Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3133382e3138362e3232342e302f32322d3233203d3e20323632373332.roa
File:                     3133382e3138362e3232342e302f32322d3233203d3e20323632373332.roa (raw, json)
Hash identifier:          SXy+Et3QkadUKyEBL+LcSiSba3GiXYU92z9BjMkjv5Q=
Subject key identifier:   D7:C9:CA:D3:48:3E:FB:EF:60:B4:C3:C2:93:7A:2E:D8:9A:27:1B:72
Certificate issuer:       /CN=17D60A5B46F41C041875CF9901F3C628C731ECF5
Certificate serial:       344B698FF43B8D2CCD91834C5439FF092C54217E
Authority key identifier: 17:D6:0A:5B:46:F4:1C:04:18:75:CF:99:01:F3:C6:28:C7:31:EC:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3133382e3138362e3232342e302f32322d3233203d3e20323632373332.roa
Signing time:             Fri 02 Sep 2022 03:14:31 +0000
ROA not before:           Fri 02 Sep 2022 03:09:31 +0000
ROA not after:            Fri 01 Sep 2023 03:14:31 +0000
asID:                     262732
IP address blocks:        138.186.224.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:4b:69:8f:f4:3b:8d:2c:cd:91:83:4c:54:39:ff:09:2c:54:21:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D60A5B46F41C041875CF9901F3C628C731ECF5
        Validity
            Not Before: Sep  2 03:09:31 2022 GMT
            Not After : Sep  1 03:14:31 2023 GMT
        Subject: CN=D7C9CAD3483EFBEF60B4C3C2937A2ED89A271B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c2:a7:bc:a2:44:8a:3b:24:c7:09:fe:e1:4c:
                    b9:7c:cc:77:3d:29:34:35:e7:d1:61:89:4c:0f:5c:
                    e2:54:aa:a2:d8:96:08:aa:87:dd:a1:a1:ea:78:eb:
                    f4:36:bc:f4:b9:2a:13:35:34:f6:a2:f4:a0:ae:cc:
                    19:4f:50:8c:e6:79:bb:72:a3:91:39:22:46:74:8d:
                    79:b2:07:26:d2:d4:77:c0:5c:a5:b8:16:37:49:c2:
                    0a:7f:17:a6:34:cd:50:3c:b0:76:a3:80:84:05:6a:
                    64:d5:31:dc:c5:83:21:7e:cc:2d:2e:de:ce:f1:9b:
                    3a:41:2b:9d:e7:cc:42:d7:a1:12:4b:03:62:44:f5:
                    54:d9:19:47:89:67:67:d0:16:9f:3d:bf:d9:55:30:
                    8f:3c:02:f5:17:6f:44:41:2a:4e:c9:dc:94:67:41:
                    f9:e6:70:ad:87:78:b1:74:78:34:82:ee:db:e9:f3:
                    82:17:59:5e:22:b0:46:89:59:22:ea:78:69:4e:48:
                    b6:52:98:d9:2a:08:2f:f7:35:99:8a:38:38:21:87:
                    6f:96:15:83:30:b3:1a:a4:c4:2a:5c:e6:52:39:aa:
                    9a:6f:11:17:56:36:63:5c:b1:6c:88:0d:2c:a4:5e:
                    fa:b4:97:db:ef:65:bb:1e:77:c1:8a:79:ef:6e:21:
                    fa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C9:CA:D3:48:3E:FB:EF:60:B4:C3:C2:93:7A:2E:D8:9A:27:1B:72
            X509v3 Authority Key Identifier:
                keyid:17:D6:0A:5B:46:F4:1C:04:18:75:CF:99:01:F3:C6:28:C7:31:EC:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3133382e3138362e3232342e302f32322d3233203d3e20323632373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e1:c9:75:d7:cd:5f:4d:36:fb:29:42:f3:48:a6:ae:ee:5e:e1:
         01:b7:58:2e:4f:2d:4e:4f:37:94:8f:f0:9b:f3:2a:71:8e:f7:
         7c:08:36:ef:e0:a4:b1:f0:c3:0d:8e:32:24:24:66:41:c0:ae:
         27:b8:67:58:ef:60:0e:fc:f0:58:d5:30:8d:a7:e2:a9:2a:8a:
         64:02:6f:43:57:6e:1b:b1:8a:8b:98:00:cc:21:07:08:41:a1:
         da:11:20:31:85:0e:a2:f4:5f:c6:7b:15:ad:24:a2:c7:c3:67:
         01:64:47:2e:79:ec:39:18:ca:26:e5:4e:8b:46:3e:f4:0f:b2:
         7b:54:b9:10:ac:42:47:9f:21:6b:8d:d6:52:32:99:ca:a3:e5:
         b3:5b:5c:08:c7:7d:f1:ec:e3:61:ab:ea:80:65:5d:a8:d2:29:
         83:24:4f:2f:48:e7:ee:8a:4c:d7:a5:ee:92:bc:29:25:3b:a0:
         aa:2a:56:88:8f:89:05:74:4f:1b:f7:81:cb:07:82:5b:f0:bc:
         0e:e2:98:9d:e7:ee:2e:0d:86:f6:ce:fe:b9:1c:eb:f0:58:dd:
         c9:af:c2:06:6b:97:da:b0:6a:4b:77:4b:2f:aa:54:e5:25:49:
         05:bc:eb:d0:47:41:14:f4:17:e7:30:fb:11:47:c2:b0:07:ac:
         c6:65:49:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org