Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134362e302f32342d3234203d3e20323632393932.roa
File:                     3138362e3231392e3134362e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          uKHam5eaqivf2w/Uzqb4v8DsIMlJrhD8xL8eQUjBACk=
Subject key identifier:   7D:F6:0C:31:A4:F9:95:0A:D9:BC:CB:1E:A3:36:40:87:45:73:C9:29
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       771E217DA5858AFDE8DC29FA57BD60782C46C138
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134362e302f32342d3234203d3e20323632393932.roa
Signing time:             Mon 08 Apr 2024 20:06:49 +0000
ROA not before:           Mon 08 Apr 2024 20:01:49 +0000
ROA not after:            Mon 07 Apr 2025 20:06:49 +0000
asID:                     262992
IP address blocks:        186.219.146.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1e:21:7d:a5:85:8a:fd:e8:dc:29:fa:57:bd:60:78:2c:46:c1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:49 2024 GMT
            Not After : Apr  7 20:06:49 2025 GMT
        Subject: CN=7DF60C31A4F9950AD9BCCB1EA33640874573C929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:08:5e:71:71:c2:72:7a:51:0a:37:95:da:
                    f5:29:2a:92:f5:a4:ff:b8:c5:22:ce:f2:48:c8:22:
                    ce:df:8a:98:fe:d9:b5:2e:05:30:3b:08:9a:6d:94:
                    13:e1:c3:2f:20:29:ef:58:f3:22:10:d4:47:f0:a1:
                    fb:eb:75:ff:ee:57:7d:6c:7d:6c:8e:fd:a6:8d:48:
                    ac:26:27:d2:bb:80:25:87:2a:45:79:f6:e3:56:de:
                    81:59:86:1b:e3:a6:d2:62:a8:2a:27:d1:e4:9d:5c:
                    37:3b:fa:06:f5:18:9b:85:cd:5b:98:0c:ed:06:85:
                    53:88:ce:29:fa:3d:c6:90:38:d4:fa:5d:de:63:9a:
                    4a:69:ee:23:64:ef:31:5f:b8:99:64:af:89:76:ce:
                    70:26:1d:6b:cf:27:ae:41:69:3b:0e:50:f9:ab:c6:
                    8d:f7:91:d4:17:14:e4:fb:a5:24:f5:e2:d7:f6:fe:
                    1a:95:3f:93:2f:6f:dc:22:a1:95:8e:15:e7:bb:37:
                    96:ed:e0:16:fd:bd:9f:e8:ae:eb:f3:b4:1a:26:2b:
                    d6:b7:c3:69:3c:2d:a8:bc:81:c2:65:8c:cc:84:a7:
                    eb:6f:43:ae:1f:e6:30:08:ca:5d:6c:64:37:5d:48:
                    89:4c:f5:cc:f1:0f:42:98:69:b2:b9:3f:b2:5f:4e:
                    57:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F6:0C:31:A4:F9:95:0A:D9:BC:CB:1E:A3:36:40:87:45:73:C9:29
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134362e302f32342d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:79:74:d7:5c:b9:b9:22:98:04:58:12:cf:06:11:17:15:86:
         cb:ab:fc:ce:83:aa:09:0e:79:6d:e1:9b:14:8d:43:fd:4e:09:
         6f:b1:3e:41:f2:06:e7:13:92:74:a3:13:c3:c6:0d:83:d1:dd:
         2f:27:28:66:53:74:0d:d1:b5:75:3d:e3:11:5f:b0:ca:72:2a:
         a2:15:b5:93:9f:77:c1:da:81:c6:56:32:27:fc:f8:82:f2:99:
         41:13:58:3b:a1:43:3e:c6:20:64:f5:05:3e:6a:67:af:52:78:
         c9:6a:1b:49:39:12:24:2b:d9:fc:e2:cb:4d:b2:8f:0f:d1:83:
         78:c5:a9:ab:3a:43:b7:69:15:fa:e5:7d:99:eb:9c:9a:36:27:
         7e:40:44:83:e7:38:08:32:41:de:a3:b9:38:77:54:34:ed:bf:
         e6:2e:37:d4:37:fd:21:c0:c8:c8:bb:43:6d:ad:06:7f:7d:82:
         d4:13:f3:f9:ad:00:0e:0f:03:5a:a7:97:b5:54:be:fb:65:9b:
         97:59:43:57:9d:93:f4:c4:31:4d:0f:83:0d:1b:52:92:94:66:
         0e:67:c6:d0:70:cf:40:7b:d3:6d:35:90:3a:ef:c9:e4:d0:4d:
         82:f4:46:8d:5e:96:38:ef:90:cf:e8:e8:bd:44:b9:36:52:fa:
         8a:c1:1b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org