Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3132372e3230382e302f32302d3230203d3e203238323130.roa
File:                     3138392e3132372e3230382e302f32302d3230203d3e203238323130.roa (raw, json)
Hash identifier:          sIsQAsfbosBWIraZHn183KlNVTmsRv20u8ScQZ2EZ0Q=
Subject key identifier:   1C:ED:DE:E8:F1:CB:18:9A:7A:B0:37:11:B7:95:A9:1B:3B:99:D4:09
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       240DA98CBECD932CC19640A5863BFAE7ED81B71D
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3132372e3230382e302f32302d3230203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:24 +0000
ROA not before:           Wed 28 Feb 2024 13:58:24 +0000
ROA not after:            Wed 26 Feb 2025 14:03:24 +0000
asID:                     28210
IP address blocks:        189.127.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0d:a9:8c:be:cd:93:2c:c1:96:40:a5:86:3b:fa:e7:ed:81:b7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:24 2024 GMT
            Not After : Feb 26 14:03:24 2025 GMT
        Subject: CN=1CEDDEE8F1CB189A7AB03711B795A91B3B99D409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:75:09:be:ef:33:67:46:ab:36:28:7b:c9:b9:
                    9e:a8:1b:cf:63:03:26:c3:3f:75:82:6c:90:eb:eb:
                    41:d9:62:06:f6:e9:13:a6:25:83:82:e6:e4:8e:9e:
                    bd:da:50:06:90:e7:58:d1:f2:f7:07:c2:cc:a8:f5:
                    7a:22:b8:d5:fc:6f:55:e1:19:9f:47:28:94:66:fc:
                    35:f4:4c:e4:85:36:61:89:c9:65:b7:ab:04:0a:a8:
                    7a:5a:d6:61:a2:26:c0:15:17:62:8f:c7:d8:70:fd:
                    9a:68:e2:9f:7f:31:87:27:51:fd:7d:61:4f:f5:72:
                    34:16:51:aa:22:09:f9:83:e9:a2:a1:84:15:70:22:
                    c3:21:29:59:31:8e:24:3d:bf:49:11:f6:da:25:7c:
                    29:fb:d3:2f:91:4b:35:50:4e:5d:cd:db:05:6b:c8:
                    5f:46:8f:ed:cb:1e:98:c5:ab:e1:0b:04:a6:d0:02:
                    f5:6f:88:c4:96:6f:54:49:7d:00:bf:4e:99:4a:7f:
                    03:df:f3:c7:d8:81:a6:8e:54:e4:41:69:7b:03:0f:
                    17:4b:3f:14:81:18:a9:73:25:95:d3:8d:b9:d4:91:
                    42:b9:f0:8e:4b:fd:35:1c:b4:ce:4c:e8:6b:1a:79:
                    51:03:e6:6a:f3:d9:85:99:99:e2:5c:e8:a6:8b:8c:
                    80:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:ED:DE:E8:F1:CB:18:9A:7A:B0:37:11:B7:95:A9:1B:3B:99:D4:09
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3132372e3230382e302f32302d3230203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:65:db:58:d9:58:9d:7e:be:05:e3:20:a5:bd:86:5d:c2:52:
         7b:76:a3:f5:20:ea:9e:bd:82:67:a9:65:8c:5d:ad:79:c3:f9:
         cd:58:a5:4e:74:4d:d6:bf:55:b9:bf:98:97:9a:b1:4f:d8:49:
         97:51:3c:fc:c0:46:67:2a:17:28:cc:40:b6:32:ac:ed:c9:d8:
         38:13:6d:f3:01:5e:8b:c6:5f:b6:ac:cf:23:f1:c7:10:7e:73:
         d2:2d:1d:69:60:34:d2:62:11:f2:4c:72:e3:f3:54:48:fa:0b:
         a2:cd:30:ed:f6:bc:a1:12:dc:28:43:53:17:81:24:a3:74:e4:
         40:69:dc:57:cc:af:4d:78:5a:5a:61:58:c1:75:ea:34:50:de:
         62:5a:f8:09:96:c6:f2:a9:dd:78:f2:94:cb:33:cb:fa:ad:2e:
         c9:15:80:67:e7:0f:a2:7c:bc:b7:00:87:ae:a8:66:ce:07:a4:
         96:81:2e:45:7f:bb:65:53:88:01:a3:5b:53:a4:67:d3:86:dd:
         f9:96:a8:36:7d:0b:0a:f3:25:63:67:03:78:bc:b7:93:e6:26:
         14:59:04:28:31:73:3c:32:43:97:ec:0e:ab:83:71:5d:75:cf:
         e9:5c:0a:ed:22:2b:ec:d4:a4:28:3c:93:23:a6:ac:18:c6:6b:
         35:75:63:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org