Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34352e302f32342d3234203d3e20323730353339.roa
File:                     3138392e38342e34352e302f32342d3234203d3e20323730353339.roa (raw, json)
Hash identifier:          W4NnetLvREtOgtN/0O5OVYa8GDZ61Q6/A4HZfaYY5J4=
Subject key identifier:   E6:9C:FF:5F:68:75:37:09:8F:AE:58:DB:27:D1:93:72:FC:CD:E6:C9
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       38150D72C799C9C88901CC11785128FE5F90C337
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34352e302f32342d3234203d3e20323730353339.roa
Signing time:             Tue 12 Sep 2023 09:38:15 +0000
ROA not before:           Tue 12 Sep 2023 09:33:15 +0000
ROA not after:            Tue 10 Sep 2024 09:38:15 +0000
asID:                     270539
IP address blocks:        189.84.45.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:15:0d:72:c7:99:c9:c8:89:01:cc:11:78:51:28:fe:5f:90:c3:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Sep 12 09:33:15 2023 GMT
            Not After : Sep 10 09:38:15 2024 GMT
        Subject: CN=E69CFF5F687537098FAE58DB27D19372FCCDE6C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:92:b9:d2:81:6c:3a:30:98:62:e4:3b:12:
                    b7:60:2b:84:e6:87:0c:3f:42:c2:ab:1d:74:7f:3c:
                    68:33:16:66:ad:25:c1:aa:6d:5e:a9:20:43:b6:cb:
                    65:57:b7:7e:f9:4b:d5:6a:a0:70:be:d5:6f:03:12:
                    33:29:a5:fe:d3:3f:da:46:aa:93:a2:8e:ec:6a:fd:
                    7f:99:46:b1:43:64:bd:54:35:4c:a5:37:bf:d1:8f:
                    25:0f:78:79:75:7c:1f:c2:d1:f1:10:07:31:41:23:
                    c1:fc:8b:05:3a:58:61:54:f9:6e:ae:47:11:4f:e2:
                    18:a0:d9:6a:87:ad:2d:c4:07:5e:e7:9f:6a:c2:bb:
                    43:3a:8b:06:a6:47:73:21:62:b0:0a:05:93:50:09:
                    3e:bd:c3:b7:98:39:25:b6:d1:77:f0:80:fa:bd:0d:
                    52:3c:b1:66:59:91:36:c8:48:e2:2a:f4:db:ad:a0:
                    d7:a4:15:d1:5c:25:00:97:41:e2:38:67:e0:6c:9f:
                    0b:6c:6e:36:c8:0c:52:d2:13:d4:7a:58:83:bf:0d:
                    8b:51:ee:cb:33:41:45:8e:ae:75:6e:3d:69:88:97:
                    40:14:bf:ab:84:f0:05:20:01:d1:c6:6c:4b:a3:5f:
                    74:dc:a8:83:12:db:d7:0e:1f:3b:21:9e:0c:4c:3c:
                    dc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:9C:FF:5F:68:75:37:09:8F:AE:58:DB:27:D1:93:72:FC:CD:E6:C9
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34352e302f32342d3234203d3e20323730353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:3d:34:bb:4d:90:72:55:5e:82:d1:24:15:1f:b4:ec:5a:52:
         57:00:1e:46:0a:93:e2:4a:7d:5f:45:3b:1f:e3:df:d6:15:1f:
         08:68:a9:aa:07:27:49:8f:eb:24:86:cc:8c:84:82:68:cc:cf:
         af:d8:67:9b:0b:5b:6a:aa:f3:89:83:e8:0e:28:3c:42:a6:81:
         a0:19:3c:e3:0a:a4:8c:21:a5:83:82:61:92:6d:40:e5:bd:61:
         f5:97:de:3f:3c:66:a8:2e:4e:9a:8a:9d:b4:41:11:6d:aa:8e:
         8d:5d:e5:45:c0:e2:82:53:ae:a9:fe:0e:cc:0d:dd:e0:d9:17:
         27:b9:ed:76:fa:2c:58:e7:b5:53:4e:95:32:b5:60:a9:0f:b6:
         aa:38:22:6d:60:63:92:f8:80:3c:b8:88:25:40:c7:23:a6:98:
         05:6f:ea:9c:4f:85:41:03:92:36:f9:cd:29:e5:d8:0f:18:3e:
         55:6a:b3:c9:65:b0:c4:1f:f9:c5:9b:8d:b3:3f:2c:b6:39:9e:
         0d:1a:74:f3:4a:6e:13:3f:eb:7c:cf:c1:e1:eb:f0:4e:6e:65:
         57:47:21:87:0a:76:40:77:e6:64:a2:7a:38:cb:ec:11:1e:2c:
         fb:18:8d:5b:23:47:4d:6c:17:7e:0d:5e:d4:2b:01:91:10:6c:
         5c:a7:84:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org