ca:24:86:e6:6d:6f:58:c6:b8:
         38:3b:f8:33:89:7f:db:1d:43:f4:f6:5b:99:5c:a9:cf:7c:49:
         f6:22:20:10:6c:3e:2e:f0:7c:ed:8d:1d:68:b4:f1:37:d1:eb:
         c8:1a:c1:6d:6f:a3:59:f3:da:d9:e2:13:b4:83:01:9c:59:fc:
         a3:95:74:48:6c:03:7b:56:4e:9a:27:7c:d6:8b:b3:b5:41:b3:
         a6:36:e9:de:9b:1a:5b:2a:ed:21:b5:ae:37:71:32:d6:e6:af:
         19:f5:e7:71:30:18:bb:ba:88:87:7c:b9:95:bc:04:0f:1e:74:
         8c:84:1b:26:d3:b7:30:05:4b:02:fc:16:6a:70:9d:9b:1a:2c:
         d6:cf:30:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org