Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa
File:                     3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          kecG9Sq9qTwMVb2l/FZl3Ng0kw9s+5BpTStWblHNnzk=
Subject key identifier:   16:8D:11:19:1D:2C:A0:95:15:6E:8B:A2:C8:C8:27:35:9B:EF:16:32
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       0104435C093DDDE51E2B6ADFB5FF59E0887EC946
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa
Signing time:             Mon 08 Apr 2024 20:06:54 +0000
ROA not before:           Mon 08 Apr 2024 20:01:54 +0000
ROA not after:            Mon 07 Apr 2025 20:06:54 +0000
asID:                     271724
IP address blocks:        179.191.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:04:43:5c:09:3d:dd:e5:1e:2b:6a:df:b5:ff:59:e0:88:7e:c9:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:54 2024 GMT
            Not After : Apr  7 20:06:54 2025 GMT
        Subject: CN=168D11191D2CA095156E8BA2C8C827359BEF1632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:f2:d6:96:a7:ab:9d:de:4c:16:59:ad:1b:
                    7f:39:3e:fa:24:b1:c8:41:02:40:47:40:4c:50:f0:
                    ee:44:c7:7b:11:fb:1f:d6:ac:17:2c:f7:c6:cf:7e:
                    f4:38:f0:60:b6:75:81:96:d1:86:14:9e:5a:92:e1:
                    96:1f:dc:db:b1:e5:22:d8:82:16:86:bb:a3:ef:3f:
                    f9:b8:c6:aa:df:d5:fc:cb:84:03:35:69:08:94:a5:
                    7b:b5:9e:75:47:9d:0f:1e:0f:f5:9d:bf:c8:c1:29:
                    1b:48:0e:76:b2:e8:d0:4d:b8:26:cb:11:39:61:ef:
                    55:31:37:85:bc:46:59:29:6c:8b:6b:7d:e7:a6:07:
                    67:a2:5d:47:fb:f7:8f:a3:49:fc:a4:60:18:84:89:
                    f9:eb:78:15:17:0d:05:f3:39:ed:43:83:bf:60:65:
                    d7:e1:01:4e:d5:55:70:61:57:a7:f2:fa:e6:2d:ae:
                    0c:f7:e0:b1:78:ee:4e:46:7a:08:48:09:10:68:b7:
                    3d:e9:27:c8:2b:ac:ea:be:93:21:0d:4d:d8:2b:99:
                    68:14:86:b7:a9:0e:7a:95:6d:05:27:8e:6b:16:f7:
                    ac:67:f9:4f:20:d8:70:ee:11:b4:c3:ae:27:4b:23:
                    cb:83:4b:d8:40:8b:93:e1:e2:75:cb:70:c7:2e:f9:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8D:11:19:1D:2C:A0:95:15:6E:8B:A2:C8:C8:27:35:9B:EF:16:32
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3134342e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:8b:26:2e:94:dd:c0:5d:88:53:bb:1e:f1:41:96:71:e6:65:
         77:63:5c:90:72:9f:c7:d5:68:27:2a:1c:77:35:57:05:02:e4:
         6c:81:14:7e:d1:e2:98:88:f2:0f:0f:89:71:2e:28:e1:5c:6c:
         9b:88:94:40:9a:37:ac:61:68:d3:04:74:08:cc:12:63:ee:65:
         f3:31:98:b5:24:02:99:18:ea:26:79:b2:6f:27:4a:7a:8a:71:
         c0:78:6b:d4:65:57:c9:2b:5d:e3:0c:29:6d:7a:dc:a9:0d:86:
         e0:a1:55:b4:17:b9:a9:c4:ca:64:9c:12:5d:76:84:e3:17:46:
         1f:34:30:81:f8:a9:44:38:10:85:03:a8:c3:4c:2d:28:ae:fe:
         e5:1d:0c:0b:4b:b2:48:a4:e6:89:ce:a1:97:f2:57:0b:b5:fa:
         b9:ba:4e:55:d4:2e:1b:8a:cc:38:c4:e7:5c:1c:26:63:1d:cf:
         f6:f8:0f:90:97:5c:f4:71:ef:ce:5e:7e:0a:aa:be:1f:6a:04:
         0f:7a:b4:4a:f9:a1:be:08:d2:35:92:98:d3:9e:e7:e5:79:b9:
         b8:3e:a1:6c:e4:8b:fa:4d:fc:8f:6b:a9:b9:00:7f:91:50:28:
         0a:23:44:fd:bb:df:b9:c4:f3:b7:d5:73:22:ee:e3:a1:95:12:
         c1:b9:bf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org