Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137392e3139312e3139322e302f31392d3139203d3e203238323130.roa
File:                     3137392e3139312e3139322e302f31392d3139203d3e203238323130.roa (raw, json)
Hash identifier:          /rOMssFKutlRGPHeClrYMmfDsjtzw4Wz+MLVGH32Xfc=
Subject key identifier:   2D:58:E5:9A:84:F4:16:8A:CD:E0:46:BA:A7:90:19:10:EF:8C:91:2A
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       5D75AAC3E977F2F45EF7DEBBADC42A924009826A
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137392e3139312e3139322e302f31392d3139203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:19 +0000
ROA not before:           Wed 28 Feb 2024 13:58:19 +0000
ROA not after:            Wed 26 Feb 2025 14:03:19 +0000
asID:                     28210
IP address blocks:        179.191.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:75:aa:c3:e9:77:f2:f4:5e:f7:de:bb:ad:c4:2a:92:40:09:82:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:19 2024 GMT
            Not After : Feb 26 14:03:19 2025 GMT
        Subject: CN=2D58E59A84F4168ACDE046BAA7901910EF8C912A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:70:5e:14:3a:6d:f7:70:95:2a:2d:f1:c8:39:
                    8b:f4:46:e3:5f:2b:01:f9:3a:a1:72:02:fc:4f:f8:
                    b2:ef:fa:c0:c2:c4:af:14:60:c5:b7:e2:9c:cb:ad:
                    40:1b:ce:66:26:3c:d2:f6:62:71:3a:38:e9:70:dc:
                    e2:be:44:b5:3a:e5:d6:c1:7f:b8:3c:42:be:9a:42:
                    be:64:1a:26:b4:65:14:2e:88:ab:83:97:12:c2:46:
                    70:d5:35:49:09:e7:07:ea:ab:fe:ad:26:e4:fc:d1:
                    f8:99:76:1a:fd:b4:a5:6e:be:30:09:3a:b1:85:27:
                    ff:78:6b:98:f6:db:fc:a5:23:d3:8b:e2:a2:86:d5:
                    48:5d:b0:27:5b:d9:73:82:ce:f6:9d:0d:6a:e5:cf:
                    dd:52:1a:46:7f:c6:90:78:f5:9d:aa:5a:ec:39:95:
                    a0:86:65:cb:bb:8b:7e:5c:b0:03:91:d9:7a:5d:c3:
                    ae:a3:ef:7d:db:b0:0d:52:72:61:b8:cf:1e:4e:fc:
                    94:2d:45:3e:3b:89:b0:a2:73:42:0d:39:09:66:31:
                    64:79:5a:d7:62:ab:4b:7f:0b:97:98:23:d1:55:fc:
                    cc:09:66:bf:52:d9:43:b7:72:fc:65:27:f0:19:b6:
                    f5:10:12:17:b0:c4:27:26:3a:80:6e:6c:93:fb:c3:
                    ea:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:58:E5:9A:84:F4:16:8A:CD:E0:46:BA:A7:90:19:10:EF:8C:91:2A
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3137392e3139312e3139322e302f31392d3139203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:90:87:0f:93:19:35:18:f0:f1:62:2c:24:c4:86:2c:b9:87:
         a9:4a:9a:85:cd:de:ad:02:11:68:48:6a:bf:5d:c5:c1:43:7a:
         2f:e2:ee:6d:79:9a:6f:a5:e5:f8:05:49:49:b2:6a:31:0a:8d:
         de:79:34:d3:d6:e2:13:67:43:b8:1d:d9:d4:82:b5:ef:b4:34:
         f8:64:1d:25:fa:c5:ea:da:83:40:6e:dd:2c:46:a4:95:2a:48:
         28:17:dc:1a:87:01:63:d9:76:db:56:5f:ef:97:2d:03:4b:9e:
         56:9b:91:5b:8a:6d:35:69:b2:2a:85:d1:e3:29:e4:e7:a3:1b:
         ed:21:6e:bd:4d:e2:a1:d3:f1:91:00:8e:04:d9:29:25:df:16:
         b3:ab:45:84:00:aa:53:a3:25:4f:b1:13:88:a9:42:31:27:95:
         38:63:ae:a5:0e:62:46:cb:79:fe:ac:96:8b:d5:6b:95:df:53:
         97:32:dd:7a:bd:6b:3d:24:f4:83:c5:5b:db:f6:3d:a0:7e:88:
         06:06:cf:e6:4c:a2:28:ee:aa:c3:ec:13:ff:1f:aa:fe:98:95:
         17:11:39:ed:41:73:f0:04:a6:92:a1:7a:68:35:1a:95:87:66:
         52:6b:b2:74:a2:8f:f3:c8:79:e5:10:bc:1e:30:df:50:cd:14:
         e3:0d:28:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org