Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32322d3232203d3e20323633343832.roa
File:                     3138392e38342e34342e302f32322d3232203d3e20323633343832.roa (raw, json)
Hash identifier:          xUQjzb5NaymNqyAuQUjhMp7lUpPyqXBnKLQGPcDFgmw=
Subject key identifier:   7E:E4:4C:71:93:26:57:A9:3E:D9:0E:2A:93:E7:C8:E6:41:F2:76:21
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       72D6BA3DE77D7923E2532D2ABF7D0613C88A33BD
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32322d3232203d3e20323633343832.roa
Signing time:             Wed 11 Oct 2023 14:28:33 +0000
ROA not before:           Wed 11 Oct 2023 14:23:33 +0000
ROA not after:            Wed 09 Oct 2024 14:28:33 +0000
asID:                     263482
IP address blocks:        189.84.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d6:ba:3d:e7:7d:79:23:e2:53:2d:2a:bf:7d:06:13:c8:8a:33:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Oct 11 14:23:33 2023 GMT
            Not After : Oct  9 14:28:33 2024 GMT
        Subject: CN=7EE44C71932657A93ED90E2A93E7C8E641F27621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:3b:dc:25:26:77:ce:5e:4f:e0:55:36:da:
                    dc:9e:51:62:f4:e6:d1:af:2d:90:4c:ec:14:67:45:
                    cb:8c:8d:03:37:4b:8f:39:f6:5f:dd:75:8a:62:9a:
                    d4:53:83:82:0f:2b:73:17:55:1e:43:57:d7:42:96:
                    5b:be:97:3a:11:50:50:4c:b1:11:ae:f4:9d:0b:65:
                    df:74:d6:f3:52:66:08:e4:a9:af:7e:5f:fb:d1:85:
                    19:84:ab:b2:d4:d8:5a:96:85:72:18:3a:24:eb:c6:
                    5f:e4:a1:52:33:0e:15:f9:46:f7:ee:d3:7b:f0:f8:
                    fb:5a:a1:1e:6c:91:32:77:29:07:89:a9:c4:e7:35:
                    a0:b5:24:2c:e2:e4:b5:33:14:2e:b3:97:5d:0f:c9:
                    9f:f1:f8:11:e7:20:80:22:34:f4:7c:e2:b3:b7:73:
                    b1:9b:7b:ef:2a:1a:94:3b:6d:d0:0b:e8:6a:be:1d:
                    65:4a:7e:de:a5:fe:f6:dc:f2:ee:a1:35:04:8c:b6:
                    dc:5c:cc:27:1b:91:24:69:e9:df:d3:66:df:55:40:
                    1c:be:e2:1a:cf:22:fc:18:88:71:4f:f9:97:d5:24:
                    d0:9c:05:0c:45:12:9c:28:bc:b5:74:7b:f9:c8:ec:
                    c5:55:1d:20:c0:8b:80:42:86:18:e6:96:8a:22:9d:
                    26:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E4:4C:71:93:26:57:A9:3E:D9:0E:2A:93:E7:C8:E6:41:F2:76:21
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32322d3232203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:7e:f0:25:47:e6:28:1c:69:ed:ee:e7:fe:cf:4d:96:77:
         1e:bf:6a:aa:f5:a0:30:53:c3:62:fe:e5:15:5f:e9:12:f5:a9:
         ab:f2:93:d7:18:b1:f2:3e:05:a1:bd:e8:c3:54:0a:6f:17:b9:
         c8:d4:ba:02:13:c7:45:c0:5c:b7:ee:bf:66:68:11:7b:e9:fc:
         96:e2:5e:b0:f5:c2:0f:0a:35:20:7f:7c:a6:a1:db:74:c4:00:
         92:0c:5c:66:f2:0a:52:6b:68:f0:2b:94:bc:ac:bd:66:f8:3f:
         d2:d4:4e:a8:e5:02:09:a9:8c:12:4c:22:4f:74:41:82:58:7d:
         6b:82:3d:48:58:d2:c2:28:28:d0:b9:1f:81:4e:8c:33:8a:fd:
         50:a1:bc:f5:7d:30:55:e9:27:4d:fc:29:72:eb:76:1e:43:ca:
         c7:32:67:1f:4a:d5:94:82:57:36:b0:38:d7:34:f2:13:fc:e8:
         6b:f0:cf:aa:1b:47:35:38:c4:69:05:9d:e1:25:cd:76:6e:cf:
         0c:a3:af:7f:dc:73:cc:42:48:e8:8f:37:80:fa:2a:d8:10:2c:
         28:09:16:52:06:8d:4a:21:b6:c3:fc:c4:7c:66:35:20:a7:72:
         3a:c0:fe:89:c6:f1:4e:bc:ba:57:6d:0a:77:fc:1c:50:8e:8d:
         56:24:47:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org