Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231342e302f32332d3233203d3e20323633343832.roa
File:                     3137302e38332e3231342e302f32332d3233203d3e20323633343832.roa (raw, json)
Hash identifier:          S76kTHSZiEYaA1em5USpUmJIVEHhmNPDHRlWC3UPRFI=
Subject key identifier:   70:85:CB:60:E5:F3:D7:81:F1:D8:6E:7E:8D:FB:05:BB:7E:AA:F4:FF
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       4388F1F802D334D9857EB8C3559E963D3C3C3D6D
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231342e302f32332d3233203d3e20323633343832.roa
Signing time:             Wed 11 Oct 2023 14:29:03 +0000
ROA not before:           Wed 11 Oct 2023 14:24:03 +0000
ROA not after:            Wed 09 Oct 2024 14:29:03 +0000
asID:                     263482
IP address blocks:        170.83.214.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:88:f1:f8:02:d3:34:d9:85:7e:b8:c3:55:9e:96:3d:3c:3c:3d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Oct 11 14:24:03 2023 GMT
            Not After : Oct  9 14:29:03 2024 GMT
        Subject: CN=7085CB60E5F3D781F1D86E7E8DFB05BB7EAAF4FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:21:84:c3:0f:11:55:48:15:bc:5b:50:ed:
                    df:a8:d8:99:cf:c9:3a:ed:8e:e2:9b:f3:4a:54:f3:
                    80:cc:25:d2:44:a3:ae:ef:ba:7a:b3:ba:57:4d:73:
                    8b:9b:32:7d:56:2e:39:ee:de:57:63:35:7f:d4:e1:
                    a3:84:4d:07:ad:fd:56:40:5e:da:4f:66:99:10:99:
                    91:c8:dd:fd:41:a0:ca:79:bf:d1:f3:dd:68:e4:c3:
                    77:87:f2:cc:ca:b8:d8:a0:3e:b5:67:33:76:61:19:
                    c9:21:23:12:03:77:9b:6b:2b:c8:21:4f:f3:5a:ce:
                    03:3b:a8:ac:64:12:e5:5b:e8:f4:8c:7a:95:7e:d6:
                    3a:70:a3:78:a8:ee:f8:75:5b:ee:57:1e:25:75:95:
                    a0:c2:8d:df:2a:14:09:36:d1:5e:03:6e:9a:f3:89:
                    0b:f0:d6:56:d3:69:29:39:7e:d4:30:e8:96:9c:23:
                    18:64:cc:88:f2:6b:46:09:b8:bd:1c:75:41:95:1e:
                    3a:78:78:3f:fc:ac:65:cb:0c:50:1d:90:c8:6c:4e:
                    dd:38:e2:be:a6:de:4e:b2:e1:80:de:24:14:37:44:
                    e8:1c:af:5a:60:89:92:bf:f5:c5:3a:90:f8:9f:eb:
                    66:37:7a:5b:d3:16:3c:3a:c9:c9:9e:a6:b0:9b:16:
                    38:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:85:CB:60:E5:F3:D7:81:F1:D8:6E:7E:8D:FB:05:BB:7E:AA:F4:FF
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3137302e38332e3231342e302f32332d3233203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:bc:aa:44:40:d6:eb:c9:2d:3c:ae:97:a4:e9:84:37:cc:89:
         8d:9c:3d:e5:1f:98:a2:5f:43:a4:52:52:a2:b3:97:aa:b3:e4:
         d0:05:5d:d7:1b:46:20:9c:ee:ad:3b:d1:2b:ec:1d:e9:26:01:
         2d:02:6d:7e:71:a0:7e:5a:2d:3d:d0:7f:ae:a6:68:37:58:6c:
         a6:80:eb:91:91:71:cf:78:d6:32:44:fc:05:8b:bc:75:43:e1:
         41:0c:ab:3d:fe:f9:1c:3f:e4:82:3e:d2:41:29:01:84:a8:84:
         c9:c2:b5:06:cd:6f:b5:01:67:fa:7d:bb:09:5b:18:41:68:36:
         26:aa:99:25:6e:ba:a8:ef:47:dd:ed:61:61:bd:3f:b9:1e:41:
         a5:3a:11:bb:91:8b:14:11:cb:a5:9c:19:44:e5:48:06:44:15:
         88:a8:19:24:dc:52:04:7d:f6:e7:ef:a7:b6:e3:26:99:87:10:
         af:e7:9b:4d:3c:33:da:ee:41:b9:e8:f6:2a:78:69:a5:29:06:
         b6:9b:00:a5:61:62:b0:be:a0:5a:11:62:b4:79:27:67:5c:be:
         fb:65:f7:12:85:31:b7:4c:f0:19:03:55:72:7a:d6:bc:90:39:
         f3:46:b2:9b:5b:e2:9c:0b:35:48:7e:37:bb:ce:e1:f8:1b:4c:
         9a:d9:fc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org