Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3138372e38352e39362e302f32302d3231203d3e20323632373332.roa
File:                     3138372e38352e39362e302f32302d3231203d3e20323632373332.roa (raw, json)
Hash identifier:          N8P2j1ge7xAOxeoqBWrIGJqn8IfGwgY/0R0HV3Z3QTM=
Subject key identifier:   10:B9:7C:84:17:82:24:9F:7E:A7:1B:D9:6A:0F:9A:4F:1D:D7:03:C5
Certificate issuer:       /CN=17D60A5B46F41C041875CF9901F3C628C731ECF5
Certificate serial:       51ACB5D187E4B1A6AC2EBE1ECE25A52752D75F5F
Authority key identifier: 17:D6:0A:5B:46:F4:1C:04:18:75:CF:99:01:F3:C6:28:C7:31:EC:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3138372e38352e39362e302f32302d3231203d3e20323632373332.roa
Signing time:             Fri 02 Sep 2022 03:14:32 +0000
ROA not before:           Fri 02 Sep 2022 03:09:32 +0000
ROA not after:            Fri 01 Sep 2023 03:14:32 +0000
asID:                     262732
IP address blocks:        187.85.96.0/20 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:ac:b5:d1:87:e4:b1:a6:ac:2e:be:1e:ce:25:a5:27:52:d7:5f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17D60A5B46F41C041875CF9901F3C628C731ECF5
        Validity
            Not Before: Sep  2 03:09:32 2022 GMT
            Not After : Sep  1 03:14:32 2023 GMT
        Subject: CN=10B97C841782249F7EA71BD96A0F9A4F1DD703C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:a0:4c:51:06:f8:91:ec:55:86:5b:81:f4:
                    b7:c3:d1:c4:9d:22:80:4f:24:b8:46:25:b4:13:9d:
                    48:ef:f5:5f:90:b1:33:ea:f0:b8:f5:49:98:e3:73:
                    b9:22:fd:dc:89:54:ee:13:82:71:78:e8:b7:c7:c5:
                    b8:9a:bb:49:02:b8:03:05:72:fc:63:e5:98:e8:b1:
                    1d:a4:16:a0:13:68:77:73:65:24:d6:8f:cf:00:a7:
                    f6:4e:71:44:be:29:e5:e9:50:ec:b9:f2:9f:8c:c5:
                    7c:f0:c0:b3:48:fb:66:05:c2:95:83:fc:8b:99:f0:
                    69:9e:43:f4:45:3e:a8:ad:0f:8a:c9:ea:16:71:35:
                    6e:46:9c:72:69:e1:11:60:eb:2b:83:a9:18:2f:7a:
                    38:ab:5d:78:b9:47:63:f4:f2:fd:69:b3:e5:01:d6:
                    9f:78:06:1b:d4:62:b8:83:9d:70:5d:fe:cb:67:c3:
                    7f:ef:da:f6:0a:be:75:0d:f5:ad:6d:5d:45:99:bc:
                    dd:42:cd:59:91:46:fd:ac:fa:23:67:2f:37:d6:c1:
                    5f:d6:ad:19:41:64:a1:d5:49:e0:41:8b:43:ce:b0:
                    37:79:3f:73:3f:e1:72:81:d6:1f:63:68:71:9c:14:
                    e1:7b:73:b9:04:19:b1:62:11:f0:a5:42:34:44:89:
                    d5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B9:7C:84:17:82:24:9F:7E:A7:1B:D9:6A:0F:9A:4F:1D:D7:03:C5
            X509v3 Authority Key Identifier:
                keyid:17:D6:0A:5B:46:F4:1C:04:18:75:CF:99:01:F3:C6:28:C7:31:EC:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17D60A5B46F41C041875CF9901F3C628C731ECF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqKcEpPxceNhPryoGqrX2JJbeTy6sDVS7mbV5SwmC5zk/0/3138372e38352e39362e302f32302d3231203d3e20323632373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:7b:23:04:6d:96:95:71:94:66:b9:83:0e:44:e1:f3:0e:
         2f:d4:fd:b3:1c:95:8c:33:31:61:14:d2:4b:ae:e2:ac:3f:d4:
         9d:10:4b:e8:9f:80:67:60:25:bb:4a:d8:5c:3f:a5:e0:fa:37:
         14:91:48:b7:4c:06:c8:8f:ae:a1:e4:88:98:bf:05:d1:73:a2:
         28:73:5a:96:f5:22:b6:7d:8c:11:0c:d1:e7:74:78:36:4b:e0:
         72:0d:7d:b1:e3:b8:0b:a8:02:77:67:f0:31:ff:61:3b:c9:d6:
         c0:59:5c:76:49:30:60:fb:74:a7:08:6f:17:2f:fb:94:3a:76:
         17:da:4d:9c:3a:9a:59:e7:d1:3f:1b:ce:8c:9e:98:25:e2:97:
         27:dd:a5:62:7d:77:1e:91:81:d0:2b:14:5b:1e:18:dd:32:6c:
         a5:fe:79:f2:bb:ab:f0:63:06:87:64:58:10:09:bf:f8:0d:35:
         5b:47:a5:18:43:93:32:29:6e:5b:6f:fb:b8:b1:be:29:15:0b:
         88:66:3c:f6:bd:c5:66:41:db:6d:c1:77:b6:be:54:43:a5:03:
         96:7c:c4:ce:62:8d:80:22:92:06:57:d8:fb:ba:d2:fe:78:f0:
         03:f8:55:5c:30:25:d2:5c:c6:2e:f8:76:ad:40:ec:14:df:77:
         b9:b3:ec:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org