Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa
File:                     3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa (raw, json)
Hash identifier:          64lelqTWZ0PwYpIHfRt9UYItFxjOv6i7K89LoS9UB8k=
Subject key identifier:   A6:1F:FC:AB:59:F7:2A:31:40:0D:16:A8:8D:2D:96:AE:12:CD:2B:78
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       5BB17969999F17ECF69F95A1B470C80795B76419
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa
Signing time:             Mon 08 Apr 2024 20:06:49 +0000
ROA not before:           Mon 08 Apr 2024 20:01:49 +0000
ROA not after:            Mon 07 Apr 2025 20:06:49 +0000
asID:                     262992
IP address blocks:        168.227.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b1:79:69:99:9f:17:ec:f6:9f:95:a1:b4:70:c8:07:95:b7:64:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:49 2024 GMT
            Not After : Apr  7 20:06:49 2025 GMT
        Subject: CN=A61FFCAB59F72A31400D16A88D2D96AE12CD2B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:69:07:32:13:8c:be:91:76:21:14:e8:5f:
                    a0:00:c3:04:5f:7a:ef:48:8b:f4:ca:98:52:b3:22:
                    a9:4c:21:c7:7e:05:f8:87:a6:b4:19:ac:cf:bb:5d:
                    ec:38:0d:d3:16:94:38:78:3a:7d:b9:d3:54:a5:1e:
                    c2:c3:91:55:0b:bf:3b:87:9b:7b:1b:d5:d4:c7:fe:
                    99:5d:ad:d7:06:13:4c:af:e6:53:ce:db:e3:5c:43:
                    1f:6d:4e:9b:b9:ff:77:c4:75:da:5d:81:77:ed:30:
                    82:9c:e2:e7:16:e9:f1:60:5d:3a:b6:25:40:36:a0:
                    15:c0:86:6c:21:33:87:a2:40:bd:31:8b:83:65:a3:
                    8c:f8:ec:7f:bd:f7:11:db:bb:51:af:e3:34:2c:dd:
                    fd:d1:2b:74:a8:8e:c5:d3:3e:b6:4d:8a:8c:ca:89:
                    ab:7e:82:3f:9e:66:15:6f:ac:b1:45:0b:51:79:1c:
                    62:93:cc:c7:e5:2a:9c:92:11:ae:81:51:9e:8d:9e:
                    5a:00:60:5b:ca:ec:17:36:55:94:05:03:c4:9f:c4:
                    54:9b:cf:54:9a:b1:0a:55:2f:58:63:bb:46:68:bd:
                    e2:f6:8e:11:b0:3b:bb:c3:81:b7:10:be:f0:f5:3f:
                    fa:b1:36:7f:2c:87:39:f8:51:a7:b3:67:4d:43:21:
                    4d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1F:FC:AB:59:F7:2A:31:40:0D:16:A8:8D:2D:96:AE:12:CD:2B:78
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232372e34342e302f32322d3232203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:15:75:29:75:7e:6f:54:7c:14:0d:44:7f:04:6c:12:a2:8e:
         19:eb:d4:5a:fa:96:9a:d1:74:ad:35:5f:0c:46:b1:b8:c5:41:
         24:43:ef:cc:28:52:f1:04:bd:05:c1:97:84:d6:c1:c0:da:b7:
         6d:05:7d:bd:99:78:71:22:bc:35:c0:7e:86:03:d2:e2:5a:cc:
         6d:d4:1c:12:0c:0b:11:05:00:e6:1a:2d:82:48:7f:37:3d:a3:
         84:39:6f:5a:36:14:de:cb:08:d5:6f:71:56:e2:c3:43:fd:39:
         ad:32:fc:73:01:4e:d5:4e:95:c2:0c:2f:b1:f5:c8:6d:be:cb:
         b6:3c:e2:de:b0:89:79:2b:d8:18:93:69:3a:d9:ac:53:66:76:
         35:88:a4:36:96:7d:e1:93:62:cb:73:f6:ba:80:da:89:31:e5:
         a0:00:9f:f0:db:f5:00:6d:66:36:c5:51:42:ec:ef:4d:2b:ce:
         b8:6d:c5:f5:68:48:97:53:95:04:1c:b1:2f:13:95:0c:6c:f8:
         bc:de:1f:0b:86:2e:7f:69:b4:a9:64:1b:aa:79:a5:e5:ea:ee:
         c5:3e:e3:27:19:7d:9f:72:54:3d:ff:d2:41:ad:17:95:81:49:
         21:22:4b:ba:59:ba:66:94:89:5a:3f:e9:7a:46:d7:29:e6:01:
         82:34:0a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org