Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3132372e3231362e302f32342d3234203d3e203238323130.roa
File:                     3138392e3132372e3231362e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          bKdVoqY7gwwFp2Y3ChgMPGaSkaa/MJgLGcP8lVBuV6I=
Subject key identifier:   B6:49:56:39:35:B1:E1:0F:48:A9:51:CD:44:CC:7B:45:28:DE:D9:3D
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       532DEC55BFB565230AA542A3AC672382C4DE3DEA
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3132372e3231362e302f32342d3234203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:24 +0000
ROA not before:           Wed 28 Feb 2024 13:58:24 +0000
ROA not after:            Wed 26 Feb 2025 14:03:24 +0000
asID:                     28210
IP address blocks:        189.127.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2d:ec:55:bf:b5:65:23:0a:a5:42:a3:ac:67:23:82:c4:de:3d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:24 2024 GMT
            Not After : Feb 26 14:03:24 2025 GMT
        Subject: CN=B649563935B1E10F48A951CD44CC7B4528DED93D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6d:35:89:2a:10:b2:4a:10:b4:f0:50:97:f5:
                    68:d5:1a:3e:75:9e:0d:fb:48:9e:2d:2c:e2:01:07:
                    6a:33:ed:36:3c:78:bb:18:4d:d6:40:96:06:73:db:
                    6f:67:32:39:ee:dc:59:c1:de:69:ce:ee:26:9a:c1:
                    57:29:f5:c6:a8:34:5a:d8:b9:d5:56:be:88:3b:da:
                    4c:3e:42:db:47:89:fa:69:2b:be:9d:cc:3c:11:03:
                    4e:f5:27:11:c0:6b:ca:f6:ff:dc:56:5b:bf:70:1c:
                    5a:a7:c1:6b:dc:cb:08:96:df:c6:43:be:54:b9:7b:
                    84:35:44:b1:44:9f:25:53:eb:25:0a:f1:4e:bb:5a:
                    84:94:4c:81:31:30:6c:20:9d:00:c8:bb:9e:62:11:
                    12:f3:48:c1:9f:e3:74:a5:c7:64:1c:01:ae:ff:0e:
                    c0:ff:6a:2f:d5:68:c3:49:6e:9b:23:5e:f6:d3:60:
                    e0:39:10:b9:0b:36:eb:bc:09:69:89:02:fb:c5:60:
                    4a:30:72:86:c0:02:67:e6:5f:66:ad:ed:5c:b0:29:
                    8d:8d:f3:06:cd:1a:87:af:bd:04:61:40:a1:c2:e7:
                    1e:ce:c8:3a:bd:06:83:13:17:98:36:ad:01:88:de:
                    37:a5:cc:e4:40:ba:6e:38:e3:0d:69:b2:9e:20:2f:
                    57:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:49:56:39:35:B1:E1:0F:48:A9:51:CD:44:CC:7B:45:28:DE:D9:3D
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3132372e3231362e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:25:c0:da:28:c6:71:36:97:11:50:91:12:aa:1a:3a:e9:45:
         15:29:06:8d:f7:2f:29:39:c7:9b:87:d0:5c:0c:37:fd:ea:aa:
         90:39:49:59:35:4f:03:46:3e:f1:e6:1d:ce:62:87:e0:d8:2a:
         b6:d8:df:a5:ca:7f:42:8e:24:c0:dc:1b:25:cc:c9:4f:4e:b2:
         43:4f:72:52:a9:19:28:fc:29:3d:c3:db:18:d7:cc:78:ec:8c:
         11:5f:53:64:23:04:83:e1:a8:8c:98:ab:3a:79:bd:58:29:6d:
         dd:c3:4a:0a:ed:12:5d:e2:7d:66:99:1f:91:76:2d:2a:5a:9b:
         65:aa:80:10:5e:be:da:68:a4:8a:c8:c2:74:53:6b:db:9f:ce:
         5d:14:43:31:f6:69:8e:66:06:60:b8:ec:73:b6:12:5f:0f:fc:
         66:d5:94:0b:b9:b7:65:7b:85:6d:b8:06:17:37:8a:c1:c5:2a:
         e9:4f:bf:40:a2:3f:a6:89:f1:94:e2:83:c9:0b:a4:0a:c7:38:
         ef:d0:78:86:26:2d:ef:22:f3:fd:1b:7b:a6:fb:37:db:2f:02:
         c4:60:72:f3:07:3c:87:d9:b1:5c:14:13:ba:2d:2e:29:82:4f:
         54:13:56:40:3e:73:51:7d:5b:88:0c:c1:6f:01:cd:d8:d3:e8:
         50:a5:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org