Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa
File:                     3138372e31382e3132382e302f31372d3137203d3e203238323730.roa (raw, json)
Hash identifier:          k9hfahXt4Bj90lXsVKtIKpDIhTyakewYfUERZyZ29wI=
Subject key identifier:   D5:1A:87:15:5D:DF:57:65:3A:BF:18:E3:E8:1B:5E:F8:FA:BC:26:A1
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       0218985362143CF2ED7F710DF1D7E23C15849C00
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:06:59 +0000
ROA not before:           Mon 08 Apr 2024 20:01:59 +0000
ROA not after:            Mon 07 Apr 2025 20:06:59 +0000
asID:                     28270
IP address blocks:        187.18.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:18:98:53:62:14:3c:f2:ed:7f:71:0d:f1:d7:e2:3c:15:84:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:59 2024 GMT
            Not After : Apr  7 20:06:59 2025 GMT
        Subject: CN=D51A87155DDF57653ABF18E3E81B5EF8FABC26A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:52:5d:47:28:49:cb:15:aa:72:3b:7f:33:5c:
                    89:1c:25:0f:eb:f0:b9:97:55:9a:61:8c:29:12:dd:
                    39:94:d0:24:cb:d6:39:41:a4:a4:10:98:d0:eb:ce:
                    4f:31:a0:e0:55:32:08:64:77:7f:40:ad:17:f7:64:
                    73:12:13:99:86:48:3c:67:64:c3:4e:c3:d6:de:0a:
                    79:b4:8d:3c:7a:0d:f5:1c:5b:e9:37:1f:f1:ca:c4:
                    50:6b:f8:27:c0:cf:ad:0c:21:cb:fd:e3:79:b0:c7:
                    c8:69:d9:33:96:85:39:c3:2b:3c:fc:e1:be:ed:6c:
                    7f:ae:0f:cb:bc:2d:f5:b2:14:e0:8d:88:eb:8e:32:
                    9a:e8:7e:93:20:bc:09:43:2a:8d:39:b6:5e:23:e0:
                    78:bf:db:13:ac:95:af:2a:0f:59:a0:71:1d:81:ff:
                    9e:d6:37:fb:f9:da:e1:7c:8c:b5:d5:a5:0e:98:1d:
                    31:9e:ec:c4:af:9d:26:05:59:61:f7:ff:be:18:15:
                    52:5b:d2:7c:4d:df:af:93:52:4c:c6:7f:90:9e:e4:
                    65:9f:d2:49:f0:fc:5e:30:fa:9c:5a:31:1d:85:32:
                    23:9e:94:c9:6b:0a:59:e8:e0:d0:31:64:08:25:49:
                    87:aa:ec:6e:e0:91:70:9c:5b:a8:df:53:be:48:64:
                    7d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1A:87:15:5D:DF:57:65:3A:BF:18:E3:E8:1B:5E:F8:FA:BC:26:A1
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138372e31382e3132382e302f31372d3137203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.18.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b9:14:a1:7e:34:b9:43:ef:f1:61:2c:ea:d1:db:22:26:5a:11:
         c7:3d:7d:11:bf:91:93:48:d7:4c:40:ae:5b:96:11:5c:fb:83:
         7b:23:ac:3e:63:ae:92:d0:ab:e0:4f:b5:8f:7c:cd:c6:a3:8e:
         c3:17:27:21:8d:e2:33:63:3f:46:39:f8:98:fc:ca:29:93:50:
         73:1b:a8:1b:00:09:53:10:be:f5:08:5a:ea:47:b2:14:ea:36:
         60:cf:03:77:77:1e:17:dc:12:cf:46:84:b5:bd:5b:81:b4:f8:
         ac:5f:04:ed:1b:26:fd:0c:52:d0:8f:97:98:fd:ca:2c:e6:5b:
         f5:c6:f8:99:41:02:72:db:b8:47:94:52:a2:39:43:3e:ac:ca:
         5a:9c:fd:4a:47:c0:d6:ad:c0:ce:4d:16:1f:c6:4f:78:3c:95:
         41:78:04:97:08:b6:d7:64:97:67:96:4b:dd:04:66:8c:b0:e7:
         4e:71:f6:0e:92:15:3e:c6:41:bc:7d:7c:4c:65:d1:64:39:41:
         c0:8e:19:44:76:db:0a:31:65:d5:2c:39:da:88:d6:6b:6b:e1:
         0e:2f:de:af:67:ec:4e:f4:7e:1c:07:de:38:d1:90:13:47:5a:
         63:1a:aa:75:ed:2b:38:06:24:4e:93:c0:b8:45:f2:bc:2d:82:
         46:af:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org