Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3139362e37362e302f32322d3232203d3e203238323730.roa
File:                     3133312e3139362e37362e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          xoyn33Hzd25Y6lVdA+t1kWVD8zci3DXVXR2oXJSB1vc=
Subject key identifier:   E0:90:20:92:D8:28:23:6E:55:AB:39:2D:0B:3A:3B:37:8A:3F:8D:5C
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       6EFD2FD6F6587167D8F587AA2BA17E54A77E984C
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3139362e37362e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:07:00 +0000
ROA not before:           Mon 08 Apr 2024 20:02:00 +0000
ROA not after:            Mon 07 Apr 2025 20:07:00 +0000
asID:                     28270
IP address blocks:        131.196.76.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fd:2f:d6:f6:58:71:67:d8:f5:87:aa:2b:a1:7e:54:a7:7e:98:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:00 2024 GMT
            Not After : Apr  7 20:07:00 2025 GMT
        Subject: CN=E0902092D828236E55AB392D0B3A3B378A3F8D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9b:4e:d3:79:60:96:bb:65:c4:76:53:3c:39:
                    bc:12:16:81:e3:5a:a7:6a:83:5a:ee:42:ca:4e:e1:
                    5e:3e:d3:63:73:27:ad:2f:d7:26:ef:24:37:0e:64:
                    82:4b:41:dd:ca:74:0c:aa:03:b8:49:d7:36:98:58:
                    22:a7:9e:5e:12:bf:99:06:ee:aa:47:33:cc:fc:cb:
                    45:f8:82:e9:97:d3:5e:d8:fd:45:ea:6f:55:36:5a:
                    12:8b:d9:29:4e:88:68:7e:78:4e:24:68:c0:bc:e1:
                    94:1e:e1:98:d9:1c:84:c7:90:5a:c5:2b:31:d4:5e:
                    28:45:76:91:49:54:2a:1e:7f:ba:7b:07:b9:63:c4:
                    b2:09:e0:69:93:b1:d0:03:fd:60:62:a1:1d:de:5e:
                    3d:0f:59:f8:37:fc:8c:a7:71:f0:d3:98:75:4c:a9:
                    0d:24:e8:ca:03:a2:94:8e:00:dd:99:0b:f1:2a:03:
                    3c:64:89:f6:b0:29:7c:18:13:f4:17:12:7b:5c:83:
                    3f:65:fa:4b:cc:3b:e0:b7:9f:aa:43:d7:09:d7:ea:
                    cd:f7:17:ba:ba:00:82:4b:58:ac:2c:ba:04:9d:48:
                    1f:9c:74:d4:67:f2:91:ab:de:84:58:f9:7a:7a:76:
                    de:42:91:60:33:c3:9b:fc:35:fa:c1:01:3c:7f:c4:
                    85:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:90:20:92:D8:28:23:6E:55:AB:39:2D:0B:3A:3B:37:8A:3F:8D:5C
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3139362e37362e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:58:06:db:db:e8:21:08:d3:aa:06:60:b9:10:0d:e7:3f:b1:
         b9:48:17:02:77:b7:85:47:3b:4d:2e:6d:eb:b1:e1:e2:e1:63:
         ce:cd:ed:53:eb:b8:da:7e:2b:38:c7:9c:e8:bd:e1:62:2c:83:
         71:2c:a4:27:78:ec:1f:b8:d4:55:75:a6:bd:fe:17:bf:bd:28:
         01:26:72:65:f3:f0:08:b2:90:c3:7c:91:ca:89:c9:63:11:6e:
         8a:32:45:ff:72:bb:e3:6c:a4:c1:1e:e5:b9:19:0b:81:a7:69:
         ca:48:12:97:46:82:ed:29:2b:09:03:c9:0a:d5:5a:59:25:7e:
         fe:e5:51:eb:b3:c7:6e:4c:f9:23:ff:fd:4f:8d:50:e6:b7:d9:
         9b:7a:59:40:dd:d8:74:e8:98:04:2e:f3:ae:e0:94:e0:a3:5a:
         c8:4b:85:d9:73:6d:d2:46:25:9e:48:72:70:c4:40:81:7e:90:
         71:82:c0:29:a6:c0:bb:d4:b5:29:ec:74:9d:f0:52:b8:fd:93:
         5c:ae:51:08:64:23:50:e8:c1:ca:50:40:64:cf:db:21:24:e1:
         f8:d1:bb:b0:b9:11:0b:ef:03:3a:5b:37:20:ad:d7:dd:55:63:
         60:49:52:27:b1:4b:fe:0d:ae:cf:e6:b9:46:77:cf:4b:aa:39:
         94:87:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org