Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134372e302f32342d3234203d3e20323632393932.roa
File:                     3138362e3231392e3134372e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          1hHZWIc18Qcd997rgCetZUhNAwr7qMbQpG4WAqipLaE=
Subject key identifier:   A4:A9:E6:4C:EE:4E:35:85:5F:A0:9F:07:50:45:E5:E2:BB:27:2E:28
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       386EBD430F3622FB6D4DCEA3D45A42797224DC3F
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134372e302f32342d3234203d3e20323632393932.roa
Signing time:             Mon 08 Apr 2024 20:06:50 +0000
ROA not before:           Mon 08 Apr 2024 20:01:50 +0000
ROA not after:            Mon 07 Apr 2025 20:06:50 +0000
asID:                     262992
IP address blocks:        186.219.147.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6e:bd:43:0f:36:22:fb:6d:4d:ce:a3:d4:5a:42:79:72:24:dc:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:50 2024 GMT
            Not After : Apr  7 20:06:50 2025 GMT
        Subject: CN=A4A9E64CEE4E35855FA09F075045E5E2BB272E28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d4:82:07:6a:5f:da:8c:a9:35:ef:96:e8:a2:
                    a2:66:ce:92:16:5b:f0:46:f6:be:91:cb:9c:f7:46:
                    4f:cb:39:7a:5f:e1:f4:2d:69:48:0b:a5:a3:59:4c:
                    58:2a:74:29:f2:64:be:1e:cf:34:b3:1e:4e:62:ab:
                    3a:b3:8c:39:69:ec:c5:3a:8a:fc:79:bc:6d:bd:4f:
                    60:02:f2:1c:26:f4:85:0d:5a:77:30:88:5d:14:27:
                    e9:d5:9b:36:2d:6f:c2:03:ae:a9:30:ae:61:99:f5:
                    a2:13:2e:a3:fc:93:a6:24:32:ea:4f:07:b3:5d:9f:
                    4c:02:99:c3:a4:06:6f:a2:5d:f9:49:19:20:ba:70:
                    41:1f:92:75:09:30:e0:3c:59:5c:5a:02:35:c3:c7:
                    1a:44:ac:c5:66:ae:ea:65:d7:d7:1b:29:2d:d9:55:
                    e9:d5:14:4d:59:d9:e1:58:c0:e0:3d:fa:88:e0:1c:
                    34:ed:b6:22:99:1a:e3:01:41:26:d3:52:03:8b:b7:
                    31:48:43:e6:8f:c9:42:d2:56:40:a4:70:12:d9:cf:
                    be:f6:f5:bb:99:75:21:8d:2d:eb:3c:61:f5:a4:ff:
                    66:ed:28:05:d7:34:d7:9b:e0:03:10:a2:d4:39:70:
                    51:1c:c9:dd:90:8a:5f:ef:71:ba:ac:b0:c0:07:ea:
                    43:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A9:E6:4C:EE:4E:35:85:5F:A0:9F:07:50:45:E5:E2:BB:27:2E:28
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134372e302f32342d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:8d:9c:da:c9:41:b3:55:ab:43:a7:2e:53:bd:cc:5e:8b:1f:
         8b:a9:0d:c2:a2:df:50:9d:e4:09:7c:b2:0a:3c:b3:6a:76:c8:
         da:14:5c:30:da:91:cb:06:24:ee:bf:d0:d0:c8:d2:16:a3:00:
         f1:40:ac:1d:08:16:b5:0c:7a:e3:d7:f2:8c:5f:92:fe:80:6f:
         eb:b1:02:33:b0:e8:b6:c3:41:de:96:cc:69:3e:03:fb:d2:20:
         a6:bd:ab:0e:4c:35:06:60:b2:76:a8:3b:9c:7a:2e:0a:af:2d:
         51:93:ca:c1:19:21:20:f2:fc:27:8c:12:01:58:c2:15:64:17:
         df:27:37:df:84:03:c1:88:85:6f:81:40:2f:2f:39:37:db:2a:
         63:da:7b:fc:b2:e8:85:37:68:43:da:71:43:6d:e0:fb:66:85:
         62:50:51:f7:7f:c3:e2:91:0e:db:8f:c6:10:69:ff:9c:a1:cd:
         c2:53:90:9f:c4:45:d3:a9:80:42:c5:0f:f1:52:5f:ac:18:21:
         b2:21:41:4c:9e:13:16:26:ba:55:08:17:57:4b:b8:35:41:7e:
         f6:6d:a1:e7:b9:0f:e4:bc:b2:cb:57:78:ea:4e:6e:bd:db:a8:
         2e:19:7e:6a:3a:60:8a:d3:46:5c:ac:45:4e:2f:25:2a:aa:e5:
         f4:86:60:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org