Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32322d3234203d3e20323633343832.roa
File:                     3137302e38332e3231322e302f32322d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          rvbTr/nefkeUzbKG2RhkVRc3qLLlp6sSYVGlca4s8yY=
Subject key identifier:   B9:76:1B:19:02:41:08:8C:47:E5:02:BD:D1:CA:30:1C:BE:2B:43:E0
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       27448DC85998005AE0C32184E60E9B4E9CAA0207
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32322d3234203d3e20323633343832.roa
Signing time:             Tue 27 Dec 2022 14:42:20 +0000
ROA not before:           Tue 27 Dec 2022 14:37:20 +0000
ROA not after:            Tue 26 Dec 2023 14:42:20 +0000
asID:                     263482
IP address blocks:        170.83.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:44:8d:c8:59:98:00:5a:e0:c3:21:84:e6:0e:9b:4e:9c:aa:02:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Dec 27 14:37:20 2022 GMT
            Not After : Dec 26 14:42:20 2023 GMT
        Subject: CN=B9761B190241088C47E502BDD1CA301CBE2B43E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:31:0c:de:f1:1b:48:32:89:ec:40:df:53:
                    c0:68:b0:b2:8c:6c:e2:39:64:de:0f:c7:88:7f:00:
                    8b:4a:93:8c:7a:65:ae:6e:1b:2a:6f:76:34:8c:38:
                    5c:5c:e6:07:43:7c:10:16:18:35:e6:64:60:2e:2b:
                    c7:10:a6:64:55:99:a5:d0:9a:af:74:9e:b1:9b:ea:
                    6c:8a:21:b7:9c:77:bb:66:cd:97:ba:7d:a7:c3:69:
                    70:4f:b1:ff:c4:dc:3c:51:1c:f9:88:06:73:7e:e6:
                    50:40:c8:ad:c2:e8:67:c9:1c:54:34:d5:29:3c:b4:
                    3a:b0:cb:04:03:3d:a0:e5:48:6b:e7:8d:f2:a6:49:
                    2a:25:32:ce:2b:d7:99:e8:c5:01:e1:dd:1c:6d:a1:
                    85:22:32:e3:cb:35:ef:33:33:e2:10:40:5a:bd:e0:
                    40:3f:6e:76:de:6d:6d:81:88:8e:65:a0:25:2c:0e:
                    2c:30:d1:25:90:5e:49:61:b9:63:5f:58:d6:a3:d1:
                    c9:8e:58:c5:33:5d:ea:17:00:e2:88:2f:5a:27:9a:
                    ca:f8:52:1c:61:75:6e:72:e8:2b:e5:3a:fa:75:c8:
                    7b:0a:e1:17:c1:fd:ab:4a:a5:d2:1e:2b:3f:c1:6d:
                    8a:b7:14:6c:71:72:12:41:14:39:3c:ed:87:0e:4c:
                    f5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:76:1B:19:02:41:08:8C:47:E5:02:BD:D1:CA:30:1C:BE:2B:43:E0
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231322e302f32322d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:4b:15:f2:04:19:35:86:51:e0:da:c5:15:89:ad:01:a7:90:
         22:ab:e8:1a:76:b7:7f:78:fc:fa:ba:70:5b:28:31:af:86:ff:
         4f:33:f8:53:79:d8:5f:12:ee:15:1b:33:ed:8e:14:c5:1d:6f:
         f5:3a:01:c2:05:2d:35:a2:b4:7e:2e:ad:b5:4f:28:47:67:7f:
         a2:f3:e3:fe:6c:b6:17:af:cc:32:7d:e5:d8:aa:fe:5d:42:da:
         6f:61:be:02:9b:20:0f:f2:0e:a8:70:44:d9:fb:39:ac:b1:74:
         2d:32:5e:76:14:ac:b8:cd:77:92:52:a0:af:55:0a:6d:1b:58:
         46:94:9b:37:1c:a9:7d:e2:2d:07:76:be:31:89:d8:fb:f4:fe:
         e1:10:fc:34:03:81:58:9d:0b:b2:fa:19:4b:9b:cf:d0:60:11:
         f2:68:ce:ba:e1:dd:72:28:10:b8:65:8c:51:df:04:04:fd:b1:
         ca:ef:20:3b:08:8e:73:0c:d5:3c:ed:b4:8c:9a:31:6d:a0:05:
         42:ee:77:02:57:5b:0e:f8:52:42:cf:af:e4:7e:31:58:82:13:
         b9:10:1e:7d:15:c9:84:16:d0:5d:82:84:c9:0e:41:c9:b8:f1:
         5e:47:0a:6b:5f:d1:cd:33:66:f4:56:b3:17:65:01:04:39:b7:
         e3:28:92:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org