Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3232203d3e20323032.roa
File:                     3139312e3234322e3231362e302f32322d3232203d3e20323032.roa (raw, json)
Hash identifier:          1IRX2wbjkVjmQySoDZZQGVv1/S1z5oucjJvr78uB2/w=
Subject key identifier:   20:A1:85:FC:13:06:88:FF:34:09:EA:21:E1:B3:E7:05:E3:D8:06:DC
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       67F63EE6217C82DC5145F685CD84AD1EE57CA950
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3232203d3e20323032.roa
Signing time:             Fri 19 May 2023 15:41:50 +0000
ROA not before:           Fri 19 May 2023 15:36:50 +0000
ROA not after:            Fri 17 May 2024 15:41:50 +0000
asID:                     202
IP address blocks:        191.242.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f6:3e:e6:21:7c:82:dc:51:45:f6:85:cd:84:ad:1e:e5:7c:a9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: May 19 15:36:50 2023 GMT
            Not After : May 17 15:41:50 2024 GMT
        Subject: CN=20A185FC130688FF3409EA21E1B3E705E3D806DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ea:52:be:1c:db:ba:43:56:54:d5:2d:0b:0a:
                    4a:84:02:3a:2f:c2:e5:71:ea:cd:05:f3:8b:1c:7c:
                    90:47:2e:cb:64:36:9a:2e:8b:ce:47:07:d8:5a:af:
                    5a:7e:0b:f0:74:e5:bc:fd:19:d0:93:e2:42:9f:44:
                    53:1d:7d:e0:0b:92:c8:fa:d9:5a:6b:bd:32:1f:79:
                    62:2f:fb:1e:dc:88:cc:11:15:43:e1:61:32:d3:3f:
                    06:4f:33:70:54:8a:49:02:3f:9d:70:bf:02:31:10:
                    70:68:28:ac:66:18:be:e6:a4:89:74:72:f8:d3:48:
                    ee:94:50:83:0d:8d:41:8b:11:88:4a:08:c9:96:1b:
                    4a:95:3a:58:f6:30:e1:c1:6f:1a:3c:c1:b2:67:45:
                    c6:b0:65:1b:b8:36:52:1a:4e:0e:e6:3c:5b:36:4f:
                    0a:15:9a:60:de:a8:56:ad:28:76:ea:28:12:37:40:
                    9a:de:0e:7d:6d:5a:58:1b:41:78:df:74:f4:f6:2a:
                    33:ed:d2:b2:67:cb:68:03:12:01:41:7e:3c:de:1c:
                    0c:91:2b:5b:80:7b:90:b6:40:04:d6:c3:e5:9c:b1:
                    81:f8:17:60:be:b3:df:8f:c5:54:b8:b4:0c:ca:48:
                    81:01:a3:50:32:0e:f6:20:a8:dc:b7:57:cd:8f:f3:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A1:85:FC:13:06:88:FF:34:09:EA:21:E1:B3:E7:05:E3:D8:06:DC
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3232203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:1b:76:f4:57:61:79:77:96:13:93:71:9b:33:2c:ef:b9:3e:
         5e:ce:35:e2:6d:be:de:11:68:a7:ab:d3:bd:fb:6f:c5:40:a4:
         ce:fe:91:a7:04:cf:7e:7f:a0:78:ae:ef:01:98:c0:e9:cf:e0:
         8a:9b:2d:9a:31:e0:50:7a:75:a6:cc:40:6d:e2:ff:93:ef:4c:
         66:ed:a3:fd:85:0f:f0:b9:3e:2d:f6:6c:0c:bc:28:59:b8:e8:
         a3:c7:be:aa:5d:de:0d:2e:0a:c5:f0:19:6f:7e:e9:93:10:49:
         ce:0c:42:eb:6f:e5:3b:44:7d:8d:e9:33:58:f3:14:c4:e5:7c:
         db:f4:62:9d:48:68:03:ef:d4:91:29:00:e0:ae:23:47:7f:b4:
         3c:a4:12:80:bb:8a:1b:01:a8:18:02:77:5b:1a:10:3b:97:47:
         d1:08:49:1a:16:de:cc:15:01:35:ad:36:f7:d4:56:d7:51:aa:
         af:fe:28:0f:27:d6:e5:ba:2a:de:a2:49:40:e5:84:0e:4e:01:
         28:03:cf:43:7d:2c:02:fd:69:84:0f:4c:12:a4:32:40:2e:81:
         8c:44:df:a1:11:7e:cc:96:af:98:24:cf:44:b5:00:8f:fd:dc:
         07:87:b1:1f:c2:c7:cc:80:91:d5:97:74:2b:19:63:16:83:80:
         be:0a:46:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org