Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34352e302f32342d3234203d3e20323633343832.roa
File:                     3138392e38342e34352e302f32342d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          ZK0yr36V6XfOvY207me9V084Gtit+j8t1pSWg3p+uBA=
Subject key identifier:   B9:48:1F:C6:89:52:2C:AD:16:37:B4:4B:3E:A7:21:CF:64:7B:BF:62
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       3F09B588B525D23C34B38330E0140D1C301F5A58
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34352e302f32342d3234203d3e20323633343832.roa
Signing time:             Tue 12 Sep 2023 11:07:36 +0000
ROA not before:           Tue 12 Sep 2023 11:02:36 +0000
ROA not after:            Tue 10 Sep 2024 11:07:36 +0000
asID:                     263482
IP address blocks:        189.84.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:09:b5:88:b5:25:d2:3c:34:b3:83:30:e0:14:0d:1c:30:1f:5a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Sep 12 11:02:36 2023 GMT
            Not After : Sep 10 11:07:36 2024 GMT
        Subject: CN=B9481FC689522CAD1637B44B3EA721CF647BBF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fd:91:e6:23:ee:f8:1e:e3:85:98:8e:49:ce:
                    3a:77:88:fb:73:01:cc:0a:81:8d:fe:17:33:73:1f:
                    18:25:77:0b:f3:eb:d2:63:a7:ec:b8:b5:a4:f2:65:
                    08:71:02:01:10:74:57:fb:c8:52:cc:27:05:1d:4d:
                    f1:25:a0:59:b1:cc:75:42:c8:7a:cf:4f:cb:44:5f:
                    fb:54:85:7b:bf:f1:db:4c:d3:f8:98:0f:b1:82:e8:
                    43:7d:ef:27:e8:6f:86:79:77:00:03:e8:26:b2:2d:
                    a6:20:42:a5:0b:25:4e:6a:75:53:d3:50:80:30:39:
                    8a:54:b7:bf:a8:5b:1c:1b:58:84:f7:09:3c:55:d7:
                    62:7c:62:1c:ef:fb:5a:32:27:95:d5:86:6e:9b:68:
                    91:17:cf:0b:9a:6d:dc:f4:90:12:be:fa:79:2c:03:
                    22:39:e6:8a:c8:e7:fd:53:84:87:eb:8d:cc:de:ae:
                    6c:00:01:9c:1e:6b:19:5b:ee:13:31:b3:49:96:30:
                    b6:78:14:7c:b9:dc:74:d1:aa:5a:16:fb:e2:05:a1:
                    cd:7c:83:e0:d7:52:a8:ae:38:70:98:8a:89:bf:97:
                    9a:cd:42:1e:8e:45:33:25:8f:b4:49:59:56:38:b1:
                    15:6a:99:a7:39:b4:c6:f2:05:6b:46:af:c9:88:b9:
                    55:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:48:1F:C6:89:52:2C:AD:16:37:B4:4B:3E:A7:21:CF:64:7B:BF:62
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34352e302f32342d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:f9:34:d4:f6:15:06:9d:65:0e:bf:19:cb:4a:6c:e8:9e:fe:
         2e:73:c9:f3:50:20:0f:cd:9a:2d:1b:86:ea:bb:e4:f4:df:23:
         99:76:07:da:6b:7e:64:11:df:6a:aa:ae:cf:ef:72:d5:e4:65:
         b1:89:ad:59:85:18:f9:c3:16:d9:11:d9:01:76:28:ef:78:30:
         a2:8a:bc:52:4f:4b:67:51:89:5f:e5:ce:3b:43:4a:c3:d1:62:
         64:dc:99:5f:48:04:0c:d8:be:c8:ed:8a:0a:ba:e3:80:63:2e:
         33:3f:09:84:98:6e:91:af:13:32:ae:a2:46:14:8e:55:39:ac:
         60:aa:12:88:4d:7b:39:a8:45:de:24:57:3e:7a:a8:f6:96:92:
         f8:b9:c7:97:2b:2b:1b:81:28:d6:5a:03:bf:f7:df:88:46:51:
         db:60:63:bb:7e:92:db:92:a0:07:5a:74:f6:70:39:42:5f:e1:
         ea:aa:2f:e7:cd:14:89:ce:9d:77:1e:e6:2a:41:c7:36:85:74:
         62:5e:4b:c1:85:a5:73:0b:69:1d:ad:13:b6:ed:1b:85:66:78:
         c7:24:e2:d9:5c:10:40:3c:de:0b:6a:6f:63:75:f0:83:26:0e:
         13:43:e9:a4:6f:3f:44:a5:1e:b8:d4:ac:56:d8:35:b1:84:88:
         f3:d2:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org