Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa
File:                     3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          KPQ2z/FGVR23FHqFMMz8mQio5Z/Q2cWKZ4gyhoGRteo=
Subject key identifier:   DE:B3:07:D4:A1:FA:2B:7E:EB:1C:85:F0:EE:53:8B:69:E7:E1:C9:70
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       6B53833082D238CCEDAA532CA402BB924F8D00EA
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:06:59 +0000
ROA not before:           Mon 08 Apr 2024 20:01:59 +0000
ROA not after:            Mon 07 Apr 2025 20:06:59 +0000
asID:                     28270
IP address blocks:        138.117.124.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:53:83:30:82:d2:38:cc:ed:aa:53:2c:a4:02:bb:92:4f:8d:00:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:59 2024 GMT
            Not After : Apr  7 20:06:59 2025 GMT
        Subject: CN=DEB307D4A1FA2B7EEB1C85F0EE538B69E7E1C970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:80:67:2f:23:4e:3a:ac:00:ef:74:31:ab:05:
                    54:86:e1:55:c3:e8:6b:53:7e:e8:d9:2a:39:07:31:
                    4a:4a:2b:9b:8f:cd:e7:9a:cc:03:40:60:c9:ab:5e:
                    c6:d4:b9:80:b2:82:67:4d:e5:be:10:84:71:f9:eb:
                    64:4d:e9:7a:7e:de:21:51:da:b2:a5:f6:fc:13:28:
                    6c:81:be:18:5d:fa:a0:59:5a:e4:cd:d9:34:59:81:
                    fa:a1:7f:df:be:f0:6a:03:7b:92:db:47:cd:0a:5d:
                    4a:0b:d0:9b:49:58:4f:b7:93:04:7b:3e:45:34:87:
                    1e:31:5c:d3:f4:d6:cc:03:b4:ec:4c:fa:92:17:d1:
                    71:eb:37:c4:c3:bc:f2:7e:7b:49:d3:6a:71:aa:a9:
                    f0:1c:e8:7a:52:b0:d0:7e:95:11:35:c1:2a:15:f1:
                    2e:12:d9:09:d6:ec:ee:f3:fa:86:de:90:26:c5:6a:
                    d4:20:41:49:68:58:52:eb:4e:2e:2d:f2:54:ae:6b:
                    13:b4:2d:30:ae:75:7e:cf:a0:60:c9:52:99:4e:42:
                    1d:7b:e4:fc:bc:69:4d:9e:84:48:9f:91:83:e3:2e:
                    86:b8:37:81:35:2b:20:e9:70:be:64:aa:3a:ac:23:
                    e3:1d:d6:76:3f:0f:e3:bd:2b:89:87:94:61:3f:4a:
                    e9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B3:07:D4:A1:FA:2B:7E:EB:1C:85:F0:EE:53:8B:69:E7:E1:C9:70
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3133382e3131372e3132342e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:a9:33:cb:9f:fa:a5:29:d8:55:35:e2:c3:12:da:a4:c9:cb:
         88:5e:86:7f:9a:1e:ab:7f:4f:72:70:c3:ab:1d:9e:7a:d2:eb:
         c1:21:f9:70:f1:94:ba:c0:94:74:86:0f:c4:a9:c7:d9:ad:a3:
         53:ef:3e:27:4e:7f:16:51:b9:43:e4:9a:e1:46:80:16:65:87:
         f8:f0:ba:1a:7c:38:8e:14:b2:46:0b:ac:46:8b:d5:74:c5:bb:
         19:56:7b:ff:44:3f:d2:4f:c0:c2:f6:db:95:29:5b:a4:0a:48:
         a1:14:94:f7:cf:84:73:87:a8:6c:0d:0a:0d:15:8c:4e:3d:ed:
         91:5e:0e:1a:2b:16:01:97:66:6d:70:32:a0:ba:e4:27:f1:b6:
         98:f7:78:67:88:0e:17:d0:1a:d5:23:cf:96:1c:ec:67:5d:44:
         d7:68:b3:3c:3c:32:0e:de:6d:9d:d7:6a:d4:25:0f:02:96:4b:
         18:74:d8:1d:23:76:08:73:b8:0e:b0:98:0a:60:59:06:b9:61:
         6d:47:73:c8:e3:d6:8e:2f:bd:b1:02:e7:50:bd:d1:8f:e0:73:
         9d:ea:29:28:b5:e4:32:ec:10:ae:0e:b1:14:e5:83:ef:f3:26:
         65:a0:76:46:0d:9b:10:49:d8:4c:0d:c6:8e:bb:df:46:42:a8:
         ac:a7:b6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org