Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa
File:                     3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier:          lIbIia+vkbgUwEUuEKqAKp1xpZV3LsLzeAmQGn7iDpo=
Subject key identifier:   F1:3E:FF:0F:3A:3F:3B:57:7B:D5:96:E9:1F:86:6B:A1:ED:47:8C:4A
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       513B41E6F506B7D1DF25F65C5AA900EBCCA384CE
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:07:00 +0000
ROA not before:           Mon 08 Apr 2024 20:02:00 +0000
ROA not after:            Mon 07 Apr 2025 20:07:00 +0000
asID:                     28270
IP address blocks:        186.219.152.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3b:41:e6:f5:06:b7:d1:df:25:f6:5c:5a:a9:00:eb:cc:a3:84:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:00 2024 GMT
            Not After : Apr  7 20:07:00 2025 GMT
        Subject: CN=F13EFF0F3A3F3B577BD596E91F866BA1ED478C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:3f:7b:7b:ca:e6:e8:cb:20:46:77:c3:c5:
                    8e:7f:6d:91:d8:95:b0:11:3b:67:ae:f9:5f:f5:79:
                    0e:b5:06:6f:76:ff:a4:2a:cb:fe:42:55:85:5c:9e:
                    b5:8f:89:b6:86:9b:53:f2:b5:db:f5:18:29:68:2b:
                    8d:ad:45:ea:ae:a5:11:b6:8d:00:18:77:51:29:97:
                    49:00:98:5d:cd:55:fd:95:28:af:dd:4a:37:a7:0f:
                    c5:16:39:7a:c9:f1:80:4c:a8:0c:b3:7d:7e:f2:ef:
                    59:0c:18:00:29:d0:87:83:d7:6e:b4:fb:d1:63:54:
                    e5:8f:d0:f4:54:a0:b9:80:c3:c0:a2:ac:b3:1f:2e:
                    5f:c0:ad:b5:24:0e:10:0c:c9:ec:20:2f:4a:f5:71:
                    92:52:aa:c4:d0:f1:5b:7f:36:1b:90:bd:13:f5:41:
                    c6:43:c1:ca:33:a7:b3:cb:fd:5e:19:ee:fb:98:5f:
                    db:4d:5a:f4:b1:2a:78:39:ec:01:a0:5b:68:33:8b:
                    a6:92:66:66:eb:08:68:cd:0e:49:f2:82:28:ad:bb:
                    07:b3:41:7f:88:c9:46:3f:fa:b4:69:cc:2b:a3:9f:
                    43:90:a2:dd:85:50:8a:6a:41:52:c3:ab:70:18:f6:
                    53:d6:bf:67:d3:f9:e9:1f:17:83:ea:64:16:42:d6:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3E:FF:0F:3A:3F:3B:57:7B:D5:96:E9:1F:86:6B:A1:ED:47:8C:4A
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         96:a7:73:c0:ce:71:fe:31:76:e0:cf:14:d2:c4:cb:06:24:2b:
         82:f4:b1:0e:7a:5b:ef:41:02:72:f8:5d:61:c8:7d:78:36:a1:
         dd:44:54:ee:78:87:c4:63:8e:46:8e:cb:61:69:ac:52:2c:8c:
         b1:ce:c9:34:31:2a:98:ff:0f:a3:ae:86:75:e7:23:c0:70:42:
         77:a9:94:1f:60:3c:9b:10:72:c9:9d:f5:64:22:5c:a3:7a:88:
         27:95:f1:ba:19:4e:50:fc:ab:e6:a2:52:b8:20:4b:a2:3e:09:
         24:83:a4:1c:cd:d6:9e:0a:8a:10:57:45:63:32:8e:9d:7e:5f:
         e5:48:77:9e:5b:23:fe:34:a8:38:2b:ff:4c:74:2c:49:68:07:
         24:29:97:fe:f2:0d:75:ed:d0:23:b4:d9:e4:70:0d:24:66:64:
         e0:ba:fe:2e:37:c0:16:2f:7b:01:31:27:2c:b8:6b:6d:f2:5a:
         a9:5c:99:cb:ad:a0:50:55:72:38:36:26:ff:6f:e2:72:3f:d1:
         35:1c:9a:ca:7f:56:a1:81:69:aa:31:e1:46:7a:c8:07:25:b2:
         cc:41:5c:7f:cc:31:06:7a:2d:df:7b:f5:cb:0d:e8:0b:af:32:
         92:2a:83:f5:5c:a4:d8:99:cc:63:8e:2a:6d:28:51:9a:88:9e:
         8d:ed:b8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org