Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3139362e37362e302f32332d3233203d3e203238323730.roa
File:                     3133312e3139362e37362e302f32332d3233203d3e203238323730.roa (raw, json)
Hash identifier:          aTROn4LtTLZVpQd6gsbE7mwd57MK8u9vN0SimiNB3Yw=
Subject key identifier:   DC:21:E3:A6:32:7E:F0:38:56:75:F1:1D:12:F8:C7:49:3D:A7:90:DE
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       558432C819559E87A2A40729D6000026F8C57F41
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3139362e37362e302f32332d3233203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:06:52 +0000
ROA not before:           Mon 08 Apr 2024 20:01:52 +0000
ROA not after:            Mon 07 Apr 2025 20:06:52 +0000
asID:                     28270
IP address blocks:        131.196.76.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:84:32:c8:19:55:9e:87:a2:a4:07:29:d6:00:00:26:f8:c5:7f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:52 2024 GMT
            Not After : Apr  7 20:06:52 2025 GMT
        Subject: CN=DC21E3A6327EF0385675F11D12F8C7493DA790DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ad:b4:0f:a4:43:50:6e:ec:88:44:2b:0d:68:
                    b3:98:fb:83:76:e0:ce:64:e3:cc:33:06:16:f3:95:
                    81:70:75:f7:c2:13:5a:e2:13:a7:ff:8f:a4:fb:9d:
                    4f:37:e9:8a:b7:9a:55:65:b3:01:ec:33:8c:43:a3:
                    f4:24:2d:67:8a:bf:00:2f:3c:df:40:26:6a:96:1b:
                    48:26:af:f6:88:d1:31:d6:24:7e:14:83:d1:d3:cf:
                    a3:f9:35:f0:46:73:0e:c9:bb:95:76:4c:f8:5a:a5:
                    4b:31:8d:92:6b:5a:64:2b:98:fd:f9:08:a9:c2:5c:
                    c7:37:4a:1d:99:4d:19:17:87:05:47:c1:6e:79:04:
                    7b:6a:0e:91:e0:6e:18:90:8b:5e:a6:67:1a:35:8d:
                    a4:3e:4a:15:81:93:1b:4d:ff:c7:b5:06:9e:15:81:
                    3d:f2:7c:48:95:1e:91:b6:f0:f1:ca:af:17:e5:f1:
                    e2:1b:a6:ef:f1:8a:bd:32:6d:f7:78:e1:58:39:2f:
                    25:30:56:a5:fd:0a:94:e6:12:9b:bb:f6:52:e9:7c:
                    b3:17:29:61:ec:4f:68:70:33:d4:b6:fb:9c:a2:6b:
                    1f:3e:64:8e:9a:ae:02:e2:2c:05:fc:8c:fa:3a:da:
                    07:22:af:2f:e0:fc:71:0d:a5:e0:7f:db:b2:80:5b:
                    f9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:21:E3:A6:32:7E:F0:38:56:75:F1:1D:12:F8:C7:49:3D:A7:90:DE
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133312e3139362e37362e302f32332d3233203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:3b:f5:c7:c6:63:c6:b2:8c:49:78:e8:3d:a2:cf:ea:19:6f:
         61:d7:d6:72:d6:64:04:dd:0f:d4:9a:a2:81:ff:59:f1:93:fc:
         ff:58:c0:76:0f:02:b0:cc:ad:38:6d:9e:ab:6f:9c:1b:9c:12:
         d9:24:54:14:60:88:b1:22:8e:ac:86:9b:12:bf:3f:93:49:1f:
         2a:bd:4d:5b:42:3c:3c:a4:1b:5e:6b:43:05:49:38:3f:a6:9a:
         77:cb:b8:cb:74:2d:64:e0:a7:55:36:6f:d2:cd:62:23:00:44:
         ca:0c:95:f7:e0:cd:9a:0a:72:7f:e2:da:7c:3f:d3:bd:87:03:
         5d:58:26:08:83:7b:ae:2e:4d:0b:e4:5a:9f:c1:10:a5:e3:9f:
         60:85:52:24:03:fe:25:3c:59:91:61:aa:bf:1a:4a:46:8f:cb:
         e2:10:06:33:38:de:b3:5a:31:3a:f5:1d:aa:48:3b:a2:07:64:
         b8:d0:28:90:c3:bc:b4:64:d5:d5:f0:90:9f:ea:03:72:21:90:
         73:c2:09:e3:09:54:b8:a6:8c:38:b0:22:80:45:b4:7e:9a:3c:
         9e:42:09:72:3f:d3:e1:f7:1f:db:4f:17:6b:bb:68:cd:d5:03:
         03:c1:62:52:47:34:ca:80:76:cb:61:f9:ef:91:4b:cf:84:6c:
         d7:26:fa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org