Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138362e3231392e3131322e302f32312d3231203d3e203238323130.roa
File:                     3138362e3231392e3131322e302f32312d3231203d3e203238323130.roa (raw, json)
Hash identifier:          D4TVNvpy/QJtn71vjFRU48Ann5LNb9sNC7fXp5wfjwE=
Subject key identifier:   02:B5:27:86:76:CA:3E:6D:D4:CF:7D:54:6D:9D:2F:75:43:10:AA:66
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       51C0EA424DAE5B4263E30C2A1899EBDA2360EC47
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138362e3231392e3131322e302f32312d3231203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:21 +0000
ROA not before:           Wed 28 Feb 2024 13:58:21 +0000
ROA not after:            Wed 26 Feb 2025 14:03:21 +0000
asID:                     28210
IP address blocks:        186.219.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c0:ea:42:4d:ae:5b:42:63:e3:0c:2a:18:99:eb:da:23:60:ec:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:21 2024 GMT
            Not After : Feb 26 14:03:21 2025 GMT
        Subject: CN=02B5278676CA3E6DD4CF7D546D9D2F754310AA66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b0:b8:48:cc:03:7c:af:72:ac:60:b0:10:3e:
                    22:86:32:29:53:be:ca:03:99:85:f1:01:ab:36:97:
                    72:8b:44:50:e0:17:5b:85:1f:e9:80:41:33:da:2d:
                    70:65:c9:87:c7:58:ec:bb:49:33:1d:dc:36:19:29:
                    02:74:ee:c2:8c:0d:9e:70:9e:78:ea:22:14:78:88:
                    3f:8b:c5:86:36:82:42:e5:8f:01:7b:2a:6e:a1:df:
                    e0:9f:29:9e:7d:e5:6b:e1:cd:e2:d7:00:2d:25:67:
                    52:5d:b0:b6:5d:81:db:14:55:b3:d1:32:49:a7:2b:
                    a2:35:73:11:0a:b3:fa:7f:49:eb:e7:03:5e:7e:c0:
                    51:11:22:c2:39:64:f7:ad:43:b5:b8:a0:1a:50:68:
                    95:d8:b1:0b:10:f1:64:86:32:bf:ec:36:87:74:dc:
                    6a:39:3d:63:a9:fd:f9:b6:04:a2:70:cb:0a:5b:a4:
                    b9:1f:c4:51:ec:ba:62:30:9d:27:8c:e1:be:f2:12:
                    96:d6:27:ce:a6:b5:c7:61:55:25:e6:cd:db:ea:6a:
                    53:41:55:75:a9:da:af:2c:2f:b9:c8:71:5a:e7:6f:
                    60:df:ca:c5:1b:fb:c8:32:4a:d0:7c:00:ed:2d:74:
                    6c:38:cf:0d:99:c3:4d:d7:2d:fe:b2:91:99:4a:76:
                    b9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B5:27:86:76:CA:3E:6D:D4:CF:7D:54:6D:9D:2F:75:43:10:AA:66
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138362e3231392e3131322e302f32312d3231203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:9f:08:12:b2:3b:5a:c3:03:fd:4d:46:5f:63:b7:f6:14:03:
         4d:07:c8:3e:b1:7c:cd:24:6a:de:97:b7:32:69:f7:30:a3:c8:
         e4:12:37:7d:75:af:3e:7e:21:e9:3b:05:f8:6c:de:a1:e3:69:
         09:0d:09:dd:26:eb:33:bd:dd:f8:6c:b8:20:83:25:09:8b:05:
         7f:e6:fa:71:05:a5:89:ef:09:0c:2b:d4:e6:ee:e3:75:52:2e:
         06:cc:d7:e0:e1:03:94:ff:17:e1:c9:22:0f:35:09:eb:dd:eb:
         e8:eb:a6:26:f9:56:e9:02:da:70:d8:71:5c:9c:9c:2e:31:d2:
         4e:82:47:f1:48:3f:a0:be:9b:a1:87:0f:12:43:d4:0d:e3:4c:
         81:e6:15:26:87:be:c2:db:64:e9:b8:f3:0e:8c:9e:57:fc:82:
         d6:28:6d:5f:36:1f:12:ab:78:ef:fe:ae:37:8c:09:1a:91:a3:
         2d:af:a4:c7:35:2d:03:06:b6:7f:08:20:43:b0:c5:b3:d8:54:
         1b:fa:ff:52:db:4f:8a:24:04:d0:2a:fe:c3:93:1c:60:d6:2c:
         2d:44:07:dd:31:33:42:bf:23:f0:8d:b1:70:a6:6b:d2:12:3f:
         c7:85:ae:81:3f:24:da:de:93:a4:15:be:ec:00:fa:95:f1:52:
         99:08:37:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org