Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3131302e3230382e302f32302d3230203d3e203238323730.roa
File:                     3138372e3131302e3230382e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          SAuoXMdi3qJDYYOoNnlwi3/W8kD8aQFeDrAx13ku1Qo=
Subject key identifier:   DA:6F:71:C0:37:F2:0D:9A:D9:DD:F0:C5:38:9A:4F:17:0B:4D:82:58
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       721E6B3C22617D5F7F0844496F97E078BDB64269
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3131302e3230382e302f32302d3230203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:06:55 +0000
ROA not before:           Mon 08 Apr 2024 20:01:55 +0000
ROA not after:            Mon 07 Apr 2025 20:06:55 +0000
asID:                     28270
IP address blocks:        187.110.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1e:6b:3c:22:61:7d:5f:7f:08:44:49:6f:97:e0:78:bd:b6:42:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:55 2024 GMT
            Not After : Apr  7 20:06:55 2025 GMT
        Subject: CN=DA6F71C037F20D9AD9DDF0C5389A4F170B4D8258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fa:b4:b3:60:03:1d:d7:f0:47:fe:af:38:96:
                    db:75:3a:d3:c3:3e:42:44:f9:ac:d1:f7:5e:4a:67:
                    f2:0d:9e:07:6c:83:b7:4a:8a:74:b1:1c:c0:24:78:
                    d5:59:1d:6b:1a:e7:49:9e:ca:1f:f5:0c:2f:64:82:
                    8d:58:d9:20:c4:8e:42:ea:c2:66:c6:a5:0e:7b:3d:
                    eb:b2:cc:53:c0:07:7c:e1:ea:8b:37:b6:06:04:31:
                    c0:e1:91:c1:1e:fc:31:d3:8e:55:1d:95:19:81:c1:
                    90:06:45:3f:9d:4d:e5:59:c6:2a:41:52:be:db:50:
                    c9:25:33:1d:24:55:2c:69:c9:4b:2b:e8:3f:e2:ae:
                    f2:74:b6:db:fc:1d:c2:82:85:37:25:0c:59:3a:dc:
                    45:57:c7:df:19:26:0a:f9:72:d4:b1:17:fa:8e:c8:
                    59:59:a4:87:fc:89:b7:1b:62:ef:8d:29:ec:a5:41:
                    e3:e9:40:2e:d9:79:40:e2:b2:a1:29:7e:26:21:80:
                    4c:03:c9:f9:f1:cc:dc:88:a3:83:b6:d1:1d:d3:15:
                    2d:f4:9b:e2:2a:2f:05:f6:8f:6d:b3:a6:de:92:73:
                    1a:4e:ee:b8:3d:ba:6f:7b:91:8a:73:da:8b:51:97:
                    b0:f9:0d:c6:f5:83:ac:27:1e:5d:18:b7:34:31:e7:
                    b8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6F:71:C0:37:F2:0D:9A:D9:DD:F0:C5:38:9A:4F:17:0B:4D:82:58
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3131302e3230382e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:bc:20:48:12:19:41:92:5c:77:60:3f:b7:3d:42:3b:f8:6f:
         0f:ec:a2:57:2a:80:50:64:90:8c:fe:9b:66:ac:64:5b:42:80:
         f2:43:63:fe:9a:b8:54:97:a7:93:11:8f:f6:59:cf:01:93:d4:
         56:a9:35:44:50:6d:e0:a7:a4:8d:73:bd:e1:53:75:bd:37:e7:
         c3:86:d6:74:c4:dd:fb:d9:90:53:9c:c5:e2:7f:92:c4:b0:52:
         f0:c2:84:cc:68:b7:cd:b2:aa:ea:50:8c:73:a4:07:13:4c:15:
         03:3e:64:7d:c6:23:79:1a:c2:8d:2a:f1:4b:38:b1:9d:b2:14:
         1e:98:23:59:34:b7:c0:6c:d9:22:c5:eb:43:b1:df:5c:6a:18:
         75:4f:9f:07:28:fc:86:75:29:b9:e8:09:95:c7:7a:9c:49:3b:
         7d:cd:bc:f1:d4:6d:b9:87:97:5e:32:12:0b:be:f8:a3:72:31:
         27:90:19:9d:e6:a9:4a:3d:a4:a9:d3:9b:d7:ea:9f:a1:8a:b2:
         ad:f5:17:23:97:64:f1:77:f2:55:ba:77:f9:d3:23:78:26:6f:
         37:cf:81:e0:62:46:83:51:a0:c7:e1:3e:a2:d5:59:e0:48:c6:
         99:6d:0c:9a:9e:d5:fd:26:13:06:4d:01:69:ad:a7:f1:b7:c1:
         a8:3e:b6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org