Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37362e302f32342d3234203d3e20323731333631.roa
File:                     3137392e302e37362e302f32342d3234203d3e20323731333631.roa (raw, json)
Hash identifier:          gAXeC5XBKROhATycg0I4FjvknZZtxiejmEjlvaswxTg=
Subject key identifier:   0F:7E:15:27:06:43:D5:32:7B:F9:FD:65:EB:4A:F4:88:24:09:38:3D
Certificate issuer:       /CN=DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37
Certificate serial:       3AD2A3FB916D68B34F16D8B8871973593E45094F
Authority key identifier: DC:F6:93:E9:82:F7:DF:6B:9F:DD:35:5A:47:A4:EC:82:DF:7A:CC:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37362e302f32342d3234203d3e20323731333631.roa
Signing time:             Mon 04 Mar 2024 13:33:51 +0000
ROA not before:           Mon 04 Mar 2024 13:28:51 +0000
ROA not after:            Mon 03 Mar 2025 13:33:51 +0000
asID:                     271361
IP address blocks:        179.0.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d2:a3:fb:91:6d:68:b3:4f:16:d8:b8:87:19:73:59:3e:45:09:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37
        Validity
            Not Before: Mar  4 13:28:51 2024 GMT
            Not After : Mar  3 13:33:51 2025 GMT
        Subject: CN=0F7E15270643D5327BF9FD65EB4AF4882409383D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3e:66:8f:35:c6:4f:8b:a9:d3:9b:5f:1b:3a:
                    8a:8d:24:cd:60:64:d1:72:99:f4:36:19:6f:ee:0e:
                    a7:81:a7:cb:82:d5:33:e9:8b:23:4c:be:f4:2b:c8:
                    14:ad:8b:d3:d7:00:2d:c5:90:0a:17:e0:6b:b6:e0:
                    2d:b3:97:79:ca:0a:cf:0d:41:ba:b4:9d:d8:94:62:
                    83:2b:71:c1:0f:f4:eb:f0:0d:8f:36:29:d1:e9:56:
                    ba:f4:62:aa:7b:13:18:c3:2e:cb:50:3c:22:81:62:
                    bf:f9:1b:7f:df:b4:ac:ed:7b:29:81:38:65:22:fd:
                    6a:cc:d6:7c:d4:17:d7:2b:8a:8b:05:42:b0:7f:0d:
                    f6:1f:ea:5e:cf:12:4a:df:cb:5d:f4:be:b6:fe:ac:
                    db:a6:8e:70:ca:89:5f:d0:2e:7d:ad:22:61:c0:77:
                    d9:8a:4b:0f:62:7c:63:1a:46:3e:2f:13:18:57:a0:
                    c8:01:bc:0c:73:78:f2:f0:e4:7a:60:89:7a:1d:ab:
                    ae:d1:36:c6:38:e0:6b:11:e8:e1:77:bc:89:5b:6d:
                    65:b4:c8:ae:8b:0e:f9:6e:4d:a7:4c:f7:27:75:d6:
                    16:85:26:a7:e7:7a:44:09:86:d8:3f:a0:5c:18:67:
                    89:4c:ed:be:f1:f2:97:41:64:9d:b4:e6:fc:4b:c9:
                    85:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:7E:15:27:06:43:D5:32:7B:F9:FD:65:EB:4A:F4:88:24:09:38:3D
            X509v3 Authority Key Identifier:
                keyid:DC:F6:93:E9:82:F7:DF:6B:9F:DD:35:5A:47:A4:EC:82:DF:7A:CC:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCF693E982F7DF6B9FDD355A47A4EC82DF7ACC37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4AMiAtfKmdKpxMnhXNK4crr87Y1SdU8nrYLY2XLXXw2v/0/3137392e302e37362e302f32342d3234203d3e20323731333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:f2:e2:15:b6:f4:e4:f1:9c:c0:da:68:d8:86:38:e6:77:83:
