Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32322d3232203d3e20323730353339.roa
File:                     3138392e38342e34342e302f32322d3232203d3e20323730353339.roa (raw, json)
Hash identifier:          2w/9Ke3a8kjkO3tzmbJPWbzmxedDprk+vj/NJUaskyE=
Subject key identifier:   A2:4E:6B:15:94:27:D6:B2:CE:07:18:01:EA:B7:6F:49:A8:2F:A0:92
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       3750E1D13CDE48E039959460D24761704929A654
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32322d3232203d3e20323730353339.roa
Signing time:             Tue 12 Sep 2023 09:38:14 +0000
ROA not before:           Tue 12 Sep 2023 09:33:14 +0000
ROA not after:            Tue 10 Sep 2024 09:38:14 +0000
asID:                     270539
IP address blocks:        189.84.44.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:50:e1:d1:3c:de:48:e0:39:95:94:60:d2:47:61:70:49:29:a6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Sep 12 09:33:14 2023 GMT
            Not After : Sep 10 09:38:14 2024 GMT
        Subject: CN=A24E6B159427D6B2CE071801EAB76F49A82FA092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cb:19:b4:bb:4a:77:85:27:65:3a:b5:46:b0:
                    bc:c6:b9:83:78:cb:e8:6c:89:22:b8:23:55:b3:c4:
                    01:56:52:5e:7d:96:20:f7:43:09:22:c0:26:98:03:
                    35:20:f0:8e:54:02:c9:78:e6:ef:06:72:a6:d1:dd:
                    ec:07:32:59:54:4a:8d:66:c4:59:ef:b2:43:66:90:
                    64:2d:3e:ad:b4:58:32:80:6d:49:1d:d1:e0:46:e1:
                    48:07:20:9b:b4:9b:82:bf:f7:a4:5e:77:4d:0b:de:
                    b8:1f:87:72:cf:ca:fa:39:8d:d8:f7:f2:5b:19:02:
                    57:87:d0:12:60:5c:d3:2c:7e:e6:d4:08:54:b4:6b:
                    9b:af:f5:12:04:0f:c6:ac:7c:94:ca:fc:af:d2:4e:
                    3b:a7:c0:c4:a1:6f:db:1c:6c:49:e5:52:33:bf:b3:
                    19:6c:aa:65:a8:d1:53:1a:75:37:cc:0c:00:bb:ed:
                    c5:03:ff:48:47:db:b1:33:e5:df:e2:76:7e:7e:1a:
                    18:5a:77:a4:1b:5c:dc:73:a8:25:a4:88:07:08:fd:
                    6b:23:32:4a:95:bf:89:b8:1c:27:fd:16:cb:db:31:
                    1f:66:4c:80:37:44:3c:3a:3b:92:5b:fe:73:3e:30:
                    c0:e4:0e:9e:ca:53:c7:41:08:57:55:69:8e:4b:7d:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4E:6B:15:94:27:D6:B2:CE:07:18:01:EA:B7:6F:49:A8:2F:A0:92
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32322d3232203d3e20323730353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:4d:b4:b2:a0:b5:73:be:e0:c8:05:d1:9a:54:d9:00:e6:91:
         08:4d:30:66:7f:85:47:53:89:93:69:70:fd:2b:50:ca:05:80:
         14:9a:5a:f8:57:a3:05:d0:38:b7:1f:4f:39:5a:bb:93:a9:8e:
         91:fb:85:19:72:c0:40:aa:b6:0b:45:38:6e:51:b2:52:3b:f4:
         67:2d:cb:4e:53:0b:76:bf:ea:c7:3d:a9:59:d9:c7:aa:8c:0f:
         43:45:9d:0f:f1:b7:bc:ff:f5:e2:ab:cf:0a:d0:2f:99:52:33:
         11:07:2a:af:0e:69:09:ea:6e:e5:73:43:75:d6:a2:c6:37:7b:
         c0:a4:95:ed:d1:38:ff:78:6d:13:00:c6:aa:b7:f9:51:68:f7:
         f4:e3:26:8c:15:55:60:fb:68:cb:4d:d6:de:08:4c:dd:e6:32:
         a0:59:e1:58:e6:16:50:d0:44:8d:33:d5:60:4f:f7:3b:cf:1a:
         00:cb:95:c0:0e:37:68:ba:9f:97:66:fe:e4:9a:68:ea:2e:e2:
         e2:f2:22:34:02:29:18:35:07:b7:03:70:13:d4:88:19:79:d2:
         73:ee:e3:a4:1b:ff:4f:0f:6a:ad:b4:a5:fb:aa:60:b6:a4:37:
         d8:ee:ef:95:c4:34:42:73:97:f5:b3:98:f1:ad:a7:77:fd:8b:
         15:50:8f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org