Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233382e3139382e302f32342d3234203d3e203238323130.roa
File:                     3137302e3233382e3139382e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          dhA9iYb/fuurDM3CxaGHMVWvbV2xFYmT3Q3/rQAN8r0=
Subject key identifier:   44:96:79:20:35:5C:88:24:10:01:50:F9:F6:B1:02:D7:83:A5:AC:0F
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       71D0FEFF19DBE76A1AF96F9FACE403CA36140289
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233382e3139382e302f32342d3234203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:25 +0000
ROA not before:           Wed 28 Feb 2024 13:58:25 +0000
ROA not after:            Wed 26 Feb 2025 14:03:25 +0000
asID:                     28210
IP address blocks:        170.238.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d0:fe:ff:19:db:e7:6a:1a:f9:6f:9f:ac:e4:03:ca:36:14:02:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:25 2024 GMT
            Not After : Feb 26 14:03:25 2025 GMT
        Subject: CN=44967920355C8824100150F9F6B102D783A5AC0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e8:e3:4e:2b:0b:50:43:e3:16:6d:65:07:3e:
                    5b:76:a1:c7:26:c0:11:7e:2c:ca:23:5d:0b:7b:84:
                    2e:b5:87:1d:82:61:07:92:1f:fd:df:51:67:1c:b8:
                    33:f5:e4:d7:61:dd:53:82:71:8f:9f:23:1c:a0:52:
                    46:a7:79:8a:30:ab:80:88:47:6b:c3:e7:14:8b:af:
                    0e:00:cf:12:3b:9a:89:46:10:a3:28:4c:71:a5:da:
                    93:96:36:d4:36:3e:91:5f:9d:61:0c:9c:7c:8f:d8:
                    fb:a2:e3:50:c1:bd:40:e4:a2:ce:8b:ce:0f:5c:cb:
                    a7:cc:fc:7c:94:e5:0d:89:f9:86:03:84:0f:11:aa:
                    94:d2:a2:61:96:58:34:7a:a2:10:f9:da:50:23:fb:
                    8e:6b:75:51:5e:a3:37:e7:e2:13:2f:79:05:00:60:
                    4f:fb:52:38:f2:39:d0:9a:71:84:fa:5c:be:f6:39:
                    a8:fb:eb:76:ff:eb:cf:b0:a7:2b:ae:07:01:de:06:
                    37:da:63:7c:a7:be:d7:c6:1c:71:53:bc:00:77:ff:
                    09:59:ca:7e:54:3d:cd:75:28:3f:45:dd:4c:ce:7d:
                    7d:cc:1b:c2:12:18:f1:5f:82:63:20:77:4d:cb:97:
                    24:ff:7b:6a:9b:30:21:02:c6:35:50:76:ef:74:bb:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:96:79:20:35:5C:88:24:10:01:50:F9:F6:B1:02:D7:83:A5:AC:0F
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137302e3233382e3139382e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:3b:7c:19:c1:b3:4d:32:7d:ab:fa:67:9d:bd:85:c8:55:a4:
         00:fc:83:c2:8c:b4:0d:c8:e2:6c:8f:08:26:6e:a0:60:c8:d7:
         aa:93:b1:e9:4e:3c:d2:4d:71:14:4d:60:97:ff:d0:8d:96:c5:
         04:80:3a:61:a9:70:e3:c0:78:26:ea:fb:f2:68:a0:5a:a3:9d:
         c2:b3:0a:5f:17:94:d8:68:95:3a:67:0e:db:13:05:e1:a5:d7:
         49:d6:72:ff:53:6f:ac:11:fc:b7:56:12:b1:03:a6:58:9f:26:
         64:ca:15:3c:8f:70:d6:e5:9a:87:fc:12:7b:63:6f:08:86:2f:
         93:6a:38:23:59:23:2b:bf:69:4c:88:87:57:3c:04:78:53:8f:
         14:8c:2a:77:5e:e2:e6:a4:c8:1a:85:f9:59:2a:04:19:0e:2f:
         f1:61:bc:2f:ee:18:81:2e:5b:2e:08:31:ad:52:7e:13:5d:15:
         a9:71:b7:df:f1:ec:d3:e5:5d:d2:2f:f2:61:46:66:55:9c:42:
         44:48:b8:e0:d0:e6:8a:d1:ed:eb:4f:e0:c4:05:d6:51:03:16:
         7c:99:8a:c3:1d:a1:9b:6d:7c:b3:cb:f4:c1:42:a3:ef:9a:02:
         37:16:72:1f:51:07:27:25:5d:61:21:9a:22:f2:96:82:c7:90:
         9e:a1:22:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org