Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3130382e39362e302f32302d3230203d3e203238323730.roa
File:                     3138372e3130382e39362e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          ttT1lCCaGpkoXKsdQXBj2Iro4e8qGn0BZicEANI8LO0=
Subject key identifier:   2C:0C:1B:5E:67:41:8A:94:EF:F0:C2:F1:FE:0B:8C:0C:84:AE:C3:CE
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       1C182EEA18A8F158B2EFFF466B6099337E2C5138
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3130382e39362e302f32302d3230203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:07:00 +0000
ROA not before:           Mon 08 Apr 2024 20:02:00 +0000
ROA not after:            Mon 07 Apr 2025 20:07:00 +0000
asID:                     28270
IP address blocks:        187.108.96.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:18:2e:ea:18:a8:f1:58:b2:ef:ff:46:6b:60:99:33:7e:2c:51:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:00 2024 GMT
            Not After : Apr  7 20:07:00 2025 GMT
        Subject: CN=2C0C1B5E67418A94EFF0C2F1FE0B8C0C84AEC3CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:eb:93:c2:f7:e3:bc:f5:93:57:b4:e0:a9:ef:
                    b3:39:90:a9:4f:93:30:c9:94:4a:31:e6:cb:7e:fd:
                    1e:55:6d:78:4a:8e:fd:16:b6:a2:3d:b8:ba:53:70:
                    35:13:bf:c1:0a:1d:90:e0:16:a0:79:b8:50:6d:d7:
                    d5:cb:df:69:e0:85:37:48:95:67:fb:cb:cc:4c:6b:
                    de:be:97:96:27:6b:7c:27:fc:56:e8:cd:bd:c5:0d:
                    43:12:38:03:52:aa:6d:fb:97:8c:68:ab:d7:5e:e6:
                    77:3d:10:f0:d6:76:ab:bf:3d:22:b0:c4:33:4d:e2:
                    e1:1d:fa:fd:c3:72:41:3e:94:dc:89:27:de:b0:55:
                    6e:b6:4e:2d:26:07:4d:7c:4e:c6:e8:87:8e:95:cf:
                    f4:25:83:ab:38:8e:c9:37:80:50:d7:ab:7e:51:c5:
                    a3:56:e7:7e:2b:44:db:ee:e0:24:e6:2e:ef:48:42:
                    65:86:12:24:62:98:83:d2:05:d5:79:50:85:7f:6f:
                    5b:0e:dd:af:4d:9b:30:d9:0a:26:a2:9f:da:9d:ea:
                    07:f4:8a:f7:b9:84:d7:24:72:2a:05:e4:99:06:40:
                    95:3a:19:a0:1c:2b:fd:b9:91:2e:ff:8a:27:1d:88:
                    db:84:2a:f9:b3:d6:b0:cc:83:3b:c5:fc:24:99:35:
                    0f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0C:1B:5E:67:41:8A:94:EF:F0:C2:F1:FE:0B:8C:0C:84:AE:C3:CE
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3130382e39362e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:ad:80:4f:01:6a:f3:10:dc:63:d7:06:67:4c:f8:50:f5:01:
         4d:82:03:6a:9e:9b:9b:64:43:73:f2:97:5a:17:fb:22:c7:83:
         a1:6e:1b:2b:00:d0:33:c5:f6:34:b0:2a:6a:c3:07:47:05:39:
         7b:e5:d9:46:e2:13:a4:92:71:1d:12:2b:c4:ad:8d:85:fa:7c:
         4f:65:16:8a:ad:0d:27:f0:63:8c:0a:62:f5:c9:24:79:16:ad:
         92:42:1b:68:39:b9:c0:6c:e1:a1:5d:81:11:15:14:20:7c:b6:
         57:90:d3:a7:9d:ce:30:28:30:85:57:31:6c:f6:25:ec:1f:46:
         d8:f8:48:67:a7:68:9c:bf:50:f3:6e:16:fc:34:b7:29:27:ad:
         c8:4f:cb:6b:7c:06:60:ce:92:b3:ef:fa:33:46:5d:ce:23:ce:
         a8:0b:28:34:83:21:33:e5:ac:c3:5c:42:43:90:30:3b:9e:09:
         c9:63:22:1d:74:2b:35:07:30:af:4c:d5:51:0c:3e:86:2c:e2:
         0b:b7:f5:c3:8a:d0:0a:ec:71:44:1e:dc:c4:bf:7e:26:68:e7:
         72:47:50:22:c7:bb:da:63:0f:bf:90:0d:78:76:9f:69:ca:97:
         2e:cf:b4:93:fd:88:40:d0:29:2e:b3:f3:e0:67:a8:68:2f:66:
         44:5a:de:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org