Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34372e302f32342d3234203d3e20323633343832.roa
File:                     3138392e38342e34372e302f32342d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          DZsvFZonveLn12V1zq2OStOChymm8qU7RvsTM7Xc6Ao=
Subject key identifier:   78:6A:CF:5E:6D:F0:80:81:92:1C:D3:3F:76:5A:25:4D:2E:B8:F8:ED
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       459BB4B16F44E9AD2CD4736E99F0EC5F8DA1EF4D
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34372e302f32342d3234203d3e20323633343832.roa
Signing time:             Tue 12 Sep 2023 11:07:11 +0000
ROA not before:           Tue 12 Sep 2023 11:02:11 +0000
ROA not after:            Tue 10 Sep 2024 11:07:11 +0000
asID:                     263482
IP address blocks:        189.84.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9b:b4:b1:6f:44:e9:ad:2c:d4:73:6e:99:f0:ec:5f:8d:a1:ef:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Sep 12 11:02:11 2023 GMT
            Not After : Sep 10 11:07:11 2024 GMT
        Subject: CN=786ACF5E6DF08081921CD33F765A254D2EB8F8ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7e:52:3e:dd:42:7f:bd:a8:5e:04:cd:ec:ac:
                    1e:5d:d8:8b:e6:1a:0b:d9:94:f1:a2:9e:6a:87:4d:
                    f2:44:46:62:45:08:13:e2:04:b5:78:fd:46:3d:10:
                    cf:ad:67:a4:7d:37:20:a6:21:65:04:05:4d:b8:a9:
                    fe:d3:e2:8d:0b:b0:95:5b:ba:40:d1:08:79:b7:fc:
                    72:1a:e0:c1:ea:3a:c0:22:fc:33:48:93:fe:f1:48:
                    09:53:f7:f2:1d:69:7c:0b:ed:ba:ba:70:2d:ca:b8:
                    ca:12:1e:d9:52:45:ec:59:39:8c:67:18:97:6e:14:
                    e2:8b:2c:00:96:25:8f:f9:dd:c4:4f:b4:7d:58:b3:
                    f5:71:df:ea:11:8d:a8:de:79:0c:2f:9c:95:94:3f:
                    56:4f:d0:99:f4:00:93:e6:61:65:91:4d:75:32:e6:
                    7f:cf:a7:08:e7:5d:eb:72:1b:fa:b6:70:c3:1a:25:
                    0a:9b:ff:c5:39:88:0d:9d:43:e2:7e:26:27:65:7f:
                    da:e0:cf:15:a9:87:b4:9c:90:5f:dd:c8:13:01:30:
                    38:a6:e8:ac:ab:8b:31:f3:c6:85:25:83:68:4f:3e:
                    fd:78:ea:06:94:27:74:76:05:93:5c:c4:89:3d:fd:
                    c7:6f:2a:fc:e0:8f:6e:87:4c:38:7b:b2:22:6d:96:
                    ae:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6A:CF:5E:6D:F0:80:81:92:1C:D3:3F:76:5A:25:4D:2E:B8:F8:ED
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34372e302f32342d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:14:55:12:02:2b:a7:ac:ea:e9:27:cf:cb:33:65:2b:e4:04:
         88:60:11:44:c7:93:4f:41:0e:6a:0b:7e:55:35:46:f5:cb:f1:
         7a:d0:13:7b:d8:4e:77:b8:67:9e:2b:76:d7:7f:25:48:dd:58:
         a7:f8:17:51:15:cd:7b:7b:16:5d:f8:4e:83:05:0a:e6:7d:d6:
         f3:b6:b4:db:19:af:79:57:56:07:dc:3d:78:4e:a6:39:32:47:
         52:4b:ed:fb:ab:c9:e3:b8:0f:75:d9:6b:43:8c:17:78:44:87:
         8b:44:89:5d:df:d8:de:4b:91:cc:c9:cf:72:46:ab:e5:ff:90:
         5c:f1:80:e0:63:b8:c3:43:e9:5d:b1:18:09:17:46:6c:5c:15:
         f0:0f:c5:26:10:54:78:50:4b:3f:7a:94:00:72:1f:9e:90:d9:
         d8:a6:2e:b3:76:93:28:3e:b2:9c:35:b5:6e:5b:f6:1a:88:5e:
         43:6b:c8:6e:91:fb:f4:2a:ef:62:47:ed:e7:cb:70:f2:c4:4e:
         3e:fa:fd:8d:3a:ca:27:6e:74:3c:dd:ff:c4:3b:14:e0:c3:80:
         72:60:60:ca:8b:df:d7:89:fa:0e:63:5f:6c:ac:e6:93:e5:8e:
         7b:72:c0:8d:fe:eb:ed:ce:4e:ef:48:48:4b:c7:f2:41:25:4c:
         93:2e:31:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org