Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32342d3234203d3e20323730353339.roa
File:                     3138392e38342e34342e302f32342d3234203d3e20323730353339.roa (raw, json)
Hash identifier:          61B+B3W9URZjCLQxjeDMLwcQELuLtYxp9/A2va6TX6c=
Subject key identifier:   18:8B:0F:04:D4:65:08:07:EB:21:31:61:6F:5C:49:EB:64:B9:A2:E7
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       5556AC0DB3FEDCA822EEA88AEF8D1454CFE1A53A
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32342d3234203d3e20323730353339.roa
Signing time:             Tue 12 Sep 2023 09:38:14 +0000
ROA not before:           Tue 12 Sep 2023 09:33:14 +0000
ROA not after:            Tue 10 Sep 2024 09:38:14 +0000
asID:                     270539
IP address blocks:        189.84.44.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:56:ac:0d:b3:fe:dc:a8:22:ee:a8:8a:ef:8d:14:54:cf:e1:a5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Sep 12 09:33:14 2023 GMT
            Not After : Sep 10 09:38:14 2024 GMT
        Subject: CN=188B0F04D4650807EB2131616F5C49EB64B9A2E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:45:1f:ab:93:a6:bc:7b:36:b9:eb:aa:f6:
                    ec:9a:2b:0c:b8:f0:d3:9c:c6:2b:10:bb:fa:dd:d9:
                    a4:9f:20:88:c0:89:7b:a0:99:55:28:a4:2c:99:7d:
                    6f:42:c6:34:05:1d:26:93:c2:26:fb:7d:d5:cf:83:
                    77:46:e4:78:c1:0a:45:77:3f:0f:b9:06:09:68:7b:
                    b6:26:63:91:f6:89:ff:71:62:24:b3:a2:68:c7:c7:
                    a8:ef:2f:71:17:27:52:29:ec:66:ed:5c:7d:cf:89:
                    ac:8a:f2:19:2d:51:41:10:ee:bd:cd:bc:21:49:d2:
                    1e:ae:e9:01:b7:fa:a5:6b:93:3b:a1:08:bb:c7:50:
                    45:a6:d7:63:44:17:a0:46:46:ca:dc:13:a8:0d:fb:
                    94:c8:a4:1b:c4:6d:e8:9a:91:bf:7b:9c:a5:5a:5e:
                    b3:4f:33:84:7c:1b:6c:61:25:82:6f:4c:4e:1d:b8:
                    82:59:fa:57:f7:b0:c9:50:72:c8:36:aa:c3:03:6b:
                    0a:26:a1:a5:75:6b:cb:31:43:1e:d3:c5:af:cd:91:
                    d9:16:f9:35:1d:5c:ce:52:9f:14:cd:ee:eb:c3:11:
                    b5:8f:cf:9d:c9:00:b7:80:91:1a:d4:98:d2:d0:9d:
                    a4:2f:54:92:47:7e:eb:c3:45:bf:c0:2c:4f:33:f6:
                    a3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8B:0F:04:D4:65:08:07:EB:21:31:61:6F:5C:49:EB:64:B9:A2:E7
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34342e302f32342d3234203d3e20323730353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:4e:92:9c:39:95:80:65:60:00:d0:1e:5c:03:cd:f3:12:f4:
         51:a9:92:ed:d9:90:41:5a:4f:cd:7c:f1:dc:77:7e:1f:e3:4a:
