Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3137362e302f32312d3332203d3e203533323039.roa
File:                     3138362e3233332e3137362e302f32312d3332203d3e203533323039.roa (raw, json)
Hash identifier:          wfqNm+jKl397UJqIWE0Ei4JhAJr2CnMkDNFI9TlrWzo=
Subject key identifier:   52:2D:53:81:6E:A3:FF:4F:15:CC:77:15:EC:50:78:27:9A:7B:ED:22
Certificate issuer:       /CN=4174471032BF86AA31A24302BF994269A134800A
Certificate serial:       60193E9052BAF760025742A70D85188F1A9FCF9D
Authority key identifier: 41:74:47:10:32:BF:86:AA:31:A2:43:02:BF:99:42:69:A1:34:80:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4174471032BF86AA31A24302BF994269A134800A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3137362e302f32312d3332203d3e203533323039.roa
Signing time:             Tue 18 Jul 2023 14:57:20 +0000
ROA not before:           Tue 18 Jul 2023 14:52:20 +0000
ROA not after:            Tue 16 Jul 2024 14:57:20 +0000
asID:                     53209
IP address blocks:        186.233.176.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:19:3e:90:52:ba:f7:60:02:57:42:a7:0d:85:18:8f:1a:9f:cf:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4174471032BF86AA31A24302BF994269A134800A
        Validity
            Not Before: Jul 18 14:52:20 2023 GMT
            Not After : Jul 16 14:57:20 2024 GMT
        Subject: CN=522D53816EA3FF4F15CC7715EC5078279A7BED22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:b8:13:ac:14:5c:7a:53:73:1c:69:33:f6:
                    3f:2c:09:c5:a3:b5:8c:f5:d3:36:c4:91:e5:a8:60:
                    bf:a2:09:23:99:56:3f:c9:f4:84:83:52:10:3a:b8:
                    7a:1b:39:2e:59:ac:03:96:e2:f2:f8:7c:12:35:74:
                    96:24:02:92:99:78:71:cd:18:db:7f:e9:5f:9f:36:
                    03:c7:1d:d7:54:f3:15:06:b4:c6:01:71:b5:94:e6:
                    6b:e7:0d:c6:a3:54:25:cf:3e:45:51:55:cb:ff:d3:
                    89:36:b9:2d:7b:4b:14:a6:fd:14:17:9f:af:92:e7:
                    74:a4:5f:a5:53:51:13:ae:39:3d:4b:1a:33:34:6d:
                    0d:d3:cc:9c:52:66:0e:3a:01:29:75:e2:1d:2e:63:
                    9c:9a:9b:fd:ba:f0:fa:d5:0b:5d:75:04:94:0c:ad:
                    7f:02:2e:cb:38:1d:b4:75:10:55:1e:fd:5f:01:77:
                    36:41:dd:ef:5b:82:74:cb:02:7e:ae:49:f0:ad:03:
                    fc:23:c7:9d:38:0d:aa:9b:86:09:33:f1:17:6d:56:
                    f0:77:68:b6:a2:38:b6:bb:63:40:91:9a:0d:c1:80:
                    bd:30:84:95:ad:86:20:29:26:28:16:88:20:c7:3e:
                    02:82:9d:94:c1:d2:f6:c3:99:a8:bd:9e:62:4f:82:
                    77:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2D:53:81:6E:A3:FF:4F:15:CC:77:15:EC:50:78:27:9A:7B:ED:22
            X509v3 Authority Key Identifier:
                keyid:41:74:47:10:32:BF:86:AA:31:A2:43:02:BF:99:42:69:A1:34:80:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/4174471032BF86AA31A24302BF994269A134800A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4174471032BF86AA31A24302BF994269A134800A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/3138362e3233332e3137362e302f32312d3332203d3e203533323039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:dc:d0:03:0c:ce:70:8e:ab:f3:ab:92:33:d8:98:79:75:34:
         3b:00:e0:6c:fd:11:d1:c3:2c:13:67:a9:dd:bf:d5:3e:68:4f:
         4d:5b:1c:66:77:26:a7:74:7e:fb:70:d7:94:db:88:80:83:4c:
         26:90:a2:65:cd:d2:29:43:03:36:c0:7e:bb:6a:ce:1a:e8:81:
         cd:04:b0:1b:63:53:ee:b8:b1:b8:fd:fb:02:17:99:e8:b5:68:
         8e:de:17:30:a9:66:ce:a9:8f:db:b7:24:1b:ea:28:8b:ef:74:
         79:a4:e3:33:9d:19:5a:d1:0d:68:f7:67:0a:4d:18:b8:85:2c:
         d8:a4:d9:17:1a:98:7d:f7:4a:f1:2d:98:59:67:55:c3:37:95:
         47:a0:86:0a:af:62:30:66:c4:fc:59:ea:1f:c4:be:62:8c:69:
         ae:32:96:c1:b9:e4:3d:67:9b:8b:89:92:1d:b8:4e:3b:3c:dc:
         cc:61:8c:0f:5f:bc:70:bd:c0:fa:a0:fa:13:03:1f:fd:ed:34:
         f2:42:fe:aa:16:29:cf:e0:d9:38:55:1f:c2:a8:ac:5f:12:9c:
         de:c9:03:0b:91:bc:1c:ca:2c:0a:2e:01:e7:64:b0:68:9f:68:
         74:f9:5d:02:4a:66:d6:41:8c:df:41:23:48:ec:dc:56:30:6b:
         60:55:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 18:07:32 2024 by rpki-client on console-ams.rpki-client.org