Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231392e302f32342d3234203d3e20323633343832.roa
File:                     3139312e3234322e3231392e302f32342d3234203d3e20323633343832.roa (raw, json)
Hash identifier:          oRh0+JR9nK9inRKRPOpsbtwhmlZmRrKyu9REtzthnnw=
Subject key identifier:   59:B5:A3:F6:B8:70:4B:84:A6:42:2A:DB:25:D7:A6:0E:AE:5F:1A:13
Certificate issuer:       /CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
Certificate serial:       7BA6912E966BAFAD6E920A7D0FBBE7E851AFA0D0
Authority key identifier: 03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231392e302f32342d3234203d3e20323633343832.roa
Signing time:             Tue 28 Mar 2023 12:18:24 +0000
ROA not before:           Tue 28 Mar 2023 12:13:24 +0000
ROA not after:            Tue 26 Mar 2024 12:18:24 +0000
asID:                     263482
IP address blocks:        191.242.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a6:91:2e:96:6b:af:ad:6e:92:0a:7d:0f:bb:e7:e8:51:af:a0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA
        Validity
            Not Before: Mar 28 12:13:24 2023 GMT
            Not After : Mar 26 12:18:24 2024 GMT
        Subject: CN=59B5A3F6B8704B84A6422ADB25D7A60EAE5F1A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b3:22:92:96:57:90:66:ae:4e:fb:4e:be:a9:
                    24:81:c8:d4:88:94:1d:bc:bf:01:aa:df:b4:40:af:
                    e4:16:c2:98:60:2c:9e:ea:90:48:70:51:2d:bd:86:
                    78:31:eb:0f:ce:8a:cf:44:53:50:68:42:3e:bb:d0:
                    dc:a8:6a:6d:e0:74:73:59:61:a9:13:b3:c0:37:c6:
                    6a:64:e3:4d:da:61:f9:2e:31:51:79:bc:4d:6f:9b:
                    30:08:81:f1:d4:94:94:4f:11:3a:66:13:fc:cb:60:
                    f1:a2:fa:f6:57:fb:60:11:24:c0:e1:7c:ee:48:84:
                    a3:c8:27:fb:cf:1d:86:57:a1:4e:65:cf:aa:16:0b:
                    42:3d:11:00:f6:fb:74:59:6e:fe:c0:da:9a:21:2a:
                    2d:ee:51:c0:77:56:1a:1b:8e:ee:12:7b:bc:4f:0e:
                    a4:83:74:24:ad:04:73:75:13:d1:2f:9a:2f:40:45:
                    7d:c4:b2:eb:e7:5f:80:4f:c7:dc:fc:6b:5a:af:89:
                    60:75:30:f9:d6:cf:9d:50:32:1e:9c:bb:9b:a1:7d:
                    1d:88:02:5b:65:ff:f1:8e:ea:ca:58:63:1e:94:18:
                    37:c1:21:fb:c0:08:1f:c0:b0:b7:12:72:9b:91:54:
                    8a:33:50:53:d1:f3:3f:c8:fa:69:fb:0d:6a:dc:07:
                    d4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B5:A3:F6:B8:70:4B:84:A6:42:2A:DB:25:D7:A6:0E:AE:5F:1A:13
            X509v3 Authority Key Identifier:
                keyid:03:DC:B6:B8:38:7A:87:A1:45:BD:DF:97:F7:8E:03:59:EC:4F:D3:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/03DCB6B8387A87A145BDDF97F78E0359EC4FD3FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/0/3139312e3234322e3231392e302f32342d3234203d3e20323633343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:6d:99:88:5d:4f:0a:41:8b:ef:59:c5:ce:41:22:e4:a2:da:
         fe:01:47:b9:11:61:bd:bf:8b:94:d5:b8:07:b2:00:d3:ec:7e:
         88:c2:83:02:f2:af:57:17:54:c7:10:57:f3:c8:a5:e7:ff:7a:
         00:db:e6:db:53:e3:19:0a:77:8e:1d:37:86:85:4f:df:61:2a:
         14:8d:9d:58:07:a5:d7:a0:23:3f:9f:0b:fc:28:65:29:09:3e:
         74:e0:93:18:08:8a:01:a3:92:ac:4b:bb:f1:1c:d2:b2:f3:1c:
         c9:d4:b1:76:2c:49:9f:cc:fa:ac:55:ef:e5:91:07:38:60:d0:
         83:46:4c:50:08:74:bd:67:9f:b6:f7:b4:c7:a2:61:3f:db:9e:
         2f:05:f8:c1:b1:c3:75:92:dc:23:a1:e0:83:f4:28:85:d7:e0:
         1c:90:06:7c:59:6c:27:63:3f:4d:eb:fd:33:16:20:fa:d9:4b:
         09:84:58:a1:94:45:3d:b8:05:17:42:e8:2c:9f:d9:ef:96:fc:
         19:65:d1:74:d1:22:ee:38:40:31:48:4f:83:c6:62:04:64:6a:
         d1:34:1e:99:2b:33:ee:28:f5:45:19:e6:e8:cc:96:73:b0:5b:
         73:5f:f8:59:0f:aa:fa:ea:20:a6:18:09:14:ac:7d:0e:95:c2:
         0b:cd:02:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:24 2024 by rpki-client on console-ams.rpki-client.org