Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa
File:                     3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa (raw, json)
Hash identifier:          M2OVOyXJ5MZbNYEKugSHswkRFWGyu2IitrkirLqRno0=
Subject key identifier:   58:7F:92:7B:4A:A3:66:5E:C1:D6:F6:A4:1E:16:45:B3:0C:BA:8D:1D
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       6FF394BA3E5D4A712FA60F9C8008DA917E1E053F
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa
Signing time:             Wed 11 Oct 2023 14:28:04 +0000
ROA not before:           Wed 11 Oct 2023 14:23:04 +0000
ROA not after:            Wed 09 Oct 2024 14:28:04 +0000
asID:                     263482
IP address blocks:        191.242.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f3:94:ba:3e:5d:4a:71:2f:a6:0f:9c:80:08:da:91:7e:1e:05:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Oct 11 14:23:04 2023 GMT
            Not After : Oct  9 14:28:04 2024 GMT
        Subject: CN=587F927B4AA3665EC1D6F6A41E1645B30CBA8D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d8:2e:fa:1e:f2:4d:14:7a:c2:a2:c0:51:25:
                    40:c5:73:16:84:58:a1:c1:cd:62:52:b1:38:0c:6c:
                    0b:a5:b9:9d:c5:3d:23:d6:42:fb:b8:0c:da:89:66:
                    ae:74:d1:6c:b0:1e:5f:8c:80:23:90:c2:cb:71:4f:
                    9f:b7:2d:ee:08:44:86:01:4c:d6:96:50:02:b1:60:
                    a3:a4:fc:76:21:9f:ed:c5:23:ed:5c:60:e2:c6:fe:
                    24:cb:44:0e:2e:3e:12:56:53:6d:ef:82:ee:f7:67:
                    f3:56:75:a2:26:ba:92:fb:21:91:b4:16:ad:4d:18:
                    43:a5:fa:6c:2f:b2:88:1a:74:51:86:ad:9c:60:ea:
                    a1:67:0a:d9:89:d5:af:9d:a7:54:80:dd:8e:8d:23:
                    aa:65:1d:57:30:27:53:ac:64:68:9b:bc:1e:97:e0:
                    20:41:c2:d9:5e:6c:6d:d7:31:71:31:4f:a2:3d:0b:
                    5c:14:7b:75:4b:3b:15:1d:81:e1:b8:2e:f8:79:da:
                    35:77:73:97:32:2a:6e:ae:8d:cb:52:3a:e5:9b:df:
                    2a:43:47:23:50:88:3d:4d:7b:93:03:56:f1:83:6b:
                    3b:bc:0d:28:e8:65:46:da:96:ba:6c:f3:ec:2d:bb:
                    be:04:6f:ab:47:02:28:aa:27:b5:ff:15:4b:22:38:
                    00:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7F:92:7B:4A:A3:66:5E:C1:D6:F6:A4:1E:16:45:B3:0C:BA:8D:1D
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3232203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:be:35:33:d9:79:f3:a0:f4:58:86:ad:b5:ad:f3:f6:9c:24:
         cd:81:4f:75:a1:01:a7:45:c1:7f:4c:a7:92:17:e5:f9:d7:af:
         5a:34:61:f7:e7:fa:1c:47:30:a7:7a:78:83:29:26:54:ec:22:
         ce:e0:6d:85:7b:b1:ca:19:72:2e:84:4a:df:d1:f0:86:e0:f0:
         5d:df:b6:27:fe:01:a1:d6:35:2a:41:60:9e:af:38:75:74:91:
         be:df:31:81:5f:03:a5:99:1c:35:37:cf:cf:15:3a:19:ae:06:
         d3:a0:0e:17:8f:91:5e:c4:92:40:11:8b:7d:ee:d3:21:ff:7a:
         35:69:9a:d2:a7:e7:59:c0:3e:39:69:11:9c:35:5e:90:27:45:
         63:dc:25:bd:6a:3b:e3:dd:2e:cc:81:b2:84:2f:ca:f0:9e:ae:
         95:43:34:9b:2e:af:29:d4:32:1a:49:8f:fc:9e:9d:aa:99:8c:
         40:f9:3a:d3:ca:e8:e6:05:0b:42:0c:0b:66:b5:94:a5:38:d2:
         81:d0:94:ba:19:d2:b8:cb:5d:3b:95:e2:66:e6:8d:6e:3e:ad:
         4a:dc:5b:5e:0d:86:57:6c:13:eb:27:16:10:c6:28:50:6c:23:
         59:bf:77:84:e8:ed:28:9e:e1:c5:80:bf:b0:3c:81:1c:d7:e8:
         b7:d6:1a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org