Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3138372e34392e36342e302f32302d3231203d3e20323632373332.roa
File:                     3138372e34392e36342e302f32302d3231203d3e20323632373332.roa (raw, json)
Hash identifier:          Lqy32nr51o/RnlvxGyPlXKsfFEtJUIfWUyns7XD6nlA=
Subject key identifier:   59:C6:26:61:C5:34:95:41:21:BC:CB:79:DF:78:AE:95:0D:FC:E5:90
Certificate issuer:       /CN=17D60A5B46F41C041875CF9901F3C628C731ECF5
Certificate serial:       7BA08F83F0DEF1DAD65E8D3278F2BA319899D521
Authority key identifier: 17:D6:0A:5B:46:F4:1C:04:18:75:CF:99:01:F3:C6:28:C7:31:EC:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3138372e34392e36342e302f32302d3231203d3e20323632373332.roa
Signing time:             Fri 02 Sep 2022 03:14:30 +0000
ROA not before:           Fri 02 Sep 2022 03:09:30 +0000
ROA not after:            Fri 01 Sep 2023 03:14:30 +0000
asID:                     262732
IP address blocks:        187.49.64.0/20 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a0:8f:83:f0:de:f1:da:d6:5e:8d:32:78:f2:ba:31:98:99:d5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D60A5B46F41C041875CF9901F3C628C731ECF5
        Validity
            Not Before: Sep  2 03:09:30 2022 GMT
            Not After : Sep  1 03:14:30 2023 GMT
        Subject: CN=59C62661C534954121BCCB79DF78AE950DFCE590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ec:f3:b8:c7:b2:b9:f3:8e:6f:53:3a:01:90:
                    96:25:60:91:c8:2a:87:de:04:97:34:81:a8:f0:df:
                    3a:fb:4a:a5:54:92:18:ab:d6:5c:84:74:26:a8:86:
                    62:56:69:7a:b0:1f:e4:f3:0c:6f:ad:6b:ec:fe:b3:
                    bd:55:33:fe:18:eb:3c:35:f2:71:fa:e5:a6:ba:61:
                    52:59:7f:73:0b:3b:8e:3e:a0:d2:4f:6f:8b:62:ad:
                    a1:ff:9e:c8:ba:85:db:f8:c1:35:f0:77:a2:fa:c2:
                    b3:d2:b8:c4:40:c8:14:74:5e:57:75:8c:9e:62:b3:
                    be:9b:74:47:6f:26:24:b1:d8:49:ef:71:6c:95:8a:
                    f6:0d:27:6a:b1:8b:39:9d:47:c7:d8:bc:67:c0:98:
                    e8:93:b4:64:c7:65:af:00:8d:0e:89:38:65:11:8b:
                    bb:58:c9:0d:90:38:b2:47:b3:26:40:b5:1d:0b:70:
                    44:7c:96:1a:64:9b:56:18:35:51:77:de:83:9d:3b:
                    fb:ec:cf:2d:65:aa:ac:9f:01:9c:3d:03:c4:ef:43:
                    cd:fc:a0:80:cc:70:3b:d5:e3:8c:83:33:58:da:7e:
                    33:e0:4a:a9:25:66:1e:07:29:dd:32:bc:a1:9c:8a:
                    9d:a4:e3:8c:0d:de:89:af:32:da:10:37:6d:fe:e3:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C6:26:61:C5:34:95:41:21:BC:CB:79:DF:78:AE:95:0D:FC:E5:90
            X509v3 Authority Key Identifier:
                keyid:17:D6:0A:5B:46:F4:1C:04:18:75:CF:99:01:F3:C6:28:C7:31:EC:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3138372e34392e36342e302f32302d3231203d3e20323632373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.49.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:ca:a6:f0:26:40:e8:57:d4:7a:a8:c2:55:03:3f:e0:31:86:
         ff:6d:84:e2:c8:b6:42:bc:89:88:60:7b:b2:e2:9e:ce:9b:87:
         01:07:4c:dd:ee:b7:8d:fa:e8:db:7d:c5:1b:4e:32:70:97:eb:
         51:4c:f7:d2:7d:14:40:92:04:ed:a5:fa:5f:35:a8:78:2e:ad:
         01:37:2f:5c:db:54:f6:9a:ec:f5:3c:90:71:58:4a:a6:69:66:
         11:61:2b:7e:9e:fe:e0:29:08:4e:d3:cf:69:2b:fe:26:44:7f:
         57:a1:be:89:f2:68:98:72:18:a4:48:04:da:f7:dc:17:bd:28:
         38:83:59:51:a3:e7:32:2b:d0:3f:93:53:31:ee:d9:9c:37:27:
         ef:c9:59:4f:d5:a6:bf:ea:34:ee:9b:96:df:c2:ad:1e:84:b6:
         ae:f4:c3:44:de:f4:9f:65:b0:b9:9a:56:c0:2b:9d:23:c1:76:
         06:f8:6a:57:23:df:3c:65:22:e3:d8:f3:16:33:b1:a1:6c:eb:
         96:b2:4e:55:7b:39:cc:70:d8:c6:7f:fe:41:70:8d:86:a1:aa:
         e9:cd:d2:eb:b4:6d:ae:08:8c:0a:3b:40:f5:2f:30:c6:a2:c4:
         08:e7:29:a5:6a:2f:b8:79:3e:63:82:36:a7:95:18:dc:c2:fa:
         16:69:56:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org