Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3232203d3e2033333536.roa
File:                     3139312e3234322e3231362e302f32322d3232203d3e2033333536.roa (raw, json)
Hash identifier:          u57LqT0hW3kEhoKdnqdOzx7NryTFuB9Eg7cOZTZ7jJs=
Subject key identifier:   97:A6:93:F4:25:B6:7F:C5:D3:C4:D4:6B:02:56:BD:3C:00:FB:01:4D
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       095D1CC4AA65549D4C0985431BF564C528296504
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3232203d3e2033333536.roa
Signing time:             Fri 19 May 2023 15:43:25 +0000
ROA not before:           Fri 19 May 2023 15:38:25 +0000
ROA not after:            Fri 17 May 2024 15:43:25 +0000
asID:                     3356
IP address blocks:        191.242.216.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5d:1c:c4:aa:65:54:9d:4c:09:85:43:1b:f5:64:c5:28:29:65:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: May 19 15:38:25 2023 GMT
            Not After : May 17 15:43:25 2024 GMT
        Subject: CN=97A693F425B67FC5D3C4D46B0256BD3C00FB014D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ce:1e:8b:37:85:f9:b9:bb:d9:e3:e6:25:77:
                    be:20:d2:5d:d2:6d:4d:60:40:ce:32:20:e2:0b:b5:
                    24:24:00:80:b6:51:d6:84:00:b7:4e:cc:e3:b6:c0:
                    a4:0b:2a:82:fd:76:9d:fe:71:61:8d:bd:c5:3c:50:
                    fd:2c:1c:f4:65:06:e7:10:42:0d:5e:ef:d5:22:67:
                    0b:07:46:79:76:77:6a:b3:56:8c:39:70:4b:30:d8:
                    4e:52:86:55:fe:32:e3:f7:c2:00:83:3e:5f:7e:87:
                    d8:63:81:20:9a:c4:39:1a:87:09:da:ed:06:57:65:
                    10:6e:39:9a:7d:08:78:20:2d:e1:b3:97:eb:ee:51:
                    80:68:ef:b8:00:40:4d:eb:0d:1f:24:5b:b3:f2:a2:
                    76:d1:4f:54:6c:db:ba:c0:1e:8b:19:95:b4:2b:62:
                    f8:a4:a4:a3:3e:14:7f:6d:fd:03:0f:65:c4:1d:c3:
                    08:50:c0:a0:0e:65:d4:15:17:cd:12:ff:78:5a:27:
                    a4:a0:cf:53:ee:bd:ec:cb:a6:f8:89:15:f4:7f:d5:
                    b3:3f:e2:c4:94:f8:11:f5:eb:50:6d:6d:6e:b6:21:
                    ff:45:e0:71:d2:c6:6f:e2:5c:19:13:3a:57:28:37:
                    9f:c0:8b:c2:97:48:e4:1d:8e:f3:40:b6:19:ec:d5:
                    c2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A6:93:F4:25:B6:7F:C5:D3:C4:D4:6B:02:56:BD:3C:00:FB:01:4D
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3232203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:f0:73:d6:e4:1d:4c:b1:68:08:3f:af:f7:95:83:fb:47:6f:
         62:33:ae:9e:21:9a:1f:c2:00:11:0b:9d:2f:5b:0d:29:7d:93:
         ee:d7:c1:6a:c9:13:dd:2b:85:d1:60:8b:3f:43:9c:5c:e2:2b:
         83:89:ab:ce:8f:b9:ff:da:e6:fa:43:23:c3:ed:8b:dc:a7:e2:
         b3:65:35:dc:e2:66:d9:78:e9:f1:ff:8b:e1:6f:c0:05:0e:b2:
         29:19:c3:95:fc:f3:5c:04:2b:75:a5:f9:3c:63:b2:37:df:dc:
         d0:a3:ea:3d:8a:92:3a:b9:2c:3e:22:ba:1b:f6:1e:51:4e:cd:
         96:f4:d0:37:51:51:8c:db:5a:79:d6:8a:cb:4d:70:da:86:3d:
         a2:90:29:54:ae:85:fd:90:57:38:a4:d1:e1:98:9c:ef:6e:31:
         51:d3:8d:2a:93:5f:f0:60:8b:7f:5c:43:45:dc:cf:cb:bf:38:
         a6:96:d6:77:cc:cc:49:90:0f:bb:83:e9:a5:91:1f:c1:09:73:
         75:c1:fd:88:8e:8e:ea:d1:76:df:23:d6:f1:9d:2b:8c:52:55:
         4c:60:2f:be:c5:26:6d:46:2b:25:db:78:a1:9f:a3:cd:bf:61:
         cd:6f:21:66:d1:84:7c:b0:84:39:f3:19:33:93:3f:78:3e:fa:
         59:1d:03:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org