Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34362e302f32342d3234203d3e20323633343832.roa
File:                     3138392e38342e34362e302f32342d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          f2n20pZ/AovGx5U7V1bSYXGoVj5DEY7dnYHWLm07xGw=
Subject key identifier:   B0:D5:01:CB:4C:83:9D:E0:C5:90:5D:2A:48:95:43:9E:07:6C:10:4B
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       677F938F029047CCF3642FF68B4500BAF5BC957E
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34362e302f32342d3234203d3e20323633343832.roa
Signing time:             Tue 12 Sep 2023 11:07:43 +0000
ROA not before:           Tue 12 Sep 2023 11:02:43 +0000
ROA not after:            Tue 10 Sep 2024 11:07:43 +0000
asID:                     263482
IP address blocks:        189.84.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7f:93:8f:02:90:47:cc:f3:64:2f:f6:8b:45:00:ba:f5:bc:95:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Sep 12 11:02:43 2023 GMT
            Not After : Sep 10 11:07:43 2024 GMT
        Subject: CN=B0D501CB4C839DE0C5905D2A4895439E076C104B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:52:11:7e:d8:f6:de:bd:61:84:69:05:c7:df:
                    ee:4a:56:11:0c:7f:ec:eb:75:6e:49:9a:ed:98:22:
                    ef:c3:16:fc:12:73:d2:5a:b1:e8:4a:15:1c:92:da:
                    39:b8:19:0d:ad:af:15:e5:86:9d:2c:37:a1:05:ff:
                    cb:04:46:30:9e:b7:a7:02:df:52:b9:c6:32:81:9a:
                    e0:68:de:32:40:b1:07:ff:3f:24:27:fd:d4:9d:6f:
                    10:91:9c:ff:c8:a9:f4:5a:4a:c9:16:cf:0e:e5:f6:
                    03:c0:e8:6d:ba:74:16:4f:5d:38:26:e5:fd:c4:27:
                    6f:f7:d9:f7:20:b2:3e:8e:3a:c9:a1:33:56:4a:ad:
                    bc:a6:78:4b:b5:9b:05:eb:29:6c:7d:71:96:3d:84:
                    a6:27:f9:a2:d5:80:4a:38:3b:91:c6:74:16:31:05:
                    3a:8f:45:f3:49:a0:b4:7f:44:37:ff:96:e2:4c:89:
                    2c:96:4b:ef:3f:3b:ce:79:49:07:ef:07:36:02:7b:
                    58:4c:ba:a6:f2:72:cc:2c:61:42:b5:a7:ec:17:45:
                    ab:4f:1c:f0:0d:47:af:1a:f0:49:a4:7c:07:aa:9d:
                    9f:9b:66:88:2c:d6:fc:32:bc:d3:9f:e5:2e:5a:77:
                    e2:b6:0b:d2:7c:71:27:d4:f2:f7:9c:de:fe:2e:22:
                    3f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D5:01:CB:4C:83:9D:E0:C5:90:5D:2A:48:95:43:9E:07:6C:10:4B
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34362e302f32342d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:36:8b:b1:cc:69:77:a6:d5:5e:58:c1:1e:73:1c:a0:36:35:
         ee:7b:b0:76:08:bb:39:ba:e5:b3:50:19:a4:28:d1:b3:5a:02:
         bd:2e:39:35:29:57:97:3b:09:ad:66:78:b9:f4:79:03:65:d7:
         7c:a8:3b:3d:8d:f9:72:ad:c1:15:10:32:71:76:fd:4f:dd:15:
         f7:87:60:08:ff:e6:de:51:a6:ba:81:3a:63:87:e3:c9:ec:40:
         11:02:80:44:e1:96:80:82:24:27:3b:e9:1f:d2:cb:0c:a8:70:
         02:0e:a5:10:39:a1:2b:e0:7b:6d:32:ef:21:50:ea:25:9c:0e:
         fa:b7:71:81:66:e6:cf:c8:ca:0b:f9:53:b2:15:7b:ef:ee:a3:
         a6:9d:87:a6:a8:f7:a9:94:2d:50:a8:fd:ba:96:a8:98:3f:19:
         fa:70:e8:a5:f1:8f:1d:b4:c8:5b:01:68:15:5f:ae:d1:89:a6:
         48:bc:7e:c7:ee:a4:00:a2:bc:c2:9e:e5:6c:6c:28:0c:c8:d6:
         81:4b:fa:a6:b8:fa:46:2a:b9:39:21:f6:28:98:fc:d6:36:7b:
         02:69:d5:39:f0:b6:5f:d9:da:a2:dc:28:4e:97:b7:22:58:19:
         55:a7:76:d7:3c:3d:e6:21:11:18:ae:06:f7:87:97:21:b1:b8:
         99:3c:81:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org