Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa
File:                     3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          7RO4HTVT0Ve9UY+7JM4jCKiDntw4DMc73kMXUaaeQEM=
Subject key identifier:   6E:7E:55:1E:83:DE:EB:0B:A8:4E:72:B4:77:F4:29:2F:26:2E:AA:6B
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       3DAF98BEB965A3F240CF396ED359FFB8517325B3
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa
Signing time:             Mon 08 Apr 2024 20:06:52 +0000
ROA not before:           Mon 08 Apr 2024 20:01:52 +0000
ROA not after:            Mon 07 Apr 2025 20:06:52 +0000
asID:                     271724
IP address blocks:        187.110.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:af:98:be:b9:65:a3:f2:40:cf:39:6e:d3:59:ff:b8:51:73:25:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:52 2024 GMT
            Not After : Apr  7 20:06:52 2025 GMT
        Subject: CN=6E7E551E83DEEB0BA84E72B477F4292F262EAA6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:c0:f1:c6:f4:8e:7f:bb:7c:5f:d5:bd:b3:
                    01:38:e2:33:a8:f4:2b:32:26:0b:bb:92:bc:c8:97:
                    53:91:31:01:01:f1:e8:93:27:20:a5:eb:5c:f5:d9:
                    ee:c7:fd:64:88:0c:fa:3f:d2:7e:04:66:42:81:a1:
                    fd:d3:60:c8:9e:9c:dc:ea:4f:8b:85:d2:54:53:db:
                    36:a5:05:f9:c1:24:00:c4:30:7d:fb:d7:ee:ba:c8:
                    82:2f:ef:84:85:cd:92:2e:e9:a8:e6:7b:34:aa:74:
                    87:23:29:ad:27:99:3a:e9:a6:5b:bf:5c:8e:4f:73:
                    07:0f:d7:3b:f5:70:69:44:46:66:69:1e:7f:0b:7a:
                    c1:f4:2f:ea:2c:cc:a3:3f:e5:65:03:4c:ba:0c:39:
                    98:77:d8:25:48:41:7d:27:af:ce:20:7c:7d:68:82:
                    9a:3e:24:39:23:f0:bd:1f:de:ca:5b:91:b8:f8:66:
                    11:12:56:d7:49:04:f4:8f:71:45:21:cb:93:84:b9:
                    61:ef:01:74:b8:a3:5a:d6:a1:3e:92:3d:a5:fb:18:
                    21:d8:32:44:a5:57:c3:91:8d:e9:ea:12:10:52:37:
                    07:51:80:ea:c8:e4:06:a3:79:aa:3f:dc:1c:6b:a1:
                    be:6a:77:1a:b4:2d:35:ec:f2:8c:c3:33:0a:63:d6:
                    6e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7E:55:1E:83:DE:EB:0B:A8:4E:72:B4:77:F4:29:2F:26:2E:AA:6B
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3131302e3230382e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:4d:c8:cc:f5:17:e2:d1:c3:92:ea:ac:1f:5e:27:26:21:fb:
         26:e1:4b:91:65:59:4e:52:58:8a:6a:d2:8f:43:f7:e3:23:55:
         ab:ce:be:82:19:29:fe:e5:ed:b9:12:8d:46:e2:52:fa:06:e9:
         d1:15:7c:47:27:0a:9e:ce:a4:4d:7c:59:02:f6:99:86:9b:c3:
         3c:77:fc:d3:47:2f:73:d4:af:50:46:60:ae:f4:ee:81:8f:91:
         c1:d2:46:3b:a1:52:d3:bd:89:5a:a2:6e:8c:3d:65:2e:ef:1b:
         90:41:13:f9:91:3e:6b:1c:67:05:6c:fa:87:71:51:8a:c6:f8:
         a7:33:55:48:33:65:e4:c0:a2:43:7c:ef:43:47:1a:d9:10:db:
         6e:86:06:cb:da:e6:86:33:0f:d2:26:29:38:3c:66:80:7d:30:
         bb:3e:e7:da:4e:67:18:f2:db:86:e8:3e:89:c6:33:b2:e6:e8:
         3c:c3:ec:a0:20:08:8b:0b:db:99:2d:33:f8:4e:2e:e7:c0:f7:
         70:a1:9d:d0:44:95:d1:73:b9:91:81:57:c0:97:63:6f:03:14:
         3e:d3:7d:e4:e1:64:ac:2c:fd:77:47:2f:48:8f:69:f5:1c:e1:
         41:80:ca:3e:4d:0b:89:51:2a:3e:f0:b4:1a:99:59:c9:2e:ba:
         d9:6d:4c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org