Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3130382e3131312e302f32342d3234203d3e203238323730.roa
File:                     3138372e3130382e3131312e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          k00s5TFZdodDgFKIYj0MV4L7scCjdcPoqsqOT5d4sS0=
Subject key identifier:   79:C5:C4:42:13:BF:CB:79:03:13:37:C2:36:A4:A7:A9:92:F3:51:C3
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       1613669CEA3092EFD918E98F9C1A67AF0D93FFDF
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3130382e3131312e302f32342d3234203d3e203238323730.roa
Signing time:             Tue 09 Apr 2024 23:09:57 +0000
ROA not before:           Tue 09 Apr 2024 23:04:57 +0000
ROA not after:            Tue 08 Apr 2025 23:09:57 +0000
asID:                     28270
IP address blocks:        187.108.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:13:66:9c:ea:30:92:ef:d9:18:e9:8f:9c:1a:67:af:0d:93:ff:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  9 23:04:57 2024 GMT
            Not After : Apr  8 23:09:57 2025 GMT
        Subject: CN=79C5C44213BFCB79031337C236A4A7A992F351C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:67:fb:6b:22:b5:5f:3d:8a:0d:59:e3:ba:
                    0f:7e:32:5b:ba:3f:41:f0:e8:e1:1e:68:61:41:64:
                    88:80:bc:5b:7d:60:f7:f3:b3:c1:e4:3d:bd:52:da:
                    b5:98:4e:f5:83:e4:11:8d:26:74:d3:20:ec:76:08:
                    c7:e4:c5:41:f8:7a:6d:18:68:7f:ee:f5:b5:73:e9:
                    a7:19:31:d0:8a:8c:7e:f0:02:55:34:04:a6:41:6b:
                    a0:30:b4:48:23:22:a1:9f:0c:83:df:30:33:c6:fa:
                    c4:25:a4:33:bd:ed:35:00:81:e7:e1:b4:69:60:9d:
                    91:d6:9a:82:1a:60:b6:d0:12:a0:eb:3d:13:1d:9e:
                    1d:aa:2a:2d:a1:0f:39:77:29:8d:f7:4c:f0:be:bd:
                    38:f0:04:f5:80:99:2a:87:83:49:83:fd:aa:6c:17:
                    1a:07:92:0d:a4:8a:24:54:cb:82:c1:10:00:75:3e:
                    cc:62:d8:79:c2:a3:b6:ab:2e:3d:a2:30:db:d9:54:
                    38:85:5c:0c:40:65:3a:20:63:d5:87:b4:a2:05:5f:
                    29:52:03:77:2d:a2:58:5c:0c:4d:cc:11:be:f5:34:
                    ce:b6:c3:e6:b2:79:2e:22:f0:e7:08:4b:d6:27:d3:
                    29:5e:10:8b:08:3c:e1:f6:01:55:01:a3:f0:e5:a3:
                    60:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C5:C4:42:13:BF:CB:79:03:13:37:C2:36:A4:A7:A9:92:F3:51:C3
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3130382e3131312e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:7b:59:c4:49:90:3a:15:af:3d:34:68:72:2b:30:64:e2:0a:
         ee:cb:84:38:99:59:9a:24:d4:f1:3d:b3:39:f0:fd:9e:0f:93:
         ff:53:15:26:37:75:5d:2f:56:b7:95:07:8b:f5:a4:3b:99:7f:
         86:d5:e1:1a:bb:b2:76:37:e1:46:97:f5:93:e2:51:f5:65:ae:
         a2:95:e7:e9:62:23:80:a8:b5:79:4f:51:4f:b8:96:3e:5c:f3:
         b9:7d:c4:a9:1d:a6:92:00:2d:61:e3:02:32:e5:5d:50:60:da:
         e5:3b:87:6f:0c:63:ac:95:f3:80:01:0d:90:94:d2:ba:56:be:
         d0:8d:e2:78:9e:ee:1e:70:cd:98:6d:45:81:47:c5:74:44:ae:
         a8:6f:be:7c:b7:92:ac:28:da:38:85:ee:2e:84:72:fb:1d:37:
         72:ff:75:27:37:5a:7a:3b:49:4f:1b:81:75:6f:bd:a8:98:fa:
         e9:77:5e:38:73:7e:38:5b:6c:83:5b:1c:91:c3:49:c6:d3:44:
         7d:12:9b:32:b2:bb:fc:03:cb:cf:cf:57:80:35:36:c3:bd:00:
         4e:4d:a7:cc:fc:70:1e:22:29:83:a5:a3:a3:ca:9a:7e:1f:cc:
         84:89:52:cd:d2:66:48:6d:2f:1e:30:91:c2:cf:ae:ad:f6:43:
         13:0a:85:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org