Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32342d3234203d3e20323633343832.roa
File:                     3138392e38342e34342e302f32342d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          hn8IbgRMmkL1+ucBbWSc7CFL+IgK5NiDSquT0dJf1Hk=
Subject key identifier:   01:69:E9:F4:78:A7:63:D1:40:EE:2B:7A:E0:D5:43:D0:44:90:CF:E2
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       7BB84D2AEE95EFDCB92530D1900191E8582E0EC6
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32342d3234203d3e20323633343832.roa
Signing time:             Tue 12 Sep 2023 11:07:32 +0000
ROA not before:           Tue 12 Sep 2023 11:02:32 +0000
ROA not after:            Tue 10 Sep 2024 11:07:32 +0000
asID:                     263482
IP address blocks:        189.84.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b8:4d:2a:ee:95:ef:dc:b9:25:30:d1:90:01:91:e8:58:2e:0e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Sep 12 11:02:32 2023 GMT
            Not After : Sep 10 11:07:32 2024 GMT
        Subject: CN=0169E9F478A763D140EE2B7AE0D543D04490CFE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ad:7f:cb:19:95:66:5a:85:c7:f7:78:f5:2b:
                    00:b4:16:48:d5:32:1a:db:00:3f:5d:50:06:21:c6:
                    ec:d8:1e:7f:c5:e8:13:49:fd:63:0e:c8:96:d2:0e:
                    96:6f:f4:5c:62:50:6a:b6:87:1a:e1:1d:52:13:8d:
                    d2:e5:95:36:1e:5c:58:4e:88:93:91:31:f5:1c:9d:
                    3d:24:79:b6:84:bf:bd:8e:37:0e:c8:3a:5f:44:4e:
                    40:8c:a2:93:55:e1:a0:34:21:cc:fc:cf:6a:1a:0b:
                    aa:5e:49:82:ac:0a:94:42:ca:ff:71:5e:51:cf:b2:
                    ac:cf:bd:9b:a2:0c:ee:78:5b:09:ee:70:76:4c:5e:
                    27:66:03:16:03:cc:ec:c1:3a:36:6d:0e:35:19:38:
                    01:9c:1d:bc:8c:09:2d:ce:43:7d:de:e6:e4:5d:a0:
                    c0:dd:7c:3c:4e:78:46:13:03:c9:68:f6:d4:8c:a8:
                    bf:cf:ea:70:e3:90:ae:1e:25:d8:00:5f:5f:fb:d8:
                    36:de:28:0f:47:77:6d:bc:47:1d:21:2b:a9:a1:88:
                    62:07:3e:20:13:fa:58:c3:b8:27:cb:b1:e7:ed:43:
                    c0:af:f2:9b:35:88:2e:e5:af:c4:b5:df:82:e5:44:
                    f4:22:fa:29:bf:d9:86:2b:58:e5:9b:ff:d3:94:a9:
                    81:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:69:E9:F4:78:A7:63:D1:40:EE:2B:7A:E0:D5:43:D0:44:90:CF:E2
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32342d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:62:55:7f:91:84:6f:b7:21:62:be:a7:74:0b:fe:f3:76:0f:
         ca:3a:00:45:fb:c0:69:45:53:50:74:cb:74:ad:0b:61:4c:6f:
         7b:43:b0:f8:73:bb:be:10:f2:78:78:b2:c8:78:70:28:99:63:
         cc:19:98:90:b1:83:1b:ae:c8:7b:f7:b0:7c:fb:5d:70:c3:44:
         ed:36:e8:80:21:e4:54:74:ba:35:73:17:bf:a9:52:84:5f:14:
         6d:7b:67:4b:12:3f:b5:a3:90:21:38:a6:34:4f:42:06:1d:73:
         14:e2:69:ff:f6:b7:2c:1b:8a:a5:b9:8a:e6:e1:10:91:1f:69:
         3c:90:cb:7e:d6:38:83:eb:d9:63:11:2e:4d:42:12:aa:1e:9b:
         96:79:6a:77:45:a9:03:43:b8:46:4a:68:2e:8b:d6:b7:a6:6c:
         c9:51:39:97:1b:5c:c6:03:4f:1f:45:ce:09:a1:5d:66:a9:43:
         68:26:c7:48:b1:08:1d:75:45:2d:33:c9:84:e6:47:5a:ac:f4:
         18:08:d9:49:6e:0f:7b:31:8a:be:5e:90:2e:96:ab:43:29:4e:
         98:d0:dd:72:d6:f5:29:3a:15:4f:37:6d:30:57:91:5c:0a:be:
         29:ac:49:d4:79:c0:49:3f:05:20:78:8e:c9:02:0f:60:6f:74:
         3d:4e:48:51
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUe7hNKu6V79y5JTDRkAGR6FguDsYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNEQ0I2QjgzODdBODdBMTQ1QkRERjk3Rjc4RTAzNTlF
QzRGRDNGQTAeFw0yMzA5MTIxMTAyMzJaFw0yNDA5MTAxMTA3MzJaMDMxMTAvBgNV
BAMTKDAxNjlFOUY0NzhBNzYzRDE0MEVFMkI3QUUwRDU0M0QwNDQ5MENGRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqrX/LGZVmWoXH93j1KwC0FkjV
MhrbAD9dUAYhxuzYHn/F6BNJ/WMOyJbSDpZv9FxiUGq2hxrhHVITjdLllTYeXFhO
iJORMfUcnT0kebaEv72ONw7IOl9ETkCMopNV4aA0Icz8z2oaC6peSYKsCpRCyv9x
XlHPsqzPvZuiDO54WwnucHZMXidmAxYDzOzBOjZtDjUZOAGcHbyMCS3OQ33e5uRd
oMDdfDxOeEYTA8lo9tSMqL/P6nDjkK4eJdgAX1/72DbeKA9Hd228Rx0hK6mhiGIH
PiAT+ljDuCfLseftQ8Cv8ps1iC7lr8S134LlRPQi+im/2YYrWOWb/9OUqYH1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAWnp9HinY9FA7it64NVD0ESQz+IwHwYDVR0j
BBgwFoAUA9y2uDh6h6FFvd+X944DWexP0/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFE
VnMvMC8wM0RDQjZCODM4N0E4N0ExNDVCRERGOTdGNzhFMDM1OUVDNEZEM0ZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAzRENCNkI4Mzg3QTg3QTE0
NUJEREY5N0Y3OEUwMzU5RUM0RkQzRkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RITVFQQjdLRlREM1JXblFNUUR6a1hTcDJmQ1Foa0VGWlNLM05ZbzVRRFZzLzAv
MzEzODM5MmUzODM0MmUzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMz
MzQzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvVQsMA0GCSqGSIb3DQEBCwUAA4IBAQCzYlV/kYRv
tyFivqd0C/7zdg/KOgBF+8BpRVNQdMt0rQthTG97Q7D4c7u+EPJ4eLLIeHAomWPM
GZiQsYMbrsh797B8+11ww0TtNuiAIeRUdLo1cxe/qVKEXxRte2dLEj+1o5AhOKY0
T0IGHXMU4mn/9rcsG4qluYrm4RCRH2k8kMt+1jiD69ljES5NQhKqHpuWeWp3RakD
Q7hGSmgui9a3pmzJUTmXG1zGA08fRc4JoV1mqUNoJsdIsQgddUUtM8mE5kdarPQY
CNlJbg97MYq+XpAulqtDKU6Y0N1y1vUpOhVPN20wV5FcCr4prEnUecBJPwUgeI7J
Ag9gb3Q9TkhR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org