Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa
File:                     3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          ivW2RBUq9ZKetXs2VHK3r5o+dHtZoGoMVS4Fl3omMzE=
Subject key identifier:   32:CB:D0:29:0B:49:34:1A:6F:59:48:B2:F2:49:28:5E:C5:84:CD:96
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       74A5E3722D0D94801833136A75E1BB98F7D368F3
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:06:54 +0000
ROA not before:           Mon 08 Apr 2024 20:01:54 +0000
ROA not after:            Mon 07 Apr 2025 20:06:54 +0000
asID:                     28270
IP address blocks:        168.232.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:a5:e3:72:2d:0d:94:80:18:33:13:6a:75:e1:bb:98:f7:d3:68:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:54 2024 GMT
            Not After : Apr  7 20:06:54 2025 GMT
        Subject: CN=32CBD0290B49341A6F5948B2F249285EC584CD96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0e:68:93:48:e6:10:b6:34:d7:4a:49:23:a0:
                    5b:28:7b:6a:19:35:b0:9a:b1:cf:2b:83:cf:d4:64:
                    b7:1e:82:b1:4f:a7:9a:e8:45:7c:ba:dc:bc:fc:fa:
                    7f:e5:1d:11:01:dc:2b:8a:4e:2c:4d:0c:98:ea:3c:
                    1c:ce:ac:df:12:a1:e0:68:e6:ed:c2:6b:a2:b6:5b:
                    ca:d2:48:4d:cb:e2:ea:65:b4:ab:c3:eb:8b:74:5a:
                    f0:94:85:3a:0c:02:39:ac:4a:31:c7:80:ac:93:88:
                    4b:dd:8f:f8:36:88:9f:e2:51:6e:5e:39:9e:66:eb:
                    9d:ea:30:5e:a4:87:ed:dc:dd:64:97:33:4b:84:7d:
                    45:80:15:fb:0b:18:a6:44:b1:24:3d:91:ea:28:e9:
                    3e:ac:97:3b:e2:36:64:6e:7e:98:33:09:0d:b3:7c:
                    d1:26:13:ca:82:a8:d3:78:df:d6:05:8f:94:45:8d:
                    a9:e0:78:56:07:dd:d5:32:8a:80:27:b1:e0:0a:2c:
                    3d:a0:ea:40:dc:54:f2:7b:7a:a4:da:bb:0c:21:19:
                    ff:b0:70:fe:2d:36:a3:63:93:a3:6e:20:4e:ef:84:
                    4c:ac:06:25:90:a8:39:d2:a5:00:ca:80:c7:60:20:
                    3a:d0:d8:02:dc:2a:4e:7d:0c:7a:bb:48:67:0a:ff:
                    43:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CB:D0:29:0B:49:34:1A:6F:59:48:B2:F2:49:28:5E:C5:84:CD:96
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3136382e3233322e3131362e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:8e:84:f1:31:9b:67:6c:ed:c4:99:a8:2f:b7:1a:e2:4c:d8:
         b6:42:13:2a:11:57:68:61:d0:6d:a6:ee:a9:72:91:59:49:a7:
         26:b7:90:2f:a8:26:d1:b5:f6:77:64:74:0e:70:83:ba:cf:83:
         69:4b:69:08:95:f6:29:45:9c:80:24:bb:94:a9:a6:01:ce:5f:
         83:21:fe:05:b9:fe:9e:02:3d:cb:d7:2a:33:b5:53:b8:f2:f4:
         c1:31:50:7e:77:e9:a5:e9:92:41:fb:40:34:6a:cf:8a:1f:bf:
         8c:47:50:08:4b:53:4d:c4:2c:9b:ff:9b:3c:b3:ff:81:d6:1a:
         27:30:42:39:e2:0c:ce:21:0d:fc:26:24:fb:76:31:05:b2:be:
         fa:df:e3:79:8e:a6:45:3b:5b:af:82:2a:49:c3:c0:97:bb:ca:
         5c:a3:e1:77:e7:fa:2f:9a:1c:45:24:79:fd:c8:f2:d9:4c:c0:
         fd:08:6a:aa:d8:cd:7d:79:a4:ba:02:b1:3e:f1:ff:08:10:52:
         d2:05:d5:d8:ff:35:ac:ab:3d:22:37:16:78:29:33:9d:69:0a:
         9b:44:43:88:30:d3:21:93:0b:9e:49:48:c6:1f:92:7e:a0:39:
         95:80:bc:c8:97:34:ed:b0:79:24:c2:fe:7b:d3:5b:e8:14:30:
         b8:30:04:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org