Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32322d3232203d3e2033333536.roa
File:                     3137302e38332e3231322e302f32322d3232203d3e2033333536.roa (raw, json)
Hash identifier:          R9/NwFar3MAn+5w0Yw2TPbmT23E/QVZ+pR0R+9oU4/8=
Subject key identifier:   32:26:0D:D3:83:0A:9E:1D:28:27:F0:F6:F1:02:80:08:09:AD:A4:A3
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       3CCCB8D3A0E2C199D2BD7EB224CC6F7A8A796672
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32322d3232203d3e2033333536.roa
Signing time:             Fri 19 May 2023 15:43:40 +0000
ROA not before:           Fri 19 May 2023 15:38:40 +0000
ROA not after:            Fri 17 May 2024 15:43:40 +0000
asID:                     3356
IP address blocks:        170.83.212.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:cc:b8:d3:a0:e2:c1:99:d2:bd:7e:b2:24:cc:6f:7a:8a:79:66:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: May 19 15:38:40 2023 GMT
            Not After : May 17 15:43:40 2024 GMT
        Subject: CN=32260DD3830A9E1D2827F0F6F102800809ADA4A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2c:13:18:6d:04:90:94:11:ff:a0:5d:da:32:
                    32:21:0b:09:c4:0e:d1:01:0e:93:9d:91:aa:7a:7b:
                    75:ba:d3:78:37:e8:0f:17:e4:2a:92:b1:5e:b1:d1:
                    63:1d:7d:35:61:f5:53:a7:5e:eb:64:95:91:2e:61:
                    6c:d3:b2:95:30:99:6d:ec:98:66:da:8f:32:15:30:
                    e9:ab:1d:d7:fe:03:2a:c8:16:fb:9b:5d:31:fa:b1:
                    1c:54:df:8b:1c:77:3d:58:42:87:f1:86:0a:56:2c:
                    bb:89:b8:41:15:fe:5d:41:92:90:b8:71:4a:cc:3e:
                    14:d8:3e:c5:10:c1:e6:29:ab:ff:10:a4:65:d4:3a:
                    e4:e1:78:ef:ab:70:27:6d:96:b8:5d:74:92:a9:54:
                    83:e4:dd:d7:95:ea:77:2f:92:8b:21:31:c5:6a:41:
                    9e:a2:11:96:75:7a:90:75:e3:30:54:97:f3:7f:ed:
                    fc:01:c6:9e:06:00:7b:a1:93:54:49:29:41:57:18:
                    7f:f8:8e:55:02:dd:3d:7d:f4:36:63:1f:db:aa:ce:
                    00:9a:d8:ad:c4:d1:ea:30:8f:5e:7a:dd:d7:52:11:
                    d0:39:47:ba:1d:d5:50:eb:10:b9:19:0f:7a:e0:dd:
                    4f:75:ba:08:00:f2:c7:c0:f0:40:1c:fa:21:48:7b:
                    0e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:26:0D:D3:83:0A:9E:1D:28:27:F0:F6:F1:02:80:08:09:AD:A4:A3
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32322d3232203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:68:1d:a9:22:e2:67:da:7c:ad:e1:51:60:0a:22:a2:bd:e0:
         d3:fe:9a:cf:ef:19:61:78:59:a3:a1:89:4a:c1:d5:2a:61:3a:
         46:cb:73:84:45:3c:4c:ac:2a:05:0e:5e:6c:d1:63:52:58:d6:
         5d:12:7c:a2:d5:8d:08:92:b1:21:62:51:51:bb:02:9f:70:75:
         90:a7:3d:a3:57:84:97:36:f4:52:0b:98:02:dd:56:23:0a:3b:
         5c:02:77:57:68:02:20:9c:2a:8a:d1:6c:9f:6e:ba:3a:5d:88:
         8a:5c:c0:05:bc:d8:e8:3e:86:82:e8:8a:3b:9b:ee:b3:0a:ef:
         49:d7:ea:3e:ce:9d:5c:aa:91:9f:31:16:9e:50:9f:8a:d6:83:
         83:43:c7:a5:42:65:4d:13:1e:31:3b:3c:93:a6:89:6f:2b:63:
         7b:c7:4a:66:be:86:2e:b1:49:59:55:87:2f:5e:c2:22:af:67:
         0e:38:c3:5b:e8:b1:9f:20:6d:68:a0:e6:03:b3:4e:39:d6:94:
         f1:44:b1:7e:55:3f:93:36:43:66:72:8e:c4:61:5a:29:01:02:
         ce:96:15:dd:23:45:5e:e1:4c:9d:03:0b:3c:7e:e3:1b:ba:9c:
         89:2b:5a:cf:c1:71:21:5a:2a:57:32:ce:1a:1a:58:be:e5:be:
         bb:6f:95:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org