Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233382e3139362e302f32342d3234203d3e203238323130.roa
File:                     3137302e3233382e3139362e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          /1XQJBsPFAdWGEm9vRz+Bo+IHkxoI+0Z20/ULLjy4xE=
Subject key identifier:   E3:87:08:63:1C:3B:67:CB:57:B0:52:96:90:EE:6C:DF:09:B3:F8:B2
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       5A7C36BB36D1DB9BB7451060E09FB89D3A933B43
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233382e3139362e302f32342d3234203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:20 +0000
ROA not before:           Wed 28 Feb 2024 13:58:20 +0000
ROA not after:            Wed 26 Feb 2025 14:03:20 +0000
asID:                     28210
IP address blocks:        170.238.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7c:36:bb:36:d1:db:9b:b7:45:10:60:e0:9f:b8:9d:3a:93:3b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:20 2024 GMT
            Not After : Feb 26 14:03:20 2025 GMT
        Subject: CN=E38708631C3B67CB57B0529690EE6CDF09B3F8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:83:c3:d4:f9:2a:55:09:37:0f:7c:2b:4f:5c:
                    04:a9:b4:34:52:d8:4f:da:48:ab:ed:d5:e9:1d:8d:
                    b2:39:84:54:4f:74:5b:01:7e:2e:f0:a6:43:6e:f2:
                    54:42:c4:b4:1d:8d:e9:31:36:59:bc:79:5b:75:9a:
                    f0:7b:86:13:5f:29:62:20:2c:4e:8e:bd:88:af:8c:
                    cb:8b:87:9b:2a:22:56:b2:a3:f5:6d:bb:cf:79:58:
                    a3:87:1b:a6:61:50:3f:71:8f:ef:4a:92:1b:4e:ff:
                    15:b1:ed:c9:f8:f7:c3:7a:56:50:50:37:ce:6f:e6:
                    f6:00:05:45:ab:11:e7:34:26:fd:e1:25:61:c8:38:
                    7f:ac:d1:f2:a4:d5:64:c7:a7:a5:87:8b:29:ad:e4:
                    00:2c:52:05:7c:40:1d:fd:8a:b0:53:7e:78:80:8e:
                    d1:03:61:9c:12:81:7b:08:9f:e2:b1:ab:ab:66:33:
                    93:78:c6:47:ba:63:d7:f0:69:82:7f:4c:a3:f2:b7:
                    d7:0e:5d:76:f5:78:24:bf:30:21:e7:ff:ab:96:ca:
                    37:0d:0c:22:4c:75:22:cf:13:f2:af:d3:7d:d1:73:
                    31:df:af:ee:ab:a1:09:68:65:6d:e8:06:b0:e0:46:
                    42:71:72:68:cf:8d:13:7d:78:55:ad:af:fb:40:45:
                    86:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:87:08:63:1C:3B:67:CB:57:B0:52:96:90:EE:6C:DF:09:B3:F8:B2
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233382e3139362e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:d1:c9:29:13:8c:75:ec:e9:46:8f:2d:0f:16:8d:57:4b:1c:
         6e:39:ce:41:76:1f:fc:00:40:15:9b:8f:61:62:67:3c:a1:40:
         fb:ec:2e:69:16:3c:df:8e:92:59:81:3d:03:12:cf:e8:89:80:
         85:50:ae:76:8d:dd:1c:e8:76:24:ef:fa:97:44:b7:90:b5:75:
         4e:43:59:32:5b:16:2c:ba:95:39:2a:4d:21:e9:31:27:e4:56:
         a2:43:c8:09:ef:14:e7:01:90:39:31:24:f2:e6:71:14:70:df:
         bc:cc:e3:7d:5a:84:11:df:0c:2b:1e:20:d5:72:12:e9:18:17:
         2c:32:3b:cb:f6:e9:39:be:e0:af:b5:5f:49:9d:77:c6:95:a7:
         01:cb:ba:07:bf:1f:2d:bb:d1:20:07:3f:0a:cf:d8:68:dd:2a:
         a2:6b:c1:54:70:cc:01:49:d5:3e:70:d4:6c:c5:44:b2:52:d4:
         2f:b6:75:92:83:c1:8c:34:f4:43:e9:25:38:02:36:3e:6f:4e:
         a6:88:78:ae:d7:72:9e:87:97:8c:0c:3b:85:08:fa:bf:55:a5:
         79:9b:dc:75:77:2b:d9:5c:7b:75:24:b6:07:e5:1b:77:6b:52:
         8f:af:57:86:e0:6e:a8:3c:96:24:16:97:03:d3:5f:a2:ac:b9:
         ca:b2:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org