Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3230312e3134392e3132302e302f32322d3232203d3e203238323730.roa
File:                     3230312e3134392e3132302e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          rzEKvTx57ic5+/NJcOknrT+CMkOxu+pYcJvQDP54wIY=
Subject key identifier:   FF:21:33:62:6E:C9:94:E8:4B:75:87:BA:67:39:7B:88:5A:42:AF:C1
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       5FB9A3553F0C4713DC8D9055AB586AAED5A92F3F
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3230312e3134392e3132302e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:06:52 +0000
ROA not before:           Mon 08 Apr 2024 20:01:52 +0000
ROA not after:            Mon 07 Apr 2025 20:06:52 +0000
asID:                     28270
IP address blocks:        201.149.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:b9:a3:55:3f:0c:47:13:dc:8d:90:55:ab:58:6a:ae:d5:a9:2f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:52 2024 GMT
            Not After : Apr  7 20:06:52 2025 GMT
        Subject: CN=FF2133626EC994E84B7587BA67397B885A42AFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:69:06:f8:6a:c0:25:7f:ca:c6:80:31:58:
                    aa:de:37:e4:e6:e6:c7:75:0b:03:9b:6c:5c:74:5c:
                    1a:fe:d6:95:3b:bb:89:aa:65:9b:07:6a:38:d9:71:
                    d9:e5:85:d8:0b:14:23:5f:bb:01:96:77:fd:e9:9f:
                    89:16:f0:32:d8:5d:88:d5:ad:54:5c:e6:f1:67:60:
                    a2:a7:64:85:f2:ed:1b:39:76:d2:16:23:48:be:82:
                    4b:df:a5:ce:11:e6:1b:24:d0:57:e4:5e:f6:bc:c2:
                    be:77:b7:21:b4:85:c0:63:b7:70:52:c1:29:3e:b4:
                    17:cb:5e:e4:ea:b1:af:82:2e:62:48:29:81:2a:e8:
                    79:aa:1b:03:53:b1:f2:92:ce:a3:80:27:df:6c:a4:
                    80:f2:91:85:54:34:ef:4e:bd:0c:f7:a6:6f:84:7d:
                    7e:36:c1:1a:02:ab:69:ad:e1:8d:ef:40:53:8d:06:
                    9d:51:54:2f:81:0c:fa:61:19:34:b5:5f:fa:f6:81:
                    86:3a:c5:b2:04:85:ab:5d:68:fd:57:81:dc:85:83:
                    dc:fd:ad:6e:07:98:cb:45:45:b8:4d:ef:a8:15:10:
                    28:ac:5d:0b:e3:3b:20:9c:f6:4c:03:d7:63:cf:d0:
                    b9:f4:16:49:35:87:da:a1:f4:31:f6:55:f1:29:b6:
                    f5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:21:33:62:6E:C9:94:E8:4B:75:87:BA:67:39:7B:88:5A:42:AF:C1
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3230312e3134392e3132302e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.149.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:d3:28:12:41:4a:e7:4a:c6:b5:78:8c:2d:5f:92:f2:f0:c7:
         c4:7c:0e:23:43:3d:ef:8e:85:5b:35:89:69:d1:2d:0d:3b:e9:
         b0:76:cc:ec:e1:03:43:0d:b0:6c:68:c5:49:d1:d0:64:9a:e9:
         28:9e:ef:39:e0:1d:d6:24:d8:90:b8:30:28:20:c6:a1:e4:b0:
         46:22:b6:f0:16:8c:17:1d:3e:39:b0:f5:26:4a:52:41:74:26:
         bb:31:58:88:96:d3:2e:9d:98:98:b0:aa:99:36:73:92:41:08:
         fd:97:57:6a:7c:5e:d6:dc:05:d1:b5:7e:a9:a5:cd:a2:d9:aa:
         52:60:e4:f9:b1:a7:58:5b:eb:ae:14:e0:16:fd:25:f3:d2:c6:
         9b:fc:0f:d3:47:9a:9f:49:dc:f4:a8:39:59:32:fa:8a:00:b8:
         8f:cd:6f:2c:2b:e6:8c:76:74:83:31:46:f6:00:ad:82:bf:b4:
         fa:ba:04:95:08:6d:f7:9f:ad:ba:62:0f:ba:b4:22:42:9d:6b:
         92:8c:70:14:fd:91:32:cc:13:da:7e:b7:5c:00:5f:9e:65:b0:
         58:e1:8b:9a:4c:6c:aa:2b:54:07:55:2b:04:cc:ef:01:cc:cd:
         f8:d3:30:b5:4c:22:ad:d6:7f:4a:69:da:87:17:70:f5:a5:d8:
         d8:18:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org