Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa
File:                     3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa (raw, json)
Hash identifier:          m6BJ55hvlmSer/mY83TG4z+i8O/ugy6GcSmKEFTeifc=
Subject key identifier:   FC:89:03:AC:1C:B0:A7:65:55:4D:50:15:61:50:E6:58:71:24:84:75
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       0B7B7CCCB1C6DE7AD10E1A43167CDFA7AA738128
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa
Signing time:             Mon 08 Apr 2024 20:06:49 +0000
ROA not before:           Mon 08 Apr 2024 20:01:49 +0000
ROA not after:            Mon 07 Apr 2025 20:06:49 +0000
asID:                     28220
IP address blocks:        187.110.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:7b:7c:cc:b1:c6:de:7a:d1:0e:1a:43:16:7c:df:a7:aa:73:81:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:49 2024 GMT
            Not After : Apr  7 20:06:49 2025 GMT
        Subject: CN=FC8903AC1CB0A765554D50156150E65871248475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:82:24:70:c4:08:31:1e:0c:25:7a:cb:91:73:
                    21:e5:50:09:58:c3:a7:65:a4:d7:47:e0:7e:e4:7b:
                    f6:2e:71:1b:0b:74:a9:80:10:dc:b2:ae:7d:9e:45:
                    29:85:21:83:6e:d7:41:bc:50:63:64:30:7b:c2:cd:
                    0a:9d:17:87:96:9e:f4:9f:ea:dd:9c:67:b3:fc:f5:
                    36:72:99:b0:bf:78:a1:53:d7:2c:6f:4e:bd:6a:cf:
                    b5:7f:57:93:2b:dc:80:64:e6:71:82:86:b7:35:46:
                    b8:60:41:99:21:54:2f:fb:ea:85:40:87:d1:af:a6:
                    eb:f6:d2:42:82:29:08:6f:df:e9:15:b1:b9:82:dd:
                    53:a5:98:be:26:8e:1a:38:66:3b:55:cb:95:cf:4f:
                    ba:02:cf:07:9f:11:61:d7:3c:9d:42:fd:d7:dc:6c:
                    c8:05:89:e3:9f:67:ef:b5:48:36:6f:97:50:84:f3:
                    c0:10:30:d9:b8:c9:68:82:cf:45:d9:3b:47:7b:05:
                    6a:64:9f:83:8f:24:95:da:06:b2:fc:15:ef:bc:6a:
                    63:04:20:9e:15:00:aa:0d:aa:70:94:99:b4:19:df:
                    ee:5a:ba:33:eb:76:1c:3e:55:79:20:c6:11:ce:4f:
                    87:65:2f:31:db:9d:06:f0:db:b6:3d:23:7f:b4:7c:
                    18:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:89:03:AC:1C:B0:A7:65:55:4D:50:15:61:50:E6:58:71:24:84:75
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e3131302e3230382e302f32342d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:e8:a5:2d:f5:11:5d:97:a1:28:c1:8a:bb:a2:ed:45:e8:c5:
         0f:2b:88:24:08:ea:4b:06:90:13:6f:8b:d7:19:bd:ec:74:c4:
         aa:37:64:39:66:06:85:09:0a:33:46:21:01:53:55:8c:ef:4e:
         a3:7a:7f:4f:3a:b5:88:01:f5:b8:05:f0:72:c9:a2:14:e6:c9:
         ec:b8:a5:b3:f9:7f:73:4d:49:53:c2:05:99:3e:88:74:bf:e0:
         76:a3:85:c9:a1:00:18:0b:ff:a7:8e:79:34:ac:d4:63:48:9d:
         8a:ad:a8:cc:92:b7:7e:e0:89:dd:9f:e7:f8:1c:d6:6b:9a:d5:
         c9:81:65:99:6a:e7:38:6b:aa:a2:f5:58:a0:df:f4:c4:c5:85:
         86:7e:81:4b:af:2f:74:59:c8:98:81:4d:46:eb:7d:bd:9f:0f:
         7f:95:4e:da:45:51:f7:6e:b6:d9:ad:5e:4a:dc:c1:57:94:45:
         48:cb:e4:e9:c4:27:f7:c3:80:6c:16:2b:cc:20:1c:cf:5e:50:
         38:ac:5a:9f:e7:f3:54:1a:ba:f3:bf:b4:bb:5f:c6:54:95:93:
         b7:00:67:5b:ea:8a:f9:03:70:69:a2:05:b7:db:96:0a:4a:5f:
         9c:c4:24:07:e4:d2:35:25:ce:6d:a9:90:3d:90:a1:f5:0b:f1:
         a6:72:62:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org