Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3233332e37322e302f32312d3231203d3e203238323730.roa
File:                     3138362e3233332e37322e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier:          iry+SKvEvNLba7wKshHUfG/cCoQbnIMx8AQdfOd7irQ=
Subject key identifier:   26:ED:FF:34:FD:61:98:A8:78:A7:66:B0:03:44:27:F5:23:14:19:F1
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       6BBF11C08E9044B8A15439001C61942CA5DE7C58
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3233332e37322e302f32312d3231203d3e203238323730.roa
Signing time:             Wed 10 Apr 2024 02:07:26 +0000
ROA not before:           Wed 10 Apr 2024 02:02:26 +0000
ROA not after:            Wed 09 Apr 2025 02:07:26 +0000
asID:                     28270
IP address blocks:        186.233.72.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:bf:11:c0:8e:90:44:b8:a1:54:39:00:1c:61:94:2c:a5:de:7c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr 10 02:02:26 2024 GMT
            Not After : Apr  9 02:07:26 2025 GMT
        Subject: CN=26EDFF34FD6198A878A766B0034427F5231419F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:aa:72:64:fc:39:c9:0d:8d:ec:ee:ed:1b:48:
                    2e:48:b5:6b:ef:0f:70:ea:10:27:24:30:3b:19:7f:
                    e0:c9:11:1d:08:69:9b:81:17:5b:38:4d:3d:1e:f6:
                    03:30:28:7f:17:d6:fd:cd:a9:fa:d9:44:da:8c:f3:
                    89:cb:3f:bd:28:5d:2f:5c:1a:d8:8e:84:ac:eb:09:
                    28:9b:79:65:5b:17:41:fb:f0:a8:2c:d1:8e:27:b0:
                    86:75:07:f7:24:a9:01:af:f6:86:4c:1f:c4:96:47:
                    2e:ff:0f:32:4a:85:55:e1:c0:63:f0:94:d4:f8:a6:
                    84:56:e9:2a:b5:7d:cd:cd:c9:f6:00:d2:63:f6:95:
                    9f:6d:74:44:a7:1a:7f:bc:49:28:4b:fb:f5:b1:b3:
                    87:c0:d9:e5:7d:66:d1:1f:5d:36:6d:a3:14:a4:65:
                    3a:18:3c:a5:71:dc:32:03:a0:fb:16:9f:b6:d4:25:
                    7b:88:54:0c:54:58:d5:56:fa:6e:90:f9:92:cd:5c:
                    2a:d4:33:6e:51:ee:ab:aa:04:b0:b3:df:9b:39:cf:
                    15:1b:b6:81:4b:53:c6:97:04:81:84:8a:87:04:68:
                    12:43:dd:d2:e2:99:6f:00:72:5d:4a:19:0b:b3:eb:
                    8c:5e:af:a7:f4:c5:86:b0:09:23:0c:e2:55:bc:de:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:ED:FF:34:FD:61:98:A8:78:A7:66:B0:03:44:27:F5:23:14:19:F1
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138362e3233332e37322e302f32312d3231203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:9d:0b:9b:7c:4b:4b:e4:b8:24:7d:69:37:90:7f:50:b1:28:
         d1:cd:30:a6:2b:94:47:a3:f5:60:39:db:21:4b:3c:a5:a9:9f:
         0d:28:af:4d:65:6d:33:36:8a:3d:f2:95:a3:cd:36:c7:f4:65:
         43:37:32:04:a1:b1:05:aa:fd:4c:ce:81:83:9c:ae:28:75:d7:
         77:b9:06:2b:e7:30:ff:d2:29:1c:a7:e6:9c:d0:b2:43:20:78:
         7a:59:a3:6b:fb:d5:49:32:75:28:93:e0:0d:97:bb:3d:0b:87:
         03:b2:9b:c9:67:48:f1:90:01:37:3e:d6:25:8b:b5:3d:f9:11:
         85:a5:76:86:0e:77:08:e3:d0:d4:bd:5c:81:95:c7:d2:c0:96:
         c3:ba:a4:45:e7:6e:1d:29:6b:73:72:bb:a2:1f:eb:f7:83:b0:
         f1:91:f9:c2:6c:5d:4d:e5:f0:b0:33:d6:17:6d:51:9e:13:a2:
         2a:22:11:04:47:91:59:f7:a7:f4:2c:e5:62:c4:9c:2a:ab:72:
         50:42:69:37:ee:06:46:eb:2a:ed:9d:fc:6e:bc:18:b8:38:17:
         90:52:a8:96:72:8a:5d:09:51:a9:2b:a3:37:4a:ea:d5:1a:8c:
         92:98:9b:11:91:8e:e4:22:02:99:be:26:51:59:8b:be:dc:2a:
         30:bd:d0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org