Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232372e34342e302f32322d3232203d3e203238323730.roa
File:                     3136382e3232372e34342e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          sejPVJ1E7Xd2+DpBssNKOm4GQh5bLvi5lmEOCc6YKA8=
Subject key identifier:   E4:7B:25:0A:55:54:09:2E:F5:7D:EA:2A:10:87:8B:7A:CB:A3:52:AB
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       713108B0F26CF6158185BD0E76E8317590BE9ABB
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232372e34342e302f32322d3232203d3e203238323730.roa
Signing time:             Wed 10 Apr 2024 02:07:26 +0000
ROA not before:           Wed 10 Apr 2024 02:02:26 +0000
ROA not after:            Wed 09 Apr 2025 02:07:26 +0000
asID:                     28270
IP address blocks:        168.227.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:31:08:b0:f2:6c:f6:15:81:85:bd:0e:76:e8:31:75:90:be:9a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr 10 02:02:26 2024 GMT
            Not After : Apr  9 02:07:26 2025 GMT
        Subject: CN=E47B250A5554092EF57DEA2A10878B7ACBA352AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:fb:47:9c:a3:0c:1b:f9:4d:cd:23:ad:2e:
                    0d:fe:5c:1f:e4:ee:69:77:62:2c:ab:f7:b7:01:9c:
                    65:27:5d:e5:be:61:55:d5:2f:c6:57:aa:a5:d6:61:
                    c6:26:e1:fa:e9:87:44:55:c2:a6:ae:6a:85:41:90:
                    38:a8:00:14:10:38:1b:4a:f4:51:7d:73:24:82:bc:
                    03:da:f4:66:71:ab:ca:24:36:fb:ec:53:b8:64:7b:
                    68:c9:d8:2c:12:4d:48:60:67:72:16:88:74:ab:cc:
                    ff:60:0a:f5:6a:e8:ca:ff:01:9a:84:80:15:bc:6b:
                    ef:8c:aa:73:19:dc:32:82:6a:11:68:c7:86:94:bc:
                    61:ad:0d:eb:47:c3:45:15:fc:cf:cb:04:d0:df:0d:
                    27:11:51:5d:a1:a3:b8:3d:4a:09:fc:dc:b8:48:fc:
                    d2:02:4a:44:91:d3:c4:3b:c7:3b:6d:27:78:50:ff:
                    e9:08:cc:a4:6f:20:e4:9e:08:47:40:1c:90:1e:9f:
                    e7:ed:7b:66:66:c0:b7:2a:56:ba:17:90:84:d0:fb:
                    19:b4:2a:76:79:1e:d1:90:fc:94:d6:9e:3a:be:4e:
                    8c:85:c8:10:04:be:82:a4:e0:4d:e2:65:5a:51:b7:
                    26:45:0c:11:45:da:b3:35:6a:6a:6b:87:87:4d:11:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:7B:25:0A:55:54:09:2E:F5:7D:EA:2A:10:87:8B:7A:CB:A3:52:AB
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3232372e34342e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:ce:29:b0:9b:8e:43:18:f7:e6:5e:5f:3e:e7:87:c8:c1:58:
         09:08:41:c9:00:8e:1e:c8:56:bd:0e:bf:59:86:ae:34:99:d4:
         b8:44:c1:1f:dc:36:cd:3f:96:4f:12:0e:f7:9c:c6:54:a0:1f:
         c8:95:ac:f2:72:e5:99:8f:af:bd:25:8f:95:aa:02:43:7c:1a:
         ea:e4:fb:85:38:a3:46:8d:91:e4:38:08:9a:f5:e2:9d:38:ca:
         0b:7a:73:43:76:70:f5:f7:8c:a1:bc:44:90:7e:e1:52:c8:31:
         4b:0d:42:17:7f:ce:79:2d:60:1f:8b:a8:1f:09:6c:54:37:a5:
         e7:8a:13:72:1e:f3:1a:09:57:fd:63:58:d2:3e:72:e0:7c:a7:
         0f:ad:cb:a7:2a:04:39:41:1a:74:3c:c2:9a:c3:98:4f:e0:dc:
         97:b3:73:f1:11:4f:40:1d:ee:f9:da:15:69:b1:0a:36:3f:7d:
         b3:71:7f:c8:d6:b4:0b:4c:82:19:80:13:b2:6a:e9:ba:ae:67:
         d9:cb:6d:a4:dc:27:0f:08:78:01:f3:50:9e:3a:cf:ef:9b:41:
         ed:80:63:99:cb:4e:16:08:a5:b2:5a:d1:78:49:8a:a4:a6:61:
         4c:1e:3a:00:b9:9f:40:2f:7b:d7:dc:5e:a6:9f:36:c8:41:fa:
         d6:a5:66:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org