Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134342e302f32302d3230203d3e203238323730.roa
File:                     3138362e3231392e3134342e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          Jp+KVY2m2TJJxu+VFgo6WqxGKtRZig4ryTT0boYaidc=
Subject key identifier:   54:F1:52:E5:4B:0E:20:26:F1:C3:D7:75:74:07:3C:2F:67:1A:68:8D
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       6852AB841E29CBC0142D90857A1DA3E6B97F7903
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134342e302f32302d3230203d3e203238323730.roa
Signing time:             Wed 10 Apr 2024 02:07:26 +0000
ROA not before:           Wed 10 Apr 2024 02:02:26 +0000
ROA not after:            Wed 09 Apr 2025 02:07:26 +0000
asID:                     28270
IP address blocks:        186.219.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:52:ab:84:1e:29:cb:c0:14:2d:90:85:7a:1d:a3:e6:b9:7f:79:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr 10 02:02:26 2024 GMT
            Not After : Apr  9 02:07:26 2025 GMT
        Subject: CN=54F152E54B0E2026F1C3D77574073C2F671A688D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:30:f9:dd:ff:7d:db:a1:48:64:a3:97:45:
                    43:42:2d:24:ba:f8:96:9a:19:42:07:94:fe:a7:0d:
                    48:18:84:6e:1c:15:7f:c4:34:d1:75:52:47:a3:56:
                    ac:3a:59:fd:59:59:f3:c4:35:26:97:36:af:62:2a:
                    0e:69:28:e1:76:56:55:f7:02:f8:2c:ce:45:5e:be:
                    c6:db:b9:a8:81:fe:b5:98:58:46:82:3c:e0:fb:58:
                    3f:5d:f7:48:93:eb:a6:49:2a:56:7d:5d:50:67:9d:
                    ee:fa:88:57:b7:ce:95:c2:62:ad:86:84:b9:14:03:
                    d4:56:ba:a4:bc:f5:ec:1d:ef:fd:21:08:69:5f:2c:
                    6a:ab:e8:2f:22:81:d1:4c:cb:1a:07:96:34:08:9a:
                    7d:51:b6:28:16:8d:2c:22:d4:75:68:be:a7:f4:cf:
                    69:b0:f2:97:25:47:eb:d4:f7:2d:6d:44:bb:6f:d0:
                    82:f5:e4:91:23:37:d0:6d:6c:d1:fe:0e:3a:6a:4a:
                    12:ce:b5:e1:c7:66:21:66:53:2a:ea:03:81:0d:ae:
                    34:0c:34:53:79:39:be:d6:39:5c:7c:d9:7e:0a:b5:
                    38:15:8e:6d:95:2d:21:1e:80:12:59:c7:ae:26:0a:
                    c4:73:29:c1:08:28:c5:6f:5d:fc:b8:35:45:db:f9:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F1:52:E5:4B:0E:20:26:F1:C3:D7:75:74:07:3C:2F:67:1A:68:8D
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134342e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         95:f5:19:8d:f3:69:64:49:63:b8:ea:dc:b3:32:dc:5e:b6:59:
         68:0c:a5:4f:d9:36:f9:6b:24:12:ec:a3:c9:25:5b:a0:cb:b6:
         90:a8:2c:68:4e:a9:ee:e0:3c:34:03:c8:77:ac:78:e3:01:c4:
         a3:05:5a:0d:70:a8:aa:b8:50:b0:28:f2:ff:13:26:ca:80:c4:
         28:07:de:b7:8f:a6:40:8e:77:6d:60:a5:85:db:98:d0:da:f3:
         81:5b:98:14:05:ad:cf:02:fb:e3:f7:2e:ed:b7:a6:bf:72:a1:
         a7:36:ce:51:b6:3d:e6:6d:fc:3d:09:8b:78:44:d8:44:7b:93:
         66:8b:5d:b9:07:0a:2c:3a:26:ad:1a:32:3f:05:5b:17:9b:c4:
         b7:55:ac:f0:df:a1:b8:8c:19:97:11:15:e5:40:9a:60:bb:16:
         03:ab:92:93:67:30:9b:44:f6:50:2f:30:cf:68:05:99:32:52:
         f9:4a:a5:3a:4b:16:4e:ad:c2:75:b8:38:2e:b7:82:33:4f:a6:
         70:b3:6c:52:4f:aa:9c:fd:04:d4:02:f3:d6:7d:8b:be:f8:7d:
         ef:16:31:5e:bf:af:ba:8c:83:d3:f0:98:3a:a4:af:63:ff:4d:
         a3:b6:a2:56:52:df:c8:9f:ef:bd:2d:cf:da:ca:c1:0c:f9:97:
         90:6b:a4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org