Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34362e302f32342d3234203d3e20323730353339.roa
File:                     3138392e38342e34362e302f32342d3234203d3e20323730353339.roa (raw, json)
Hash identifier:          3BDjxt+HXJk3qjjbm58DbSbn+dD2vOU2gKGWL3TxHmA=
Subject key identifier:   C9:E9:7D:95:A7:FF:A7:23:82:A3:58:C3:AC:C6:49:69:DF:1B:95:2C
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       4205510D231FC13042D40F343C3D269B883A87CF
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34362e302f32342d3234203d3e20323730353339.roa
Signing time:             Tue 12 Sep 2023 09:38:15 +0000
ROA not before:           Tue 12 Sep 2023 09:33:15 +0000
ROA not after:            Tue 10 Sep 2024 09:38:15 +0000
asID:                     270539
IP address blocks:        189.84.46.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:05:51:0d:23:1f:c1:30:42:d4:0f:34:3c:3d:26:9b:88:3a:87:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Sep 12 09:33:15 2023 GMT
            Not After : Sep 10 09:38:15 2024 GMT
        Subject: CN=C9E97D95A7FFA72382A358C3ACC64969DF1B952C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:be:4d:c7:ad:fd:ba:63:b7:77:4d:b8:a0:
                    79:ef:0e:89:1d:6a:d1:13:5e:55:4e:b0:65:8d:39:
                    9a:7f:da:e4:48:18:3a:1e:b2:7a:06:63:e9:07:59:
                    13:93:28:e4:23:c5:ec:62:6b:66:8e:3a:6f:83:bb:
                    06:fa:89:9f:02:99:95:9e:85:9d:db:0c:dc:34:9a:
                    89:c9:32:ce:20:5a:6a:db:36:50:4a:93:8f:86:0e:
                    6d:5d:a6:3c:c7:8e:35:f6:fc:38:aa:55:cb:3e:31:
                    de:f5:a3:48:0a:1a:8e:0d:32:4d:be:9f:2f:6a:e5:
                    0c:0b:51:27:ff:db:09:97:a5:d6:82:32:15:8a:e6:
                    c7:76:73:7d:6a:b8:3f:77:38:1a:3f:78:cb:6a:3c:
                    4f:dd:1d:f4:d7:3e:37:2a:d8:aa:99:17:16:ad:d7:
                    53:13:d0:2f:60:e6:0f:a4:a5:5c:f8:38:18:66:02:
                    a2:41:2b:d9:70:6e:ea:7c:81:d4:16:5c:f0:cd:c0:
                    a6:b1:a9:8e:a8:9d:ea:ed:41:1d:73:ac:a0:1b:6f:
                    05:ef:13:89:af:23:21:89:eb:b0:b6:02:50:b5:cc:
                    67:52:72:8a:f1:c5:e4:65:7a:c7:4a:da:5b:b0:8c:
                    e2:a2:80:38:df:a6:ea:30:8d:fe:d6:54:39:e6:93:
                    c7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E9:7D:95:A7:FF:A7:23:82:A3:58:C3:AC:C6:49:69:DF:1B:95:2C
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34362e302f32342d3234203d3e20323730353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:2a:76:ae:8c:2c:42:c7:3e:23:0d:bb:ba:ae:3e:9e:ba:87:
         b6:76:28:cb:5e:4a:c4:b0:c2:42:4f:4a:62:34:1a:f7:4b:f6:
         09:43:57:85:96:52:29:b9:a7:db:c8:a3:6a:df:0f:3d:13:e8:
         91:a4:cc:82:ca:44:89:21:e5:61:ac:65:58:84:5e:9b:64:24:
         79:86:1d:c0:26:10:82:ed:16:e4:e8:1a:05:0f:89:57:c0:76:
         a1:d0:51:9a:70:47:76:67:d4:92:bf:e7:95:15:9e:9f:df:f0:
         fa:d3:a6:b8:a6:02:14:12:02:a2:d6:50:45:80:32:3c:b1:78:
         b4:10:6a:1a:f5:fd:ce:0b:68:ea:de:29:c9:de:7e:1a:eb:ea:
         3e:45:8a:db:b9:99:aa:f5:b5:9a:16:ba:05:10:49:5b:89:11:
         61:fe:b6:aa:e5:e1:cc:5d:f0:ec:3b:89:68:f0:dc:1b:d5:03:
         f5:5d:b7:30:07:b3:ca:b2:fd:a3:51:4c:7d:67:8c:18:1b:e2:
         74:76:d0:7e:48:0d:bc:8a:0d:94:aa:a5:64:56:89:f4:3f:30:
         ef:65:a9:d4:a4:02:35:f4:98:fd:f8:71:fa:67:a4:89:63:ca:
         64:e8:24:13:2c:3e:48:52:9b:e0:48:34:71:8c:a8:db:c3:b9:
         92:4a:28:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org