Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134342e302f32302d3230203d3e20323632393932.roa
File:                     3138362e3231392e3134342e302f32302d3230203d3e20323632393932.roa (raw, json)
Hash identifier:          E5kzz/6bO1F9949KseHk4No2Eh0iuYlWJANI3xlfRAw=
Subject key identifier:   BD:17:B3:C6:76:B2:33:2A:1A:2E:DC:C2:C7:A9:D5:AC:2B:06:59:A0
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       45933FCC8FD0D6CD07A80D5B6555BBD6923243AA
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134342e302f32302d3230203d3e20323632393932.roa
Signing time:             Mon 08 Apr 2024 20:07:06 +0000
ROA not before:           Mon 08 Apr 2024 20:02:06 +0000
ROA not after:            Mon 07 Apr 2025 20:07:06 +0000
asID:                     262992
IP address blocks:        186.219.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:93:3f:cc:8f:d0:d6:cd:07:a8:0d:5b:65:55:bb:d6:92:32:43:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:06 2024 GMT
            Not After : Apr  7 20:07:06 2025 GMT
        Subject: CN=BD17B3C676B2332A1A2EDCC2C7A9D5AC2B0659A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:89:6d:af:14:3c:f7:ad:c5:1f:b3:2e:f6:
                    e2:1a:5f:d2:53:69:5c:30:8e:c6:40:05:90:22:e7:
                    7c:a7:12:b2:df:66:5b:c8:36:48:8c:99:c4:b7:9a:
                    39:1b:8a:3b:a2:87:01:04:eb:b9:93:96:fb:cc:5b:
                    e2:82:f7:bd:db:59:f7:a3:75:68:4c:05:22:a8:3b:
                    68:78:b5:00:b8:20:75:3b:f0:08:77:4a:c6:71:8c:
                    50:59:0a:66:cb:18:e3:ae:34:c9:6c:84:41:f5:d0:
                    2e:f7:33:20:17:38:27:e2:04:46:73:da:94:c1:77:
                    af:d6:3e:33:fe:bb:e4:3f:7b:2e:fd:41:d9:99:25:
                    4a:4c:e5:9b:2d:f6:74:f6:f9:31:8c:40:69:5b:10:
                    21:7a:e9:a2:e3:99:32:fb:d3:26:cb:ee:54:93:ca:
                    49:b0:cf:60:48:5e:81:87:57:12:de:ea:e3:3c:53:
                    b2:2f:53:dc:eb:46:66:72:d6:92:8c:d2:d0:d2:11:
                    46:62:e7:63:72:65:c9:f5:ee:71:52:c2:59:b8:c2:
                    c3:fd:e1:56:95:90:81:69:64:03:a8:b0:a5:c4:ff:
                    21:68:ef:dc:f0:67:e3:43:5c:ab:05:b7:3f:a2:d6:
                    9e:6d:91:b7:e7:0a:97:f6:5f:1c:e8:cd:3d:68:c5:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:17:B3:C6:76:B2:33:2A:1A:2E:DC:C2:C7:A9:D5:AC:2B:06:59:A0
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134342e302f32302d3230203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:f5:10:49:4f:09:51:a1:30:6a:61:2d:43:01:7d:53:da:e0:
         55:2c:f8:a0:88:4f:d7:4c:5b:0f:2e:17:24:62:11:9b:f3:e0:
         09:63:73:b5:27:b5:3c:d5:ec:67:f5:d6:46:14:20:2c:11:0d:
         4c:82:33:24:e5:38:a4:51:82:18:fe:90:b7:c4:a3:2f:35:fd:
         d9:06:78:13:f3:a2:81:f9:c1:41:d6:51:6e:48:34:01:a9:81:
         10:65:24:36:54:17:c2:f7:20:cc:eb:dd:d2:9b:2a:d1:4f:4d:
         0c:5f:31:15:0c:ea:05:74:84:b9:44:7a:da:82:ab:6b:ea:61:
         8b:03:27:2b:67:fb:3f:a6:5a:8e:43:eb:32:9a:03:3d:58:ca:
         ae:88:a7:49:75:93:14:4e:00:8d:93:de:05:eb:5e:c2:06:1d:
         4c:2f:9a:37:5c:ee:df:51:c8:59:74:ca:2a:32:58:b6:7d:bb:
         bb:23:d7:39:88:58:fb:c5:80:92:c6:d5:13:19:18:07:15:20:
         1c:f8:ca:76:4c:65:fc:5f:c8:9b:96:80:da:8a:ef:ba:f4:b8:
         4e:22:60:a1:57:35:a6:8f:18:d2:2a:05:94:8f:de:78:77:13:
         22:e4:55:8a:51:fa:fd:36:36:fd:fa:f4:37:1d:b1:fb:cc:a3:
         ee:e3:8a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org