Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3135302e302f32342d3234203d3e20323632393932.roa
File:                     3138362e3231392e3135302e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          5Z7f0akCT2X45S07hnI3f5Gv094fOQlqmKl3di2Qb2M=
Subject key identifier:   6A:EF:6E:D5:27:05:F8:04:7A:33:33:FC:1B:2C:72:2E:D0:51:B8:12
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       750F690B426E6C38EC7D6A4D6A4AF34DA4372F19
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3135302e302f32342d3234203d3e20323632393932.roa
Signing time:             Mon 08 Apr 2024 20:06:59 +0000
ROA not before:           Mon 08 Apr 2024 20:01:59 +0000
ROA not after:            Mon 07 Apr 2025 20:06:59 +0000
asID:                     262992
IP address blocks:        186.219.150.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:0f:69:0b:42:6e:6c:38:ec:7d:6a:4d:6a:4a:f3:4d:a4:37:2f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:59 2024 GMT
            Not After : Apr  7 20:06:59 2025 GMT
        Subject: CN=6AEF6ED52705F8047A3333FC1B2C722ED051B812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:c1:39:2a:9b:61:d7:45:27:25:7e:a1:56:
                    c6:e1:1c:09:10:7e:67:bc:68:46:0e:ee:3d:d6:28:
                    25:f3:98:b1:17:c5:2f:10:f7:e5:55:c5:95:1b:22:
                    00:17:0b:86:7c:30:b5:92:3d:33:41:3a:5f:d9:72:
                    12:29:4c:a3:2e:78:19:68:55:e7:0c:ef:64:bd:4a:
                    35:54:48:e6:c9:31:04:7d:80:ff:74:e8:b2:92:6b:
                    ef:de:1d:f4:3f:d1:a4:99:3b:ed:8a:11:09:e9:d8:
                    96:98:0c:c2:52:f0:b6:6d:76:58:33:a8:8e:46:94:
                    cf:0a:23:a7:4a:ea:fb:23:87:1c:3d:8e:c1:db:79:
                    df:bf:4f:d8:d9:2b:5b:fd:94:ce:bb:89:93:ea:4c:
                    4a:c2:b9:bf:e3:39:1f:87:eb:f5:ae:41:34:22:2f:
                    af:f8:e1:d8:44:d6:6d:11:e9:7a:ea:13:e1:1a:0f:
                    d8:3f:8e:99:c0:c5:cc:af:bf:97:5d:3d:07:1e:49:
                    86:9e:d2:e5:88:f9:8c:72:64:3d:ff:3d:e7:bd:fe:
                    90:09:d4:b1:d4:64:90:70:1f:9a:50:0b:42:9a:28:
                    66:2c:02:cd:46:c9:a0:e9:f7:73:d0:59:ad:41:47:
                    e7:09:6a:49:aa:57:a7:62:55:3b:9e:dc:56:5a:c1:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EF:6E:D5:27:05:F8:04:7A:33:33:FC:1B:2C:72:2E:D0:51:B8:12
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3135302e302f32342d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:d1:f0:c0:61:ce:2b:58:e0:2a:3c:14:0b:6f:fb:92:e6:e3:
         61:a3:83:28:a9:07:a7:88:31:7a:13:6a:9f:b5:e7:cf:6f:38:
         e9:29:2b:84:a0:55:8c:34:74:e1:78:c1:6d:f8:57:16:4b:5f:
         bd:91:d6:69:14:ee:54:57:b7:32:6d:80:1a:bd:8d:d5:4f:8e:
         b2:d6:9c:00:aa:41:f7:27:67:bc:41:94:17:14:4f:7c:e6:3b:
         e9:36:c1:f7:24:cb:a3:69:7e:dc:f4:fa:19:42:f4:56:c2:45:
         90:dc:cc:d1:df:30:3c:35:d3:d5:86:5e:9e:f7:90:92:62:fe:
         bb:3f:86:31:7f:31:ee:09:2e:e1:b2:b9:7c:a9:fb:d7:05:52:
         80:2a:8e:0e:ee:61:d1:3f:55:63:59:9d:80:cd:1f:3c:f2:8a:
         c9:2d:6c:e1:91:e6:c9:5e:72:55:27:bf:60:0d:be:82:2a:e9:
         38:42:59:a6:83:3f:f2:98:15:3c:46:fc:16:df:98:76:79:d5:
         a2:6a:5b:3c:eb:bb:9d:ab:2c:05:73:c4:30:a0:17:04:f4:db:
         d1:01:27:08:bf:ce:22:9f:d4:24:cd:71:41:c7:d6:53:68:86:
         bb:f8:c2:b0:bc:97:d5:bf:b5:f9:51:ea:4b:3d:f6:44:7f:89:
         94:27:f9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org