Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa
File:                     3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa (raw, json)
Hash identifier:          eWXIiOaCOtS8yrUHLgPk6usk0v/j7vtKLU+yIOIB4iU=
Subject key identifier:   87:54:48:78:D3:42:08:B2:73:63:D0:E7:98:97:5A:1F:02:03:6C:58
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       367F1B3E58DDEB5017E1F27061027AB426D93B97
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa
Signing time:             Mon 08 Apr 2024 20:06:52 +0000
ROA not before:           Mon 08 Apr 2024 20:01:52 +0000
ROA not after:            Mon 07 Apr 2025 20:06:52 +0000
asID:                     262992
IP address blocks:        186.233.72.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:7f:1b:3e:58:dd:eb:50:17:e1:f2:70:61:02:7a:b4:26:d9:3b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:52 2024 GMT
            Not After : Apr  7 20:06:52 2025 GMT
        Subject: CN=87544878D34208B27363D0E798975A1F02036C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:73:df:f0:b7:2e:90:4b:c9:6a:b6:ab:d3:8d:
                    9a:c2:71:4e:1b:c6:17:0f:f4:0e:9f:69:83:c1:eb:
                    61:f0:e9:f6:59:2c:3e:ff:71:f5:cf:e7:9d:99:00:
                    8c:28:b4:08:f6:92:9d:65:c7:13:a2:56:69:1d:60:
                    00:70:0f:eb:9e:c2:cb:78:65:f9:75:f4:de:af:13:
                    0a:e5:c7:c6:3f:17:17:09:6e:62:f7:2b:1f:28:0c:
                    76:75:06:66:4e:88:ac:1a:62:99:f4:16:87:d5:96:
                    5e:0a:35:82:09:1e:e6:ed:59:7b:46:72:ac:43:76:
                    67:41:b2:ad:18:78:cb:63:3d:c9:ef:b3:b1:9a:d6:
                    33:85:7e:6a:f8:ad:1d:82:17:57:3c:3d:86:02:e0:
                    a5:55:f3:67:ff:40:ab:2b:40:3a:ec:cf:45:63:ff:
                    4d:a4:7d:fa:e7:1d:f9:dd:d3:83:67:d2:16:64:f9:
                    63:68:e5:e9:dc:27:d3:be:96:40:58:cd:1f:98:f0:
                    95:8a:19:48:2f:2e:41:9c:73:9a:78:c7:73:60:4e:
                    ce:18:57:c3:8d:2e:f1:61:0e:7b:56:8b:1c:aa:76:
                    01:d3:29:eb:76:d0:cf:52:42:70:b2:6b:00:06:43:
                    9a:27:3e:78:a2:6d:2a:a7:6c:42:0f:c5:b4:0c:6a:
                    d4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:54:48:78:D3:42:08:B2:73:63:D0:E7:98:97:5A:1F:02:03:6C:58
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3233332e37322e302f32312d3231203d3e20323632393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:ff:f2:88:9a:a8:1e:e1:48:62:6e:06:55:59:39:39:c0:49:
         f4:e8:b0:ec:d2:83:d4:dc:96:4d:f2:99:80:cc:38:5f:c0:c9:
         38:cb:d0:3b:f3:16:31:88:bc:64:b1:7d:67:83:bd:1f:5e:9a:
         54:a7:61:34:b0:9c:53:3d:98:bf:10:e8:ed:f1:93:7c:ea:74:
         b7:42:1f:8e:8d:e4:84:f2:0f:80:88:99:82:86:19:0e:21:d1:
         1c:10:29:9b:85:d9:37:d6:cf:62:1d:20:b7:de:5f:b9:74:0e:
         5d:17:74:c3:7c:6c:d0:14:c9:2d:d7:9d:37:97:f1:4f:92:9f:
         14:79:4c:7e:83:d4:a0:58:96:6f:ce:04:93:14:7b:c5:bc:a3:
         43:4e:e3:1a:81:bc:af:8f:b8:3d:2d:bf:ca:ab:8a:4c:55:e8:
         47:46:29:2b:28:d3:a3:ba:f2:68:18:ea:58:c5:fa:a3:68:12:
         d1:52:cd:36:8b:27:9f:b5:9a:ea:be:b2:50:d9:7c:69:08:ed:
         0d:e9:12:7f:1a:7f:dd:43:f2:f4:76:d6:ec:9f:8f:85:2d:b9:
         b7:bb:62:b4:e2:96:2d:5e:59:d2:65:47:fe:eb:82:cc:60:d2:
         5e:43:cb:56:10:63:e7:0d:f6:83:56:93:b4:27:f3:f0:20:bc:
         26:e9:00:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org