         ef:99:52:bd:00:da:d3:d3:b2:99:e0:2b:f6:d5:ee:38:df:fd:
         62:d6:f7:c0:02:3b:52:3d:08:e8:f2:e1:8e:43:ed:89:c0:a4:
         c3:3c:0b:eb:f7:38:9d:34:63:54:48:80:d3:6f:21:9e:af:b7:
         43:be:8e:86:96:47:90:f7:ef:94:e8:ef:53:9b:f0:5d:ee:37:
         60:c5:f9:50:21:ee:dd:9a:85:ff:ee:32:21:35:03:99:4e:c8:
         2a:c2:0e:43:23:eb:2a:3c:ca:9e:75:7d:d4:a3:8b:e7:45:35:
         f9:2a:e9:ff:77:43:ff:04:55:7c:8f:90:fd:3e:68:ae:d9:81:
         41:be:40:8b:fa:b9:3c:e3:f4:9f:80:d1:60:c6:c8:ac:c8:f3:
         ac:5f:fb:c7:a8:48:1f:13:12:9a:72:ee:fe:e5:60:52:a3:dd:
         c4:92:98:b4:04:61:a8:a7:47:63:36:e0:0a:30:51:2a:ad:77:
         3a:d0:24:12:2e:9d:ea:fd:fe:37:a0:63:b2:5b:87:0b:2b:10:
         29:69:65:40:c0:76:ce:64:3f:a3:91:8e:50:1d:7f:8f:d6:a6:
         fd:4d:f1:ef:c7:ff:0e:5d:60:34:c8:08:11:37:28:0c:eb:04:
         bf:ce:4e:23
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUOtKj+5FtaLNPFti4hxlzWT5FCU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENGNjkzRTk4MkY3REY2QjlGREQzNTVBNDdBNEVDODJE
RjdBQ0MzNzAeFw0yNDAzMDQxMzI4NTFaFw0yNTAzMDMxMzMzNTFaMDMxMTAvBgNV
BAMTKDBGN0UxNTI3MDY0M0Q1MzI3QkY5RkQ2NUVCNEFGNDg4MjQwOTM4M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9PmaPNcZPi6nTm18bOoqNJM1g
ZNFymfQ2GW/uDqeBp8uC1TPpiyNMvvQryBSti9PXAC3FkAoX4Gu24C2zl3nKCs8N
Qbq0ndiUYoMrccEP9OvwDY82KdHpVrr0Yqp7ExjDLstQPCKBYr/5G3/ftKzteymB
OGUi/WrM1nzUF9criosFQrB/DfYf6l7PEkrfy130vrb+rNumjnDKiV/QLn2tImHA
d9mKSw9ifGMaRj4vExhXoMgBvAxzePLw5HpgiXodq67RNsY44GsR6OF3vIlbbWW0
yK6LDvluTadM9yd11haFJqfnekQJhtg/oFwYZ4lM7b7x8pdBZJ205vxLyYWtAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUD34VJwZD1TJ7+f1l60r0iCQJOD0wHwYDVR0j
BBgwFoAU3PaT6YL332uf3TVaR6Tsgt96zDcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEFNaUF0ZkttZEtweE1uaFhOSzRjcnI4N1kxU2RVOG5yWUxZMlhMWFh3
MnYvMC9EQ0Y2OTNFOTgyRjdERjZCOUZERDM1NUE0N0E0RUM4MkRGN0FDQzM3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDRjY5M0U5ODJGN0RGNkI5
RkREMzU1QTQ3QTRFQzgyREY3QUNDMzcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRBTWlBdGZLbWRLcHhNbmhYTks0Y3JyODdZMVNkVThucllMWTJYTFhYdzJ2LzAv
MzEzNzM5MmUzMDJlMzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMTMz
MzYzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALMATDANBgkqhkiG9w0BAQsFAAOCAQEAcPLiFbb05PGc
wNpo2IY45neD75lSvQDa09OymeAr9tXuON/9Ytb3wAI7Uj0I6PLhjkPticCkwzwL
6/c4nTRjVEiA028hnq+3Q76OhpZHkPfvlOjvU5vwXe43YMX5UCHu3ZqF/+4yITUD
mU7IKsIOQyPrKjzKnnV91KOL50U1+Srp/3dD/wRVfI+Q/T5ortmBQb5Ai/q5POP0
n4DRYMbIrMjzrF/7x6hIHxMSmnLu/uVgUqPdxJKYtARhqKdHYzbgCjBRKq13OtAk
Ei6d6v3+N6BjsluHCysQKWllQMB2zmQ/o5GOUB1/j9am/U3x78f/Dl1gNMgIETco
DOsEv85OIw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org