Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa
File:                     3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa (raw, json)
Hash identifier:          h0hMszf9WVSBK8DBDHF2O4VI62lmRai2NoGg7KPLRaI=
Subject key identifier:   51:D6:2C:AF:76:41:30:95:E8:6D:0B:39:1E:72:54:A9:97:A3:C0:32
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       07E8DC07F253843D076839A36765916687959E70
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa
Signing time:             Mon 08 Apr 2024 20:07:05 +0000
ROA not before:           Mon 08 Apr 2024 20:02:05 +0000
ROA not after:            Mon 07 Apr 2025 20:07:05 +0000
asID:                     262992
IP address blocks:        186.219.151.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:e8:dc:07:f2:53:84:3d:07:68:39:a3:67:65:91:66:87:95:9e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:05 2024 GMT
            Not After : Apr  7 20:07:05 2025 GMT
        Subject: CN=51D62CAF76413095E86D0B391E7254A997A3C032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:0d:5c:72:2b:7f:9f:c8:d7:7c:b4:da:b7:
                    2c:50:4b:0e:a8:ed:6e:ce:27:e5:17:31:6d:32:d7:
                    47:18:ab:8c:6c:f0:7c:d6:4b:6e:55:b3:44:d1:00:
                    37:9d:36:c5:7b:2f:84:f4:96:ea:b3:c4:2f:f0:25:
                    e0:ec:38:fc:2e:a1:22:1c:5e:dc:7f:38:a2:87:ab:
                    fd:b0:92:78:cc:f3:04:65:fd:36:09:23:6c:4a:cb:
                    de:e2:e4:1f:e7:21:e2:d0:9b:fc:92:9f:92:73:ee:
                    e6:a1:6a:d1:e6:38:d9:8c:2f:77:81:86:c4:c3:60:
                    b1:17:a8:94:9d:58:45:90:e5:40:70:35:d9:c3:01:
                    06:83:05:d2:36:8e:3b:78:0b:43:5b:ff:4d:03:41:
                    5f:36:e9:5b:ef:9c:50:80:15:df:7a:82:e6:17:73:
                    17:56:9f:1e:f1:e9:8c:7d:70:2d:29:5f:00:a6:54:
                    da:c0:27:95:17:dc:67:6f:29:c4:ec:70:ee:6e:7c:
                    5c:92:3c:df:90:d4:bc:c9:76:f8:e6:89:23:98:3f:
                    5b:1f:b8:8e:ff:b5:da:1b:2e:93:bf:11:59:4a:c5:
                    b7:ed:a4:02:9e:55:e8:1e:af:3f:19:25:55:10:87:
                    f9:b5:2a:2b:5b:7d:cb:85:a4:91:27:20:36:e2:1e:
                    b8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D6:2C:AF:76:41:30:95:E8:6D:0B:39:1E:72:54:A9:97:A3:C0:32
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3135312e302f32342d3234203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:86:9d:67:d4:d3:0d:76:26:6e:db:ff:e8:27:19:11:b9:a8:
         36:96:5b:bd:57:00:f7:4f:a4:8b:92:b8:57:97:c4:16:39:58:
         ad:2e:e7:65:53:cb:51:03:d1:86:fc:b9:ae:0b:19:8c:4a:4c:
         42:ad:43:66:e0:1a:23:61:ee:04:43:e2:17:1d:d7:4e:2b:cb:
         bf:70:29:f7:ab:54:db:4f:21:ba:70:f5:f9:90:36:df:77:99:
         ea:a9:ec:19:98:a4:fc:ec:02:a6:f8:10:f2:76:e5:b8:ff:f8:
         56:f3:31:1a:89:28:a4:6e:16:79:c7:8e:eb:be:2a:ae:27:c4:
         2a:60:73:74:8f:a8:93:1c:bf:d0:f4:3f:a7:ef:82:1e:47:78:
         25:31:41:97:48:ba:88:e0:fc:e0:05:88:d5:60:a6:e8:c8:8b:
         d8:9b:9d:d0:11:92:d9:e0:15:f5:99:26:b5:56:0e:48:88:03:
         6c:bf:10:87:f3:2e:5b:36:ce:26:df:24:5e:ad:67:d3:91:86:
         1f:e2:70:0d:ea:fe:e8:bb:2c:f6:86:29:cf:0f:5f:ec:ab:45:
         e0:ee:4b:87:bf:4c:d3:2b:1e:1f:b2:29:a5:41:5c:70:dd:3e:
         e3:e6:17:cf:8f:89:6d:45:8a:d2:e1:cc:48:3f:71:b1:ed:d5:
         91:d1:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org