Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa
File:                     3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa (raw, json)
Hash identifier:          bCja1qBEVc6s/frR+CxRYklRTCige9esWIbLUNrwmo4=
Subject key identifier:   23:A7:72:09:D6:79:76:6F:AA:6B:FF:C1:CF:FD:1E:56:F2:7A:36:E0
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       4C08A2D63CE3FB309B259FA2ED58015FCBE3C6E7
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa
Signing time:             Tue 09 Apr 2024 23:09:56 +0000
ROA not before:           Tue 09 Apr 2024 23:04:56 +0000
ROA not after:            Tue 08 Apr 2025 23:09:56 +0000
asID:                     28220
IP address blocks:        187.110.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:08:a2:d6:3c:e3:fb:30:9b:25:9f:a2:ed:58:01:5f:cb:e3:c6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  9 23:04:56 2024 GMT
            Not After : Apr  8 23:09:56 2025 GMT
        Subject: CN=23A77209D679766FAA6BFFC1CFFD1E56F27A36E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5b:e4:7d:cb:6c:ef:e6:51:40:03:9e:02:ae:
                    4d:e1:b4:09:9b:75:9e:49:08:ba:91:65:ed:c6:aa:
                    7b:ad:7e:52:94:0e:bd:f0:ed:87:f8:bb:29:6b:65:
                    ea:a5:a8:5e:57:12:89:6a:3f:a0:0a:d5:26:a2:b0:
                    0d:93:6c:41:b9:f0:76:ab:91:fe:af:ed:1c:be:7b:
                    fa:2b:45:e6:d3:9b:45:88:d8:e6:48:dd:78:85:ed:
                    09:44:65:c4:96:0a:f5:bc:0a:a1:30:ec:85:9e:59:
                    59:33:21:30:cc:2b:e8:2a:4b:3f:94:a9:2e:43:14:
                    a9:5c:5e:95:f0:65:ba:f5:29:85:95:f1:2e:30:34:
                    8c:b8:5e:d5:ba:0f:b8:c6:71:2e:a6:11:ea:b8:e8:
                    30:7d:ff:49:f5:51:4d:38:c0:97:4b:2d:4f:15:88:
                    e2:47:6d:d8:04:d0:a2:76:59:ca:2b:e4:a7:40:66:
                    c5:c8:37:86:22:b7:a7:82:41:fd:57:5d:9b:24:ea:
                    32:71:23:ea:0d:4c:65:dc:6d:14:80:5c:6f:75:e4:
                    96:5c:85:fc:ae:95:a1:20:5b:5c:a9:84:46:ea:71:
                    f1:5a:79:02:be:e2:f4:1a:f9:d3:ea:aa:9d:7c:4c:
                    a3:4a:f2:80:08:77:d1:fb:59:f9:97:b7:60:3e:21:
                    21:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A7:72:09:D6:79:76:6F:AA:6B:FF:C1:CF:FD:1E:56:F2:7A:36:E0
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3131302e3230382e302f32302d3230203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:80:ba:b4:6d:ca:bf:2f:ef:b0:b2:51:b0:b9:48:04:8c:c1:
         54:be:65:f8:0c:7a:f7:67:72:a0:bd:40:7e:14:95:a4:e7:a7:
         8b:5d:fe:f2:10:f5:bf:99:83:3c:da:e4:84:1d:96:3a:16:36:
         32:a0:5c:42:4f:6e:b8:85:5d:12:ae:73:38:08:aa:05:7b:ff:
         66:65:e3:9e:a4:5d:a8:84:35:41:5e:f7:32:c1:e0:38:e8:3b:
         1d:d0:9a:5e:f3:91:d7:d4:6c:8b:01:27:a4:39:c3:2d:bc:71:
         66:d4:78:72:ed:a6:5e:ab:a3:69:e8:d1:19:4f:36:01:5f:0d:
         e4:47:dd:52:f1:e4:0f:84:e1:e9:00:87:92:89:53:e4:68:42:
         99:ec:fb:8c:f8:34:c3:4b:3d:f3:2c:ff:63:33:b6:64:7f:eb:
         88:5a:72:e9:c1:b4:37:3b:01:5f:b0:67:c8:38:67:e6:50:f1:
         db:2f:6b:64:08:02:69:4e:78:c9:0d:e9:15:a1:41:6d:2a:f1:
         2d:8d:73:ed:64:35:75:5f:ca:3b:e9:bb:49:88:fd:4c:90:91:
         83:b6:2c:3f:71:62:3c:ed:40:b4:f1:90:bf:6b:b0:fd:f8:42:
         7b:3d:58:7a:3d:9b:a9:4d:2b:e4:8e:47:57:97:8c:12:be:03:
         11:75:e2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org