Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231382e302f32342d3234203d3e20323633343832.roa
File:                     3139312e3234322e3231382e302f32342d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          cdvarShyMzHRIuZ96fnw4dUdTX6PZ/ZJhTH01jxq4vM=
Subject key identifier:   C8:DD:51:40:2E:F4:5B:2D:08:35:A8:70:C9:CA:78:0D:52:A5:2D:70
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       0A8B2C6A21CC14BC7C6DFE75A59B7D12C4EBB10A
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231382e302f32342d3234203d3e20323633343832.roa
Signing time:             Fri 19 May 2023 15:34:40 +0000
ROA not before:           Fri 19 May 2023 15:29:40 +0000
ROA not after:            Fri 17 May 2024 15:34:40 +0000
asID:                     263482
IP address blocks:        191.242.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8b:2c:6a:21:cc:14:bc:7c:6d:fe:75:a5:9b:7d:12:c4:eb:b1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: May 19 15:29:40 2023 GMT
            Not After : May 17 15:34:40 2024 GMT
        Subject: CN=C8DD51402EF45B2D0835A870C9CA780D52A52D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e8:72:d2:9f:2e:f3:41:63:02:61:a3:90:de:
                    84:2a:bb:52:01:8c:cf:9d:c5:05:3f:75:62:87:5a:
                    b9:67:e6:8c:25:e6:e7:f9:3d:f2:76:6c:da:e2:4b:
                    3f:06:00:bf:76:2f:d3:53:4b:01:dd:ad:60:8d:b2:
                    09:fe:32:31:af:f7:ad:46:48:3d:3e:d7:c6:f0:2b:
                    f2:03:bf:dd:f9:68:36:fe:2b:96:ba:bd:28:a4:d3:
                    18:dc:b4:97:8f:63:77:b9:e3:84:38:73:ef:0f:50:
                    6a:f6:e1:ed:ee:48:e3:ea:e2:0a:b8:55:53:2c:76:
                    85:79:db:83:84:44:77:fa:d2:34:cb:19:4f:76:12:
                    f2:08:98:59:98:5d:7f:4e:2c:d0:25:74:2d:dc:00:
                    4e:56:6a:59:34:22:26:9f:d1:92:3c:5b:14:91:c2:
                    78:9f:dc:ac:1f:74:75:b6:01:48:12:f7:43:fa:35:
                    e9:22:1e:e7:d4:bc:6d:a0:fd:cd:b7:e4:c8:93:2a:
                    ee:7a:99:ea:9f:89:e1:20:7d:b2:c0:64:d0:54:40:
                    c7:ef:6c:20:02:4a:c3:0b:2a:77:75:3b:5a:ed:91:
                    57:49:59:df:74:b3:e7:51:cc:d7:bb:dc:8a:cb:ab:
                    76:c6:cf:11:a1:f9:76:e3:98:29:d6:c9:be:61:f7:
                    70:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DD:51:40:2E:F4:5B:2D:08:35:A8:70:C9:CA:78:0D:52:A5:2D:70
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231382e302f32342d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:46:b6:9c:d8:d8:75:96:b0:fe:99:c1:15:f3:00:d8:ac:88:
         30:26:af:02:28:5d:b2:17:af:c8:d2:69:83:e2:cc:f5:e9:a9:
         0b:d5:08:db:ff:5e:a7:07:17:6d:83:cb:fc:d9:d6:77:de:22:
         30:67:6d:00:11:11:a4:08:f3:78:56:59:bb:06:3f:5c:9b:c7:
         d9:50:60:09:a3:38:98:d4:66:18:86:10:69:c5:af:40:49:32:
         f6:4a:7d:46:3e:53:5c:a6:ef:f5:57:80:50:38:be:85:96:ba:
         d6:0c:e5:4c:b8:c0:7d:72:ab:5f:48:e7:c8:79:dc:fd:04:77:
         10:22:13:0c:ce:2e:9a:e9:91:f4:e8:4e:97:fb:8b:b1:cd:1f:
         3e:33:f6:0e:ed:89:68:b4:77:ec:f1:9b:3b:fa:e4:ff:6d:e8:
         a4:29:1d:a5:01:64:37:61:b4:62:cc:be:61:e3:f8:d1:e7:d7:
         24:c5:f3:01:5f:8d:0c:36:49:18:3a:5f:1b:4f:f8:72:38:86:
         00:4d:06:34:fa:bf:1b:8a:ee:f7:17:d6:a6:2d:37:93:26:2d:
         d0:2d:2e:42:74:26:33:b2:0f:d2:22:95:12:d1:de:72:fb:c9:
         d8:9b:21:5b:cc:10:76:6b:c2:2c:8a:ef:a2:c1:be:0f:01:d5:
         11:1b:5e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org