Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233382e3139362e302f32322d3232203d3e203238323130.roa
File:                     3137302e3233382e3139362e302f32322d3232203d3e203238323130.roa (raw, json)
Hash identifier:          NeQ8B5s/HhhbEgnXpnlLdCZbXsooC8NH87YGaBylZHk=
Subject key identifier:   22:69:94:DC:C1:2D:6D:DB:C7:D0:A6:08:18:80:6F:9E:CA:12:F7:77
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       10980E711550316BBD3577211CDDA4C77716F12C
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233382e3139362e302f32322d3232203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:25 +0000
ROA not before:           Wed 28 Feb 2024 13:58:25 +0000
ROA not after:            Wed 26 Feb 2025 14:03:25 +0000
asID:                     28210
IP address blocks:        170.238.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:98:0e:71:15:50:31:6b:bd:35:77:21:1c:dd:a4:c7:77:16:f1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:25 2024 GMT
            Not After : Feb 26 14:03:25 2025 GMT
        Subject: CN=226994DCC12D6DDBC7D0A60818806F9ECA12F777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:6a:fb:13:b5:c2:57:83:f2:ec:38:41:68:
                    76:70:e2:ef:48:df:54:b6:b7:82:ee:cf:57:33:85:
                    10:e7:4e:19:63:49:5d:af:e6:1a:eb:da:66:0b:4b:
                    17:d3:3d:c5:b3:68:74:63:a3:63:20:ee:2b:b4:86:
                    c4:ec:a6:47:40:5c:ff:e4:1c:27:22:0f:ce:30:2a:
                    f2:3c:e2:f9:b4:1f:3c:1b:ad:6f:3b:cf:2a:5c:46:
                    f0:21:e3:10:a4:d4:5d:15:7f:fa:2c:84:54:2d:b2:
                    db:e5:2f:04:68:a1:18:21:7a:b5:74:61:5e:ae:e8:
                    ce:ab:35:03:bd:9d:46:89:9f:96:17:b5:91:79:4f:
                    c1:63:5b:58:cd:c3:1d:36:9a:2d:e9:d5:27:fa:a6:
                    64:40:50:7f:76:a5:55:50:ee:56:fd:e5:81:6b:91:
                    43:31:95:70:88:fe:16:45:a7:d8:08:68:75:26:0b:
                    0c:32:e6:af:e1:72:c5:29:58:e5:7d:f5:5c:1c:02:
                    60:1f:23:22:fb:31:a7:16:69:44:28:43:3c:58:a4:
                    53:7d:6a:55:99:4b:77:c1:2f:ab:7c:8f:a0:c5:69:
                    a3:0b:a4:73:09:94:80:57:4c:f9:93:a7:a5:8b:8d:
                    2c:b8:67:0d:88:95:62:89:55:16:e5:10:a3:98:c3:
                    49:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:69:94:DC:C1:2D:6D:DB:C7:D0:A6:08:18:80:6F:9E:CA:12:F7:77
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233382e3139362e302f32322d3232203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:b2:43:c7:93:79:ae:60:d5:13:4a:ed:ff:4b:32:d2:93:eb:
         12:b2:34:d0:67:41:43:fc:81:e0:65:49:19:2a:2c:dd:e7:25:
         d4:23:f9:4f:ac:f5:b9:36:7e:42:d2:c7:f7:49:33:4b:bc:60:
         6c:cd:15:da:bf:14:d2:af:d4:df:ea:a9:92:9f:70:ee:8f:20:
         dd:30:8d:4d:1e:e0:33:73:06:12:fb:16:0c:53:7d:88:b1:27:
         14:6d:b0:7a:f2:24:e8:9f:95:b2:73:16:99:e2:de:a6:13:83:
         fd:ff:c9:c9:3e:96:29:0b:cd:45:d4:62:1c:52:e3:c8:68:fc:
         1a:2c:1b:1e:34:f6:d7:c2:de:06:1a:1e:76:b9:01:ea:4b:33:
         64:bb:38:0b:52:1e:76:db:9a:be:6b:47:92:58:c9:65:12:0b:
         f5:55:bd:70:a1:b2:1d:76:83:fe:cb:c2:f4:26:a0:a6:bb:c7:
         34:49:12:2f:2e:5d:a3:4c:3b:83:26:49:d7:88:95:da:2b:b0:
         6a:c5:22:19:35:f9:07:da:54:88:a5:e8:ad:51:ba:75:b6:55:
         9a:5b:16:b2:6b:c8:5b:8a:70:92:a4:b4:02:e1:82:ca:f5:a0:
         bb:07:c8:79:1d:51:b7:bb:dd:81:b9:5b:59:4a:57:dd:0e:aa:
         48:11:4a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org