Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3138362e3233332e3137322e302f32322d3234203d3e20323632393532.roa
File:                     3138362e3233332e3137322e302f32322d3234203d3e20323632393532.roa (raw, json)
Hash identifier:          Qnuh+0yZJd3Wqilz6eIEm8uJ20smFxVlCfTCnJC3UVA=
Subject key identifier:   9B:F9:A0:BA:7C:B6:BC:BA:E5:68:2C:4D:72:E0:3F:61:B1:C6:FC:E4
Certificate issuer:       /CN=0159B28D943E30339BE3C46CC53E6B1C8FAE24DB
Certificate serial:       0DB17D6544EC0F767ADF462D5160EC154EA5D951
Authority key identifier: 01:59:B2:8D:94:3E:30:33:9B:E3:C4:6C:C5:3E:6B:1C:8F:AE:24:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3138362e3233332e3137322e302f32322d3234203d3e20323632393532.roa
Signing time:             Tue 31 Oct 2023 21:00:00 +0000
ROA not before:           Tue 31 Oct 2023 20:55:00 +0000
ROA not after:            Tue 29 Oct 2024 21:00:00 +0000
asID:                     262952
IP address blocks:        186.233.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b1:7d:65:44:ec:0f:76:7a:df:46:2d:51:60:ec:15:4e:a5:d9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0159B28D943E30339BE3C46CC53E6B1C8FAE24DB
        Validity
            Not Before: Oct 31 20:55:00 2023 GMT
            Not After : Oct 29 21:00:00 2024 GMT
        Subject: CN=9BF9A0BA7CB6BCBAE5682C4D72E03F61B1C6FCE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:35:ff:77:cd:92:e3:7a:02:ce:4a:08:d8:
                    57:84:ab:70:91:58:26:06:04:a6:70:fa:cc:77:f6:
                    cf:2b:9e:1f:7b:2d:2c:e2:b7:86:c4:f1:88:4a:e3:
                    11:a7:4e:66:ea:8f:29:e8:fc:07:55:51:70:ee:25:
                    86:d3:fb:6c:bb:07:b6:c5:00:d4:99:f4:25:ac:a1:
                    21:f0:41:ae:0c:37:96:8d:14:dc:ca:14:06:f4:e9:
                    e7:b1:7a:a8:f1:48:59:c2:f3:62:67:f7:39:f4:c0:
                    c4:ac:9d:29:eb:b4:74:b6:6e:40:92:1a:f0:a5:c7:
                    18:5f:5d:2a:5f:2b:a4:8b:7e:2d:f2:a1:b9:b1:88:
                    bb:74:27:b5:66:4f:ce:7b:56:49:f1:09:9c:29:03:
                    8b:9b:87:77:54:f8:81:7d:ed:1e:17:ea:7e:d0:18:
                    94:c1:dd:b6:02:44:84:fa:d7:ff:51:8c:77:2b:0f:
                    01:d9:1f:6f:e1:62:67:dc:d0:e1:1c:3a:df:6b:1a:
                    c2:d6:d1:85:ed:63:c0:9e:aa:6d:ab:71:2e:ab:bd:
                    cf:0b:31:4b:c2:85:bd:a9:23:ef:5f:28:63:77:55:
                    69:30:12:9f:4c:0d:4e:9d:5d:e1:bd:63:dc:19:bd:
                    99:4b:5c:a8:72:14:50:05:da:ef:a0:2e:94:89:f4:
                    5b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F9:A0:BA:7C:B6:BC:BA:E5:68:2C:4D:72:E0:3F:61:B1:C6:FC:E4
            X509v3 Authority Key Identifier:
                keyid:01:59:B2:8D:94:3E:30:33:9B:E3:C4:6C:C5:3E:6B:1C:8F:AE:24:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0159B28D943E30339BE3C46CC53E6B1C8FAE24DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DwRtngZLC8Hn9r4SJK7t4BcLj4VaRpdEHRdJxQ2J4PvM/0/3138362e3233332e3137322e302f32322d3234203d3e20323632393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:6d:5f:c5:1d:97:0a:c6:ae:e8:b2:57:71:7e:2a:e8:3d:86:
         48:11:30:64:99:da:aa:7b:4c:65:58:a6:37:db:43:52:90:4d:
         50:9d:81:2a:85:89:de:c1:fb:84:70:0a:8e:aa:de:2d:bf:76:
         1c:34:66:5e:0c:cc:ba:5f:06:8e:db:0b:03:7e:6e:3b:c7:83:
         fe:af:aa:40:b3:be:72:04:68:0a:58:7c:81:45:34:b1:8d:8f:
         bd:68:27:cb:29:47:46:8f:71:5f:1f:36:f4:e9:bf:8f:80:a6:
         b0:a0:4d:3b:26:1c:ed:cb:e9:13:3f:14:bb:a9:33:f0:46:e9:
         59:5a:0b:84:f8:e4:12:b9:58:54:e6:6a:5f:89:c8:6e:b3:7e:
         99:d1:51:62:0b:95:d1:34:c0:80:13:d2:57:4d:cf:16:1f:36:
         b9:b0:2d:24:ce:f7:93:5f:68:06:ec:d0:9b:13:e4:e5:bf:da:
         5d:84:54:f0:83:54:b9:41:13:0e:26:0f:4d:ad:7d:31:77:88:
         5c:cb:f9:66:b0:98:30:60:b6:76:15:1d:17:2b:4f:80:c6:e6:
         83:36:8a:8b:81:04:0b:c9:b3:c6:09:5a:1b:54:64:e3:f5:df:
         97:ea:c5:0b:5b:4e:d6:1d:f8:58:7e:d9:d0:5a:15:41:8c:c1:
         7d:cf:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:35 2024 by rpki-client on console-fra.rpki-client.org