Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa
File:                     3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          9zCTGlLWGshXKFw9fN/NzHjMgEkrZDIWU36/itdJwVc=
Subject key identifier:   8C:81:A8:F6:EE:7D:A1:48:3A:20:BB:BC:9C:A7:D8:48:E0:69:5F:B0
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       5E0DC194D3B19277172820C60560BB7616B781E3
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa
Signing time:             Mon 08 Apr 2024 20:06:56 +0000
ROA not before:           Mon 08 Apr 2024 20:01:56 +0000
ROA not after:            Mon 07 Apr 2025 20:06:56 +0000
asID:                     271724
IP address blocks:        189.50.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:0d:c1:94:d3:b1:92:77:17:28:20:c6:05:60:bb:76:16:b7:81:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:56 2024 GMT
            Not After : Apr  7 20:06:56 2025 GMT
        Subject: CN=8C81A8F6EE7DA1483A20BBBC9CA7D848E0695FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:81:57:42:d3:71:61:dc:6f:d0:41:3c:15:bf:
                    94:3e:9e:9b:78:ea:c5:76:1a:e7:11:0e:c4:c4:dc:
                    48:fa:fe:43:bd:cc:2f:9a:22:9b:d2:e5:75:cc:60:
                    2c:91:31:d6:4a:74:04:8f:3a:95:3a:19:87:f0:de:
                    18:17:68:f7:cd:7a:4b:79:6d:8d:d7:c2:6e:f8:5d:
                    a1:8d:45:a5:8f:43:45:62:17:43:a9:81:79:52:4d:
                    e9:d6:48:61:73:f5:2f:bc:45:dd:49:8e:7e:60:ac:
                    30:42:62:08:08:b3:80:39:77:a0:73:8d:3f:e4:eb:
                    3c:92:8d:34:ef:89:e7:71:b0:0b:a8:db:c8:39:53:
                    ad:53:99:0c:48:cf:b8:ce:34:7f:e3:d9:df:cd:af:
                    25:18:4b:b9:15:60:89:65:66:e7:24:2d:c3:f5:c0:
                    d6:2d:25:c5:c4:ad:0c:20:7c:ec:b1:45:6c:33:39:
                    5a:2a:51:03:89:2b:18:04:2d:51:8c:78:69:c4:80:
                    53:e4:b4:06:e3:02:bb:fd:75:c3:3e:04:e2:88:35:
                    da:99:d1:c0:5a:fb:39:62:9f:d6:e4:40:be:46:69:
                    eb:00:8d:ce:75:bc:89:9d:0d:62:e3:59:37:9e:11:
                    31:d3:56:a5:1b:fe:93:89:2c:04:cd:2b:8f:18:a6:
                    b2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:81:A8:F6:EE:7D:A1:48:3A:20:BB:BC:9C:A7:D8:48:E0:69:5F:B0
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3138392e35302e3134342e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:45:6c:e5:18:1c:de:e8:7f:eb:11:e1:51:1a:99:33:27:ce:
         0e:6c:89:ae:1d:96:6b:3d:33:9b:6d:13:da:91:e0:54:1e:2b:
         b3:d1:af:c5:22:32:9f:ba:29:22:44:6a:0e:ec:56:aa:4f:65:
         97:14:e8:ca:e8:87:b3:82:c6:5a:8f:eb:a2:a0:1a:d8:1c:64:
         99:4c:8c:58:5d:72:3e:2e:84:b8:57:79:65:1d:12:1c:0c:dd:
         03:46:cb:60:ed:c2:cd:97:62:34:58:f7:9b:5d:dc:dc:a0:9a:
         1c:8c:3e:ae:e8:34:db:64:4a:59:eb:45:83:df:f9:36:67:8a:
         8c:e9:f5:10:61:0f:97:3b:dc:9d:0c:75:d9:11:37:51:59:50:
         63:27:90:2f:b1:4b:84:8e:e8:fe:66:02:c3:74:4d:9e:99:04:
         f0:c8:35:c0:86:a0:38:9d:1c:bb:0d:e9:77:bb:29:23:15:10:
         17:38:7c:41:5f:0d:eb:fc:66:ce:22:b1:db:39:5f:ef:87:e8:
         ea:5f:fc:69:94:18:37:d7:82:50:c9:73:3a:5b:a5:70:c1:d3:
         42:21:15:32:fe:0a:90:63:48:fd:cb:8b:14:a0:12:f5:6c:ac:
         41:ff:48:ac:57:35:d8:74:3d:d4:07:af:2f:37:3e:6c:4c:3a:
         5b:72:7d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org