Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32302d3231203d3e20323639303733.roa
File:                     3138372e31372e33322e302f32302d3231203d3e20323639303733.roa (raw, json)
Hash identifier:          pv5Bqot8zCbjjnoOFaRSGr+Ea52BmHCFAQJeQjJ7BZk=
Subject key identifier:   A4:31:28:A1:1F:31:76:0E:EE:14:A0:72:B0:C5:72:F6:B8:7C:28:88
Certificate issuer:       /CN=53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3
Certificate serial:       6E23B662A06FDF3C5D1B29697906B4B164467BDF
Authority key identifier: 53:B0:E6:84:E1:CD:DB:34:9F:5B:A8:48:2F:99:BE:87:D3:AF:E6:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32302d3231203d3e20323639303733.roa
Signing time:             Sat 09 Mar 2024 08:42:05 +0000
ROA not before:           Sat 09 Mar 2024 08:37:05 +0000
ROA not after:            Sat 08 Mar 2025 08:42:05 +0000
asID:                     269073
IP address blocks:        187.17.32.0/20 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:23:b6:62:a0:6f:df:3c:5d:1b:29:69:79:06:b4:b1:64:46:7b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3
        Validity
            Not Before: Mar  9 08:37:05 2024 GMT
            Not After : Mar  8 08:42:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:31:1a:9f:9f:f4:12:dc:0d:96:5a:36:73:
                    84:93:ec:ae:17:f8:e1:7c:4a:f3:34:8a:67:07:e4:
                    61:ec:ee:03:77:74:f8:d5:e7:4d:6a:08:dc:6b:fc:
                    28:9a:d9:1f:b4:4d:ac:9a:62:55:5b:ec:e6:e1:60:
                    50:50:ad:85:cb:91:82:0e:32:46:53:c6:a2:46:db:
                    14:15:86:a0:e4:ec:6b:8b:3f:5a:83:42:c3:1d:db:
                    93:e8:e7:51:ce:c3:c1:5b:ae:50:84:00:02:00:fc:
                    ab:8d:47:3d:70:47:18:49:c8:15:52:a4:6c:9b:fc:
                    27:db:2d:32:8d:63:32:86:57:fb:7b:2f:20:89:8a:
                    f3:a7:f1:2a:6c:55:b5:8d:ec:e2:92:6b:18:f6:33:
                    a8:32:2f:cc:1a:ae:7a:8b:c5:f1:bd:08:59:10:be:
                    75:5e:91:40:95:46:38:4b:cb:f0:8e:49:01:96:4e:
                    7a:ee:79:f8:76:3d:ff:1c:2a:c0:3c:73:41:e2:2a:
                    63:64:ec:01:f5:aa:99:26:f9:85:66:f8:5c:5e:21:
                    6b:3a:dd:9e:6c:e9:43:51:c6:c1:d0:ef:74:92:51:
                    a0:fa:60:80:57:a9:51:db:e3:e3:4c:b6:22:42:70:
                    e2:4d:b5:5f:fe:e9:e2:a7:bb:98:f5:bb:38:a0:9c:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:31:28:A1:1F:31:76:0E:EE:14:A0:72:B0:C5:72:F6:B8:7C:28:88
            X509v3 Authority Key Identifier:
                keyid:53:B0:E6:84:E1:CD:DB:34:9F:5B:A8:48:2F:99:BE:87:D3:AF:E6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e31372e33322e302f32302d3231203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:3d:fa:9f:0d:76:fb:2e:a3:58:0c:95:2b:23:da:70:a2:ed:
         3b:23:03:5d:4d:8a:12:2c:86:8f:f1:02:4d:19:1f:81:7a:b0:
         a2:71:6e:87:30:3c:4e:e7:5f:24:dc:d6:17:15:ce:45:47:5a:
         79:70:e0:ff:08:fb:c9:c8:16:05:9a:05:39:5f:b0:54:bf:62:
         b8:a9:d3:7f:48:49:2a:2e:d9:56:f2:4a:c7:98:7e:1b:9a:b4:
         f8:10:7f:b1:f2:a8:d7:0e:6b:43:58:2a:62:e5:2d:18:f3:84:
         51:84:2d:04:a1:79:cf:ca:ef:d5:29:b9:21:80:f3:de:f3:88:
         e0:e1:6e:f3:b9:8f:fd:05:f5:38:a5:e3:ff:ee:5c:0c:90:2e:
         c3:ed:05:d6:90:c2:8d:f9:06:e7:dc:0a:de:c8:75:94:51:ff:
         43:ec:ad:8e:2c:81:88:19:33:58:9e:39:1b:c5:fb:61:1d:c6:
         33:15:c1:94:45:37:a2:8d:b4:62:74:d6:64:61:93:9c:11:8d:
         57:16:a6:90:d6:5d:c7:06:9a:57:06:0d:56:e7:0f:b8:77:ed:
         9f:92:38:bb:34:f0:27:10:2e:eb:58:af:2d:81:6c:1d:a8:9f:
         29:d0:f3:3c:38:40:ff:13:ac:62:2c:54:77:4c:58:ee:f4:ae:
         f6:f7:40:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org