Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3132372e3232312e302f32342d3234203d3e203238323130.roa
File:                     3138392e3132372e3232312e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier:          5VzmAtVVkMMQvV3Rn32dEbMb5Lq6vLf2cihaiQMq1JI=
Subject key identifier:   7C:80:B7:02:2D:DE:E2:FD:22:2F:37:77:1C:45:0E:48:46:1B:11:BC
Certificate issuer:       /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial:       4E703F56270B5461D789BFCE570120396ABF5197
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3132372e3232312e302f32342d3234203d3e203238323130.roa
Signing time:             Wed 28 Feb 2024 14:03:23 +0000
ROA not before:           Wed 28 Feb 2024 13:58:23 +0000
ROA not after:            Wed 26 Feb 2025 14:03:23 +0000
asID:                     28210
IP address blocks:        189.127.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:70:3f:56:27:0b:54:61:d7:89:bf:ce:57:01:20:39:6a:bf:51:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
        Validity
            Not Before: Feb 28 13:58:23 2024 GMT
            Not After : Feb 26 14:03:23 2025 GMT
        Subject: CN=7C80B7022DDEE2FD222F37771C450E48461B11BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bc:f8:8f:84:c8:cc:fc:ba:3a:07:7c:6d:5f:
                    16:11:88:4e:c2:23:65:94:b6:5c:71:cb:0d:97:2d:
                    dd:2e:23:fe:ad:2f:08:d9:d4:1b:8d:a2:a0:3f:0b:
                    e5:a2:fb:d5:e9:46:ad:ef:cc:e3:10:1c:8d:58:d5:
                    54:e8:bd:5e:13:a7:85:ca:61:a0:64:3d:cd:de:56:
                    09:81:4c:78:32:d5:69:77:0a:93:11:13:3b:b2:f5:
                    b7:17:52:3e:01:9b:00:b9:35:ee:eb:33:24:7b:c6:
                    bf:9f:08:3b:45:08:e0:20:1b:f3:e7:6d:31:9f:e5:
                    f6:a6:07:78:9c:58:96:0a:30:17:00:5c:2f:3a:fe:
                    69:db:81:36:e9:4b:fb:ee:fb:d6:3e:26:54:f7:ac:
                    f2:52:b6:51:5b:c1:68:e7:a7:c0:20:b7:89:24:9f:
                    d3:ab:4d:cc:d9:81:87:cd:e7:e9:ac:6e:85:45:8f:
                    48:b0:16:46:f9:4c:4a:80:2e:13:69:7d:68:03:6e:
                    c0:d8:7b:ca:f3:99:b5:c5:60:39:44:c2:cb:e8:45:
                    39:80:b9:58:f7:68:dc:81:44:4e:25:da:61:c2:b7:
                    99:7d:e7:7c:4f:03:c2:7f:c9:d6:51:54:10:e0:5c:
                    90:e0:fc:72:7c:99:db:0c:f0:6f:d3:f8:66:25:4b:
                    ba:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:80:B7:02:2D:DE:E2:FD:22:2F:37:77:1C:45:0E:48:46:1B:11:BC
            X509v3 Authority Key Identifier:
                keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/3138392e3132372e3232312e302f32342d3234203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:85:d5:35:3f:60:20:10:d6:f9:0a:a6:b6:6d:9c:06:05:2b:
         26:15:a3:c9:76:cd:db:17:b9:99:de:f9:81:ab:0b:c2:6e:9e:
         7a:54:04:3e:86:5e:40:f3:a8:51:4d:2f:3b:50:1d:b0:b4:c7:
         8d:a7:02:4a:d0:33:5e:b2:a0:a7:22:5b:0d:be:da:3b:f0:fa:
         42:19:e3:6c:7e:65:56:11:26:17:ad:90:f7:a3:82:bb:06:b5:
         ac:da:53:31:b0:09:09:d1:a7:03:b9:b4:88:58:55:8f:0b:a3:
         60:30:af:ce:26:3e:ab:99:7d:fe:0f:58:a0:14:a9:0a:21:70:
         70:7c:24:3f:de:a7:2a:3d:69:12:f0:26:e2:68:25:c7:91:50:
         d2:5e:c2:8a:7c:5c:40:6e:25:83:61:ae:75:ff:16:79:6b:fa:
         60:47:54:9d:92:9d:e9:44:61:c7:54:1c:d5:30:d3:9b:cd:df:
         30:5b:81:75:ea:9b:e0:f6:a5:76:86:1f:42:4b:48:5b:98:d6:
         c2:0a:2e:5f:51:25:e3:d3:f9:0b:82:6a:91:80:87:88:2b:c6:
         b0:44:d8:e3:99:96:d8:84:63:ed:9b:38:ca:b0:08:22:b0:81:
         da:58:d6:2c:0a:28:2a:8a:a4:81:aa:21:62:a7:69:2b:28:07:
         e2:02:a3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org