Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34362e302f32332d3233203d3e20323633343832.roa
File:                     3138392e38342e34362e302f32332d3233203d3e20323633343832.roa (raw, json)
Hash identifier:          XC8esm/W7eu7p/QwqJAxd8jvW0PdRfLIsC+O/qrI0nc=
Subject key identifier:   9E:25:35:A6:41:0B:A2:23:43:32:17:45:CF:6D:D5:22:CD:60:05:26
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       6703AB25B3BAC391B82787E7AD44413D7B31CE7E
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34362e302f32332d3233203d3e20323633343832.roa
Signing time:             Thu 19 Oct 2023 11:27:58 +0000
ROA not before:           Thu 19 Oct 2023 11:22:58 +0000
ROA not after:            Thu 17 Oct 2024 11:27:58 +0000
asID:                     263482
IP address blocks:        189.84.46.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:03:ab:25:b3:ba:c3:91:b8:27:87:e7:ad:44:41:3d:7b:31:ce:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Oct 19 11:22:58 2023 GMT
            Not After : Oct 17 11:27:58 2024 GMT
        Subject: CN=9E2535A6410BA22343321745CF6DD522CD600526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:11:e7:ae:5c:a6:ea:0c:b9:5b:31:6a:55:02:
                    b5:20:3b:d3:59:8d:ab:f8:bd:0b:ad:2c:63:78:aa:
                    2a:a6:57:4e:ed:02:93:1e:5a:9b:77:43:53:20:9c:
                    83:1e:62:45:00:6b:8a:35:d1:13:ae:72:6b:57:43:
                    4c:49:e4:41:d7:37:06:49:73:a0:f1:70:33:f6:1c:
                    f0:90:f1:2b:aa:ab:5b:d9:fa:b4:85:fd:54:70:bb:
                    62:55:ed:62:fb:1b:8b:0a:5d:76:a2:cb:e9:b5:a6:
                    3a:aa:57:5b:e2:60:3e:bf:28:d7:7c:ee:2b:4d:11:
                    a3:f8:11:54:10:88:af:a4:f0:e2:3e:eb:2b:90:43:
                    54:e5:9a:04:84:b8:9f:c6:54:23:cb:4e:27:0f:5c:
                    b1:6f:d5:a4:7d:57:0d:67:61:a4:c2:07:10:4d:e8:
                    9f:9f:96:fd:80:7b:59:32:b9:d7:f4:46:e7:cd:24:
                    b1:90:a4:20:25:2a:2c:7c:ca:a4:71:b7:a9:db:1f:
                    61:e2:b0:24:91:ed:7b:0e:fc:55:49:e9:d6:7c:95:
                    a0:09:1e:4e:3f:85:f0:b8:a3:f7:af:72:18:45:59:
                    ef:4e:40:1c:65:af:f0:3b:72:24:1f:47:bf:d8:bf:
                    96:16:e0:22:24:5f:a4:4a:74:f7:4e:69:fe:c2:48:
                    32:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:25:35:A6:41:0B:A2:23:43:32:17:45:CF:6D:D5:22:CD:60:05:26
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34362e302f32332d3233203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:d1:1d:18:92:12:e0:14:f8:07:6c:f4:7f:6f:2d:ed:71:9d:
         fa:76:f7:8b:63:c1:71:a9:e0:4e:b7:e8:02:97:d1:5e:9c:f0:
         b4:db:67:d6:38:14:85:81:9b:4e:ba:32:63:62:4c:45:5d:86:
         4b:40:70:59:21:a1:a0:3f:4d:88:5a:17:96:2f:2a:52:4d:c2:
         d6:ae:0a:3a:5e:f7:97:55:73:0c:03:8f:43:90:9b:72:dc:8d:
         ee:56:a9:0a:b7:a4:fb:3c:0c:9a:2a:fb:45:43:5f:f4:f5:fb:
         45:ea:b5:f2:b1:ae:93:e8:18:c7:ef:94:1c:e8:b5:b2:0c:3d:
         0b:ca:70:13:c3:a1:d6:93:d2:52:e1:b3:5d:61:de:22:9e:17:
         ea:38:d8:8f:40:db:2c:af:3b:ce:fc:41:c8:af:03:4a:9e:b1:
         e5:dd:90:a9:b5:e8:8b:8e:12:05:bc:f3:8d:d5:a4:8a:6b:dc:
         07:a1:a5:1c:47:e1:89:7c:e3:ba:c2:1d:1a:45:06:e5:0a:db:
         a4:59:d7:e5:f7:fc:e4:af:af:8e:fd:72:45:9b:8a:69:9a:be:
         c7:e6:6a:34:30:52:28:29:8e:19:9a:34:bf:bf:4a:82:27:eb:
         87:ad:64:e0:95:74:0b:29:b6:ff:d1:68:2b:c5:c8:d3:b2:f5:
         71:cb:21:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org