Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134382e302f32342d3234203d3e20323632393932.roa
File:                     3138362e3231392e3134382e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          OExh1uPdXlmZb6/QaPou4PJdU/eGctY0i2DjL96m0wM=
Subject key identifier:   A3:28:91:2A:4C:C4:61:7A:E9:FF:DD:BB:96:33:83:BF:6D:2C:25:B1
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       068813A4669153F2AA035F70718DAA69CD354F60
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134382e302f32342d3234203d3e20323632393932.roa
Signing time:             Mon 08 Apr 2024 20:06:54 +0000
ROA not before:           Mon 08 Apr 2024 20:01:54 +0000
ROA not after:            Mon 07 Apr 2025 20:06:54 +0000
asID:                     262992
IP address blocks:        186.219.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:88:13:a4:66:91:53:f2:aa:03:5f:70:71:8d:aa:69:cd:35:4f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:54 2024 GMT
            Not After : Apr  7 20:06:54 2025 GMT
        Subject: CN=A328912A4CC4617AE9FFDDBB963383BF6D2C25B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a2:a6:6c:7e:7f:8b:ef:a6:25:62:73:a5:c6:
                    19:66:23:16:26:54:eb:8a:b5:ff:33:02:df:65:24:
                    af:6e:4e:07:b1:2d:2e:b1:96:f3:b3:d3:05:da:ef:
                    9e:ed:b2:d4:ac:6e:99:41:3c:34:9a:ff:46:20:a9:
                    c2:73:24:6b:7b:6d:a2:a1:00:3a:78:c3:e7:68:8b:
                    cc:95:d7:e8:1b:5a:c7:ab:47:8c:e0:1e:ff:31:51:
                    d7:de:02:a6:ec:33:59:01:8b:3a:34:08:99:5c:28:
                    51:29:83:b3:d1:7e:d5:52:4a:d0:1a:21:52:ff:5a:
                    85:33:1d:b1:bb:4d:ce:8c:25:be:5e:98:ea:eb:0f:
                    22:dc:b3:12:14:7f:d4:ec:de:33:b3:90:07:4e:70:
                    c3:90:aa:7d:7e:cd:b2:2f:71:ca:a7:8e:60:43:cb:
                    98:a1:a8:9b:32:07:3c:ee:9b:92:b0:52:49:1d:95:
                    cd:fc:4d:77:42:c0:62:13:bc:a8:3c:2a:e6:a0:09:
                    f1:e0:62:74:31:da:e3:2f:89:19:19:98:86:fe:79:
                    43:6b:e1:7b:6e:25:63:7e:b1:6d:27:02:c1:4d:79:
                    1a:e8:91:69:bc:2e:f7:05:9e:31:c9:04:d3:4f:0f:
                    d2:b4:7c:bb:2d:0c:d9:2b:12:dd:7e:66:d5:2e:10:
                    7f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:28:91:2A:4C:C4:61:7A:E9:FF:DD:BB:96:33:83:BF:6D:2C:25:B1
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134382e302f32342d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:3a:21:6d:1d:b7:2a:bb:55:65:ce:5d:92:7a:16:7e:bd:1e:
         fe:a5:22:4a:47:45:d4:a9:4b:36:78:99:2e:d4:2c:3d:be:5e:
         fb:4e:0a:d1:a8:f4:07:a4:1f:4e:7f:05:f2:f1:57:f6:0f:7a:
         e0:28:6c:49:5b:ae:51:b2:87:8c:99:b1:37:71:43:04:be:d9:
         92:a3:1f:54:43:88:1b:3d:b5:b7:7e:da:e2:ec:4f:57:27:c1:
         b1:7d:42:ac:b7:a1:98:7e:27:bc:da:81:ef:1c:09:25:1c:8b:
         d4:48:f0:3e:d6:12:33:99:87:58:2c:10:62:ea:03:2d:dd:eb:
         bf:32:8a:67:24:11:3d:cc:6e:62:53:64:38:99:88:0d:1b:f6:
         4b:63:f2:c6:dc:b1:cf:52:a9:dd:81:f3:d6:e1:89:56:bb:e7:
         c4:a2:4a:e0:80:89:73:7c:1c:5a:25:2d:bf:eb:ba:ff:41:36:
         6b:fe:e8:55:0b:ab:a5:b4:46:55:61:52:26:14:f3:01:34:6c:
         4a:82:92:a5:53:a1:35:ed:22:d2:74:c1:56:17:ea:fe:78:1b:
         32:57:d5:b9:1b:26:ff:e7:31:15:e0:ea:a5:88:f1:3a:1b:fe:
         e2:fc:3f:17:5a:25:f2:b0:50:c5:a3:b8:ff:2c:67:f0:27:2e:
         8b:3a:44:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org