         cf:cb:dc:82:3a:53:b5:64:c4:0f:e9:e8:00:49:09:8e:52:9b:
         c6:0b:68:e8:0f:f2:d4:c7:c8:0c:95:b5:89:83:f1:5d:82:cb:
         42:8d:88:5b:2f:44:b6:9b:f2:3d:01:9c:19:de:87:d8:b6:c9:
         2e:66:cd:08:c0:4e:34:d6:0e:2c:7f:77:91:f9:6e:61:10:59:
         0a:d9:87:39:fd:34:b4:dd:6a:ee:42:27:5c:fa:9c:aa:6f:3d:
         d8:07:14:5a:4a:e4:4f:a6:65:5a:56:a0:ea:93:fc:32:5f:f8:
         b7:fc:e1:5d:64:77:4f:ac:ca:f5:aa:29:41:2c:6e:ef:13:e9:
         22:12:fc:9b:ed:8e:05:57:c8:36:92:70:76:ea:c2:dd:c3:04:
         ef:15:ff:e3:07:40:62:32:aa:a5:94:d1:cf:53:36:96:8f:be:
         f6:3f:8d:f1:71:99:f5:65:b0:1e:7e:74:81:f3:ac:66:73:ec:
         e1:4d:1f:1b:f0:01:10:53:ce:6a:13:12:f5:c2:28:46:b4:d3:
         74:00:25:68:87:20:32:df:f3:64:31:30:c8:19:1b:11:e6:ce:
         1c:34:c9:9c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVVasDbP+3Kgi7qiK740UVM/hpTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNEQ0I2QjgzODdBODdBMTQ1QkRERjk3Rjc4RTAzNTlF
QzRGRDNGQTAeFw0yMzA5MTIwOTMzMTRaFw0yNDA5MTAwOTM4MTRaMDMxMTAvBgNV
BAMTKDE4OEIwRjA0RDQ2NTA4MDdFQjIxMzE2MTZGNUM0OUVCNjRCOUEyRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9bkUfq5OmvHs2ueuq9uyaKwy4
8NOcxisQu/rd2aSfIIjAiXugmVUopCyZfW9CxjQFHSaTwib7fdXPg3dG5HjBCkV3
Pw+5Bgloe7YmY5H2if9xYiSzomjHx6jvL3EXJ1Ip7GbtXH3PiayK8hktUUEQ7r3N
vCFJ0h6u6QG3+qVrkzuhCLvHUEWm12NEF6BGRsrcE6gN+5TIpBvEbeiakb97nKVa
XrNPM4R8G2xhJYJvTE4duIJZ+lf3sMlQcsg2qsMDawomoaV1a8sxQx7Txa/NkdkW
+TUdXM5SnxTN7uvDEbWPz53JALeAkRrUmNLQnaQvVJJHfuvDRb/ALE8z9qMNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGIsPBNRlCAfrITFhb1xJ62S5oucwHwYDVR0j
BBgwFoAUA9y2uDh6h6FFvd+X944DWexP0/owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREhNUVBCN0tGVEQzUlduUU1RRHprWFNwMmZDUWhrRUZaU0szTllvNVFE
VnMvMC8wM0RDQjZCODM4N0E4N0ExNDVCRERGOTdGNzhFMDM1OUVDNEZEM0ZBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAzRENCNkI4Mzg3QTg3QTE0
NUJEREY5N0Y3OEUwMzU5RUM0RkQzRkEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RITVFQQjdLRlREM1JXblFNUUR6a1hTcDJmQ1Foa0VGWlNLM05ZbzVRRFZzLzAv
MzEzODM5MmUzODM0MmUzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMw
MzUzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvVQsMA0GCSqGSIb3DQEBCwUAA4IBAQAGTpKcOZWA
ZWAA0B5cA83zEvRRqZLt2ZBBWk/NfPHcd34f40rPy9yCOlO1ZMQP6egASQmOUpvG
C2joD/LUx8gMlbWJg/FdgstCjYhbL0S2m/I9AZwZ3ofYtskuZs0IwE401g4sf3eR
+W5hEFkK2Yc5/TS03WruQidc+pyqbz3YBxRaSuRPpmVaVqDqk/wyX/i3/OFdZHdP
rMr1qilBLG7vE+kiEvyb7Y4FV8g2knB26sLdwwTvFf/jB0BiMqqllNHPUzaWj772
P43xcZn1ZbAefnSB86xmc+zhTR8b8AEQU85qExL1wihGtNN0ACVohyAy3/NkMTDI
GRsR5s4cNMmc
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org