Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134392e302f32342d3234203d3e20323632393932.roa
File:                     3138362e3231392e3134392e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          A0PqBn9kGNc0UXKc9z0+1xPc/9paOizYWfFzpeha+bY=
Subject key identifier:   14:DD:35:76:12:62:CD:BB:4B:26:AB:E5:26:87:41:B1:B0:FE:D7:11
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       42802F191ED9C26DC7D9460C2DCA0D6A1DC2677B
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134392e302f32342d3234203d3e20323632393932.roa
Signing time:             Mon 08 Apr 2024 20:06:50 +0000
ROA not before:           Mon 08 Apr 2024 20:01:50 +0000
ROA not after:            Mon 07 Apr 2025 20:06:50 +0000
asID:                     262992
IP address blocks:        186.219.149.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:80:2f:19:1e:d9:c2:6d:c7:d9:46:0c:2d:ca:0d:6a:1d:c2:67:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:50 2024 GMT
            Not After : Apr  7 20:06:50 2025 GMT
        Subject: CN=14DD35761262CDBB4B26ABE5268741B1B0FED711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e2:b9:68:3a:ab:00:e1:35:46:68:4b:d4:f5:
                    79:4e:d5:27:d7:08:b4:3a:00:60:d1:d1:90:cf:15:
                    c6:c2:3c:7c:e4:02:1b:8b:cb:f9:fc:96:e5:eb:07:
                    54:6e:a8:e0:9d:bd:51:6f:2d:a5:0d:73:8b:19:1f:
                    7e:46:88:32:e3:57:84:aa:a4:95:4d:da:33:e1:c0:
                    c9:7c:70:d4:c0:62:f7:3b:a3:ac:6d:15:f1:3a:e0:
                    f9:3f:2d:32:32:11:fd:4a:ef:6f:57:75:e6:b6:96:
                    8d:d2:d2:33:58:cd:dd:72:a7:2d:cf:bd:a8:0b:00:
                    6e:93:76:bc:8b:9a:cd:59:3c:f9:c1:25:a4:dc:a9:
                    01:c5:c3:53:60:39:84:04:3d:9c:cd:33:7f:0a:ee:
                    c2:cc:2f:db:ed:a5:b2:be:88:59:a6:a4:20:c7:67:
                    8d:91:90:d9:94:25:53:12:9a:5a:a2:e8:e6:68:5d:
                    2e:c0:8f:0c:56:46:b2:b3:c9:fd:11:83:87:a8:2e:
                    8d:97:40:3e:5a:a4:5d:f4:23:af:e1:25:eb:94:b4:
                    6f:13:27:db:27:36:34:18:54:33:c6:28:1a:3d:c4:
                    4c:97:65:9d:e3:b9:b2:e8:8b:c7:0c:ef:51:e9:91:
                    84:98:2c:93:7f:bf:e5:1f:b7:c8:bc:16:86:af:78:
                    5c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DD:35:76:12:62:CD:BB:4B:26:AB:E5:26:87:41:B1:B0:FE:D7:11
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3134392e302f32342d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:a0:fd:c4:39:54:03:a5:fe:5f:59:af:d1:ef:37:bc:30:d3:
         4e:e7:65:67:e5:3c:2f:4a:f2:31:a5:60:83:e9:f5:ae:30:10:
         26:5c:97:fb:ed:59:d3:93:56:bd:0f:7d:0a:2b:dd:bc:bb:10:
         3f:3b:5a:d7:7f:18:8c:7b:49:d2:ac:24:3f:c5:4d:dd:7b:0f:
         47:8a:f5:86:38:7f:4d:1e:94:48:b8:08:e6:37:01:f3:72:dd:
         63:f3:e8:0c:bd:e2:a0:dc:33:1d:c7:b8:a9:9d:cb:93:d0:51:
         50:52:ea:58:4e:8e:ff:f6:79:8d:c2:c1:b4:f9:78:68:8e:ad:
         d5:1b:8f:47:c5:dc:4a:37:77:46:fe:cd:cb:73:97:ba:8a:9c:
         bb:af:82:d0:65:22:54:2a:85:1b:14:58:9a:a4:73:cf:8c:6c:
         2e:1c:ec:8a:2c:be:0a:d1:2b:dd:34:8c:ff:cb:e9:80:a1:77:
         3e:39:7e:cd:ac:9f:08:24:c7:ae:55:9c:ed:71:e9:96:f6:90:
         56:54:39:6e:04:96:4c:17:f6:56:b0:2a:a1:7a:30:44:47:d0:
         f4:72:e9:ea:5c:08:a0:c3:0f:e1:62:77:0e:12:83:15:ea:21:
         ed:fe:a8:8a:94:a1:32:8a:9a:61:35:62:93:f5:d5:57:84:67:
         15:b2:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org