Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34372e302f32342d3234203d3e20323730353339.roa
File:                     3138392e38342e34372e302f32342d3234203d3e20323730353339.roa (raw, json)
Hash identifier:          wWt8YRBhKdffGK7kN0XOwH8VsDWg7/9dAuIoigZ+VkE=
Subject key identifier:   B7:40:93:8F:2C:0C:C1:88:07:17:DB:99:1C:14:E5:99:57:32:B2:A5
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       29D283C657C3B16D29C72C4E1FC2D9F2775ED5EE
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34372e302f32342d3234203d3e20323730353339.roa
Signing time:             Tue 12 Sep 2023 09:38:14 +0000
ROA not before:           Tue 12 Sep 2023 09:33:14 +0000
ROA not after:            Tue 10 Sep 2024 09:38:14 +0000
asID:                     270539
IP address blocks:        189.84.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d2:83:c6:57:c3:b1:6d:29:c7:2c:4e:1f:c2:d9:f2:77:5e:d5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Sep 12 09:33:14 2023 GMT
            Not After : Sep 10 09:38:14 2024 GMT
        Subject: CN=B740938F2C0CC1880717DB991C14E5995732B2A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:de:e3:2e:4e:98:78:d1:46:08:4d:87:96:
                    ba:38:c9:f9:b1:0a:fe:b5:6b:ce:61:0e:38:b7:b4:
                    c7:14:4f:04:82:bb:70:af:cd:5c:a8:72:a0:33:29:
                    fa:f7:a1:27:96:e7:05:1e:f4:fc:be:28:6d:b7:0c:
                    98:5a:46:a0:4c:59:80:99:89:15:88:d0:43:4b:84:
                    60:0a:21:ba:01:47:90:86:59:60:71:eb:a4:b9:93:
                    70:26:f1:56:36:57:ac:b6:ff:2a:df:83:f6:c4:f0:
                    fa:a0:54:02:19:3f:01:dc:e0:0b:d3:98:e3:fc:02:
                    d3:db:14:a5:82:33:26:01:11:5f:a1:85:a7:85:98:
                    0a:c9:82:e1:ae:a9:7d:77:fd:20:3a:b5:6d:67:49:
                    5d:51:40:1b:93:d1:f8:d4:00:f0:64:8c:06:56:e8:
                    f3:22:2b:75:e2:b1:a4:a2:03:06:2b:c1:18:16:fa:
                    d8:7c:08:82:11:ef:f9:1a:85:94:ec:cf:88:bb:e6:
                    55:99:b3:31:6a:17:d9:6a:23:fa:9a:cf:3e:32:ff:
                    95:5a:2b:19:64:77:c5:f0:9f:12:56:ce:eb:9a:b6:
                    58:af:20:a4:1e:b2:71:0a:bf:c9:13:0c:71:0f:54:
                    d9:11:7f:3a:a3:79:7c:95:ba:9b:73:f2:26:dc:11:
                    6d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:40:93:8F:2C:0C:C1:88:07:17:DB:99:1C:14:E5:99:57:32:B2:A5
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3138392e38342e34372e302f32342d3234203d3e20323730353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:11:73:e7:53:37:54:4a:5a:3b:9a:16:15:d6:fd:6c:e9:a8:
         d6:63:db:1e:3c:3e:9b:e7:83:5c:43:98:d2:8d:a4:be:3b:51:
         f7:f7:2d:5a:59:14:ef:24:7e:ba:f5:59:83:df:c3:20:52:5f:
         98:a3:f2:a0:61:a4:18:bf:96:36:94:e4:95:76:57:f4:0d:fd:
         f3:9a:0b:33:47:84:16:1c:f9:6f:21:d1:a1:11:0d:c3:6e:ea:
         e5:db:3f:8d:10:88:b9:5b:81:65:04:f3:4e:ff:c3:45:d4:a7:
         c8:bd:b9:ad:fe:b8:6e:9b:78:f1:73:8b:fe:b7:fa:96:1a:5f:
         86:89:c8:53:e9:8d:6c:40:e4:89:a0:7a:40:09:42:db:05:bd:
         81:8f:b6:2a:53:33:dd:98:87:eb:cd:75:62:11:6a:d3:4d:98:
         ec:30:83:4e:de:d0:a1:07:9b:19:45:f2:79:2d:e6:5f:a7:39:
         0f:ec:d4:89:01:73:53:e5:15:70:7e:06:ff:3c:52:14:12:1f:
         17:e3:ee:37:37:f8:c5:64:27:a5:c5:e2:86:56:cf:c7:76:64:
         05:df:64:ae:37:6f:7c:8b:df:58:f2:1d:e9:9d:bf:80:cd:10:
         e2:c8:45:d1:35:a2:d8:fe:19:47:f4:5a:c8:72:0a:79:14:f8:
         05:34:81:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org