Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32332d3233203d3e20323633343832.roa
File:                     3138392e38342e34342e302f32332d3233203d3e20323633343832.roa (raw, json)
Hash identifier:          1kebtAn6tDbZowzdxNgHVKGo5bDWPZPam08jd7xCQrk=
Subject key identifier:   4F:E4:67:51:D3:B2:37:04:BC:E2:98:B4:D1:78:4B:75:BA:DC:03:07
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       306DA771A81F965BA68775EBFE68F326502A9806
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32332d3233203d3e20323633343832.roa
Signing time:             Thu 19 Oct 2023 11:27:54 +0000
ROA not before:           Thu 19 Oct 2023 11:22:54 +0000
ROA not after:            Thu 17 Oct 2024 11:27:54 +0000
asID:                     263482
IP address blocks:        189.84.44.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6d:a7:71:a8:1f:96:5b:a6:87:75:eb:fe:68:f3:26:50:2a:98:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Oct 19 11:22:54 2023 GMT
            Not After : Oct 17 11:27:54 2024 GMT
        Subject: CN=4FE46751D3B23704BCE298B4D1784B75BADC0307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:49:d0:e9:8a:55:c2:4c:4a:ce:81:6e:65:
                    5e:4f:e7:27:27:f3:12:97:09:4c:61:d9:6a:2c:b9:
                    23:03:4f:f5:1f:30:75:83:73:4d:89:61:d8:7b:83:
                    bb:c9:bb:cb:bc:24:f3:ee:b2:8e:4f:fc:8d:69:01:
                    4b:15:b9:cb:82:06:6e:c3:99:d2:fd:76:03:19:76:
                    f9:6d:6c:dd:79:41:83:77:30:dc:cb:ae:7b:96:f9:
                    fc:e0:40:c7:f2:17:df:2f:5f:2b:08:95:52:b3:c0:
                    29:28:88:4d:c3:c2:08:ac:49:3f:39:65:6b:71:23:
                    76:b6:ba:8c:85:ca:c6:3d:6c:a4:e2:a6:bc:20:6f:
                    ab:57:42:1d:79:eb:f2:47:6b:b5:c6:c0:cc:7d:90:
                    d3:1f:45:8a:91:5e:39:b0:69:6b:ae:a7:10:e8:fa:
                    b4:01:70:cf:df:70:67:3c:28:07:2a:2b:a0:51:91:
                    00:8d:ad:f6:e3:31:01:40:87:01:5b:86:16:91:0d:
                    56:17:61:51:99:dd:1e:bf:8b:a3:46:38:14:22:76:
                    67:1e:4b:30:be:7c:b6:5d:9a:f8:88:69:bd:45:50:
                    f4:53:0b:fb:7a:ae:96:e2:72:f7:de:9c:e4:49:5f:
                    0d:95:9d:ed:12:a3:7a:75:3b:12:8e:3a:7f:94:a5:
                    0c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E4:67:51:D3:B2:37:04:BC:E2:98:B4:D1:78:4B:75:BA:DC:03:07
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32332d3233203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:c0:05:20:71:5c:6f:a7:bf:cd:a5:a2:4c:a6:2b:32:21:7d:
         c1:63:ee:98:63:0f:d2:cf:66:c8:a8:88:0a:42:86:6a:f4:c3:
         78:0f:e4:e2:c6:01:0b:ef:08:98:fa:3a:f3:fc:8e:c4:3e:a9:
         0b:3f:d2:49:80:57:14:15:08:f3:a3:c5:4a:bb:d7:44:1a:5f:
         e1:da:d1:22:f1:f7:a1:c1:fa:7c:04:bb:5d:61:9f:39:93:0f:
         db:92:d8:77:ee:47:b3:ed:6e:42:e1:b3:82:60:3a:0f:7f:fc:
         6b:e7:7d:af:c4:73:77:bd:4f:63:fb:da:49:ad:8c:b8:2f:07:
         05:4b:fa:10:a4:84:92:be:34:73:72:c0:af:8b:20:86:af:3f:
         e1:e2:00:ed:d0:91:f6:f2:17:26:08:2e:7f:e2:10:bd:7f:d0:
         d6:12:d7:3b:22:52:1a:8e:88:d1:ef:09:8c:a9:3a:8f:13:94:
         b4:27:43:ce:51:7b:80:c1:19:bc:75:10:25:c2:44:a7:20:ed:
         6a:41:3a:6b:be:b9:03:94:36:41:6d:27:57:7b:33:29:d8:fd:
         37:81:4b:cd:6e:f4:6d:03:ce:2d:94:78:ba:37:ea:27:6c:bd:
         32:4c:1d:7c:89:2d:72:ab:a9:1a:4c:2a:80:47:f4:96:fd:f1:
         2b:97:96:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:01 2024 by rpki-client on console-fra.rpki-client.org