Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3234203d3e20323633343832.roa
File:                     3139312e3234322e3231362e302f32322d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          PduPi+EIlnptmC4He1iZL2LfQDDFjmHERE4gN6vPyOE=
Subject key identifier:   6D:53:D3:AE:CF:5A:75:D4:C4:05:13:81:BF:DF:E3:66:AA:10:53:B5
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       5714DA06CCC8EB4BA6F08E77F48B69CC002D2F56
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3234203d3e20323633343832.roa
Signing time:             Tue 27 Dec 2022 14:42:20 +0000
ROA not before:           Tue 27 Dec 2022 14:37:20 +0000
ROA not after:            Tue 26 Dec 2023 14:42:20 +0000
asID:                     263482
IP address blocks:        191.242.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:14:da:06:cc:c8:eb:4b:a6:f0:8e:77:f4:8b:69:cc:00:2d:2f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Dec 27 14:37:20 2022 GMT
            Not After : Dec 26 14:42:20 2023 GMT
        Subject: CN=6D53D3AECF5A75D4C4051381BFDFE366AA1053B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:1a:49:a1:03:b3:f3:eb:0d:93:5d:f2:7d:
                    b6:20:09:11:dc:8c:f1:8f:20:26:7d:79:d1:b1:00:
                    9e:5e:49:1e:5f:9e:dc:65:c8:86:d8:ec:f6:b5:2e:
                    b3:44:3d:45:69:5c:57:a8:ad:03:03:52:62:b7:a2:
                    65:42:ea:c9:4e:96:06:fe:f4:8f:e5:ed:87:85:cd:
                    45:0c:f0:77:4b:78:d3:25:2e:e4:d9:ce:04:c4:e6:
                    03:54:14:ed:6d:bd:c1:6c:0e:f8:f4:41:33:03:37:
                    2e:dc:5d:44:40:77:dc:e7:ea:5d:21:d8:32:88:b2:
                    0d:93:ab:f3:c3:35:b3:c9:e7:be:d7:42:52:07:ab:
                    7d:10:9b:ed:47:eb:9c:e5:b3:15:1f:8a:4f:89:86:
                    67:63:94:d8:48:2d:0d:8a:7a:aa:fd:1d:59:c8:12:
                    e8:33:47:2d:5f:ce:c6:0f:45:3e:d4:eb:45:91:52:
                    80:ab:86:96:3e:96:c9:ff:5d:0a:25:c4:ca:b3:ca:
                    93:ee:19:61:7f:7a:ed:14:d7:b1:78:5e:40:7e:f4:
                    e9:f1:3d:e9:1e:80:ab:90:d6:c5:ee:c9:2f:5c:68:
                    31:f8:ba:c6:ba:2d:24:b3:46:07:bb:64:b6:81:b0:
                    bf:bc:a0:54:d3:96:34:e9:b4:ba:3a:65:a2:aa:71:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:53:D3:AE:CF:5A:75:D4:C4:05:13:81:BF:DF:E3:66:AA:10:53:B5
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231362e302f32322d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:9c:bb:e5:e8:b0:14:06:15:a1:c1:d3:a9:93:2f:92:2e:e0:
         3b:24:33:3f:93:d1:8e:66:e3:6f:53:0d:45:40:12:54:59:58:
         5d:68:21:1f:15:43:76:39:35:30:18:14:d9:a1:b8:bf:49:4d:
         19:04:f6:8d:31:65:f2:ee:68:e0:97:de:82:a1:21:8b:58:29:
         4e:48:e6:09:8f:88:bf:79:e1:11:12:ed:c0:6a:27:43:c0:ef:
         48:ae:11:f8:af:9f:de:48:5c:9c:ea:1b:0c:39:de:de:31:5d:
         96:04:32:f8:ff:08:f1:a0:a1:e2:44:a0:06:88:e7:08:66:c1:
         c2:e7:a6:b7:a6:12:3f:8b:0a:9b:93:20:39:9f:b4:1d:d0:46:
         92:ef:2a:d1:db:13:f8:2c:17:82:31:c3:4d:5a:f8:cb:6a:3f:
         46:29:17:40:2a:df:cf:9c:e5:4c:a1:00:00:40:d8:6e:df:ae:
         e7:0e:2a:b5:8a:41:4e:a5:c8:c5:2f:12:1a:87:7c:03:00:4a:
         2c:22:29:a5:96:cc:12:de:54:3e:99:04:28:44:7c:c8:b8:d8:
         2c:ef:e0:04:8f:fd:92:3f:1a:84:63:5d:59:67:f6:55:02:1c:
         57:bf:b7:71:18:c6:43:dc:55:c9:10:11:a5:94:62:ac:1d:69:
         dd:44:e2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org