Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3232203d3e20323033.roa
File:                     3139312e3234322e3231362e302f32322d3232203d3e20323033.roa (raw, json)
Hash identifier:          9wUvO3AEPlKEvwmot8CVPUUtKqmZJcZzdkduxNd0rcs=
Subject key identifier:   43:81:D5:F4:81:02:5D:29:FE:8F:0B:DB:80:28:69:C8:C0:E6:40:6C
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       7D16260B45EE710AEEFAF0CC5F536036926F3C54
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3232203d3e20323033.roa
Signing time:             Fri 19 May 2023 15:44:48 +0000
ROA not before:           Fri 19 May 2023 15:39:48 +0000
ROA not after:            Fri 17 May 2024 15:44:48 +0000
asID:                     203
IP address blocks:        191.242.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:16:26:0b:45:ee:71:0a:ee:fa:f0:cc:5f:53:60:36:92:6f:3c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: May 19 15:39:48 2023 GMT
            Not After : May 17 15:44:48 2024 GMT
        Subject: CN=4381D5F481025D29FE8F0BDB802869C8C0E6406C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:85:30:9e:72:6d:95:d9:6f:0b:dd:b6:80:e3:
                    47:61:0d:80:88:a1:39:ad:fc:d5:f8:13:4d:5c:10:
                    ed:5c:6a:45:47:8d:91:d3:79:32:d5:83:9f:92:43:
                    ff:42:1b:98:27:67:e7:c8:7a:70:1e:cb:0c:7b:54:
                    81:77:f2:b3:4c:4d:ba:2c:c8:63:11:bf:33:37:bc:
                    d7:b4:c3:01:0c:06:72:7e:20:a9:30:e6:1b:56:7c:
                    77:83:27:37:ab:20:44:24:f7:bc:14:cf:b5:df:d4:
                    f9:1c:0b:a1:9c:d6:99:30:29:70:76:75:20:23:e5:
                    60:67:94:7e:79:0e:0f:e8:5d:5c:99:d0:28:22:59:
                    d1:87:aa:fd:65:b1:59:c8:b4:4d:d4:26:1a:a2:aa:
                    42:76:39:ec:c2:eb:4d:7e:5b:04:aa:81:ad:d0:62:
                    e0:94:a3:56:5c:9e:95:96:2d:d0:d7:8a:77:0e:a6:
                    6d:cd:bf:4d:54:86:98:a7:b0:b7:3b:8a:7b:3c:3d:
                    35:78:2d:bf:21:e1:05:7e:62:fe:72:87:46:43:1e:
                    d5:3b:2e:44:24:83:ac:3a:fd:81:46:bc:c2:a7:00:
                    67:63:28:df:04:53:f8:05:7b:af:b0:44:c0:bd:a3:
                    59:57:32:67:ce:5d:4f:c7:10:72:fb:0a:6a:48:ea:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:81:D5:F4:81:02:5D:29:FE:8F:0B:DB:80:28:69:C8:C0:E6:40:6C
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3232203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:64:d3:fa:42:b1:80:f3:c2:ff:55:58:fe:fe:78:a6:5c:0f:
         fa:da:07:db:9c:e7:0b:d5:55:74:48:fc:12:3a:0a:64:85:38:
         a4:74:11:c2:43:a8:b3:d5:70:2b:8e:44:33:0b:68:85:30:5f:
         de:1d:ab:4f:6d:0a:0d:9e:fa:58:28:86:a6:93:a7:be:93:ac:
         94:c7:d1:c9:3c:7a:e1:0e:49:2c:c3:ff:b8:df:8c:b3:d3:e3:
         01:fa:92:0b:10:d1:86:36:61:b0:b9:0e:6a:88:81:ae:91:bd:
         17:d5:86:dc:40:fd:8d:ff:6f:02:e7:13:c7:35:86:1a:02:4b:
         3f:dc:35:f8:d7:be:af:0a:64:04:79:3b:7e:a8:11:9e:9d:04:
         d7:c2:51:bf:3d:ee:f9:5b:0e:bf:9c:7a:71:5c:6f:06:c5:27:
         b4:aa:65:64:c4:ab:6a:8a:ee:08:6c:96:eb:be:87:e1:45:75:
         6e:07:f6:89:28:64:89:0d:12:eb:6f:bd:80:d4:c6:b8:36:0a:
         42:ac:c3:fc:b6:a4:94:bd:f7:0f:ce:70:e0:9d:93:15:4b:dc:
         f9:32:21:f7:88:e6:3b:9d:72:7e:f9:96:46:ba:4b:fc:c5:cd:
         d6:78:f9:5a:1c:b4:ca:7e:87:6d:67:68:79:4f:c2:aa:2f:e3:
         41:3f:75:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org