Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39382e302f32332d3233203d3e20323632353935.roa
File:                     3138372e36312e39382e302f32332d3233203d3e20323632353935.roa (raw, json)
Hash identifier:          hxle8fu4u9G962ASeg0kZ6ekEe3Bvo86+hKHLp0tAdo=
Subject key identifier:   B5:21:DA:E6:9A:2C:CC:E9:E7:09:A7:56:94:F6:77:FE:1D:B3:D4:60
Certificate issuer:       /CN=17A68DA7CE4974FE82917110852855A6036A6AAF
Certificate serial:       5949FEE7003627B4019F9697EE7C459FBAFA7DE0
Authority key identifier: 17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39382e302f32332d3233203d3e20323632353935.roa
Signing time:             Wed 15 Mar 2023 20:04:46 +0000
ROA not before:           Wed 15 Mar 2023 19:59:46 +0000
ROA not after:            Wed 13 Mar 2024 20:04:46 +0000
asID:                     262595
IP address blocks:        187.61.98.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:49:fe:e7:00:36:27:b4:01:9f:96:97:ee:7c:45:9f:ba:fa:7d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17A68DA7CE4974FE82917110852855A6036A6AAF
        Validity
            Not Before: Mar 15 19:59:46 2023 GMT
            Not After : Mar 13 20:04:46 2024 GMT
        Subject: CN=B521DAE69A2CCCE9E709A75694F677FE1DB3D460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:45:31:fb:2d:2d:3c:8a:24:e4:ca:00:46:90:
                    0c:e6:ab:25:57:10:4b:22:c2:22:2e:bb:5d:80:38:
                    be:ad:fe:16:35:0d:27:47:5f:04:11:b9:10:dc:88:
                    49:8d:6e:7e:06:bc:8f:ba:dd:ac:5e:30:4d:54:2f:
                    81:fe:cd:47:f6:07:3d:ab:85:3d:05:0b:16:a2:17:
                    2d:2a:c0:37:d6:49:b6:76:14:5b:d7:a0:3f:88:1c:
                    bc:33:f8:eb:cd:15:b9:06:a9:ad:6e:84:23:38:bd:
                    60:35:bd:e7:be:06:8a:52:e8:b1:9c:97:df:2b:4a:
                    9f:a3:1f:8b:bf:56:88:62:89:65:92:a9:29:d9:e3:
                    26:80:82:76:7e:c2:df:2c:54:31:64:87:f4:c4:05:
                    eb:d0:2c:93:8c:2a:ad:1d:de:2e:c3:bb:4b:39:43:
                    8e:66:3a:84:5a:2c:3b:a4:61:9a:cb:56:fd:17:2f:
                    a0:c3:ea:58:27:6b:0e:25:5d:2b:e2:62:38:cd:96:
                    42:4a:42:d6:9f:40:a4:56:f2:95:7e:0b:bb:12:92:
                    4e:79:1b:9e:c3:93:98:f3:19:10:39:cb:15:fc:37:
                    b9:7f:42:dd:6e:08:b4:24:3d:bc:4d:1b:be:26:e3:
                    76:e4:84:cf:cc:ff:7e:3d:2d:d3:8e:16:08:b3:ea:
                    6c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:21:DA:E6:9A:2C:CC:E9:E7:09:A7:56:94:F6:77:FE:1D:B3:D4:60
            X509v3 Authority Key Identifier:
                keyid:17:A6:8D:A7:CE:49:74:FE:82:91:71:10:85:28:55:A6:03:6A:6A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/17A68DA7CE4974FE82917110852855A6036A6AAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17A68DA7CE4974FE82917110852855A6036A6AAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39382e302f32332d3233203d3e20323632353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:d9:57:9d:f1:93:5f:7f:bf:aa:5e:79:35:57:72:a8:b5:
         4c:aa:99:2b:1b:66:de:15:a0:40:72:e9:eb:1d:4b:ef:15:e1:
         61:88:fd:08:95:e6:85:36:98:76:ba:18:39:a1:9a:ed:46:ac:
         08:d4:a8:63:e2:8f:66:24:75:c6:d2:aa:17:f2:bc:52:c8:2d:
         0d:50:a7:4d:e4:ba:9a:d0:e2:9a:6b:4c:0f:5b:41:30:90:1b:
         34:a7:60:67:81:f0:de:24:f3:1c:14:21:20:49:1a:20:da:b2:
         fc:95:f7:aa:64:fe:a6:9d:a0:87:a8:ef:c4:27:42:77:c5:ec:
         fc:b0:6a:55:95:29:a9:09:7d:d1:45:a3:42:7e:71:69:a7:e5:
         8f:c3:a9:27:1f:94:15:09:13:5a:ce:0d:be:3a:e3:45:bf:c8:
         f0:07:66:2b:4d:e4:ed:3b:d5:01:e0:e4:d0:40:58:7b:aa:18:
         96:26:34:7a:80:e7:c2:a0:d6:a5:30:15:08:b3:bc:62:c3:3c:
         18:fa:fe:26:46:a6:04:7b:f4:50:ec:3d:a7:d4:c7:be:77:51:
         55:e0:97:64:3b:c0:a9:a8:22:21:58:2d:d4:09:94:a1:6e:f3:
         ee:fb:92:ad:d5:22:b1:dd:26:1f:ed:40:23:d8:20:f4:b7:3e:
         7f:4b:c0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org