Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e332e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e332e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          fdYWg+HSsFwM832TF+GD3BFqKZsciCCRYIpVkI0VjqQ=
Subject key identifier:   EC:5F:DC:A6:96:FB:7A:32:A5:D6:49:B4:AA:34:35:B2:DE:E0:B5:53
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       46FFB7870A1809113943DDCD3559C59FB0A6137A
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e332e302f32342d3234203d3e20323632353039.roa
Signing time:             Thu 07 Nov 2024 20:40:13 +0000
ROA not before:           Thu 07 Nov 2024 20:35:13 +0000
ROA not after:            Thu 06 Nov 2025 20:40:13 +0000
asID:                     262509
IP address blocks:        177.67.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ff:b7:87:0a:18:09:11:39:43:dd:cd:35:59:c5:9f:b0:a6:13:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:13 2024 GMT
            Not After : Nov  6 20:40:13 2025 GMT
        Subject: CN=EC5FDCA696FB7A32A5D649B4AA3435B2DEE0B553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:c9:ad:eb:cc:2e:d3:65:9c:2b:8f:77:94:
                    9e:7b:4e:26:72:0c:a0:bd:8b:b8:8d:6d:95:56:be:
                    b3:a7:18:91:7e:01:d7:56:a5:10:9a:2a:32:40:69:
                    b9:bb:d0:d1:76:e4:27:34:c1:75:c7:82:ce:59:1e:
                    de:6d:70:7f:28:48:18:39:f5:89:c5:e1:4e:3e:51:
                    90:c4:7b:8c:7c:72:2d:6f:2c:78:bc:f0:a4:82:1e:
                    f9:be:b8:40:66:e7:55:d7:d8:e1:e9:ab:2a:8c:62:
                    49:da:4d:8c:ca:57:25:3f:3b:a5:9f:c3:7a:97:d7:
                    c9:d3:7d:c5:63:4d:8e:a2:bf:12:29:dd:d9:14:fb:
                    58:c4:5f:e2:d4:de:0f:c7:2b:4b:3e:d4:ea:6e:5f:
                    f2:90:89:e8:f1:c8:79:3e:3f:8b:d8:11:d3:39:49:
                    f7:81:1d:be:9b:2c:c3:8d:28:84:48:5f:8f:64:90:
                    0c:64:82:4c:7d:0d:8e:dc:e0:b2:37:5c:d4:6c:a9:
                    2f:28:ef:4d:10:b7:d4:a8:91:6f:10:7f:5f:18:b3:
                    60:e2:67:2f:c0:fc:4f:fb:91:a7:8c:84:a5:42:b6:
                    3e:08:23:23:df:01:69:9a:70:69:af:12:9c:8e:d9:
                    37:34:de:d3:e7:03:04:c7:c3:c2:70:77:5f:1c:c3:
                    88:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5F:DC:A6:96:FB:7A:32:A5:D6:49:B4:AA:34:35:B2:DE:E0:B5:53
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e332e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:53:75:ca:da:7b:33:1e:cd:55:9b:bb:80:25:32:2f:59:c3:
         27:11:ee:f8:d5:20:f6:50:17:f9:b5:62:dc:b5:1e:dd:26:19:
         0a:ba:a2:69:89:e9:e3:ac:1e:24:4b:f4:e7:3b:ef:cd:9b:48:
         73:53:3d:15:d5:dd:f5:74:e3:c4:d9:81:2d:23:8b:ac:14:57:
         6d:cf:a0:f6:c0:64:dc:05:57:fc:a1:61:d0:08:3c:b8:b9:58:
         31:24:d3:cf:13:3d:2d:ea:f0:c7:3c:c5:42:43:ef:03:a6:ad:
         c2:34:72:92:65:87:39:bb:ab:fe:b7:d4:f9:68:63:ef:75:b5:
         45:02:ed:e5:77:a7:2e:80:e9:17:08:3a:50:cc:db:7a:9f:60:
         f8:30:73:02:d7:a8:49:1e:aa:1b:2f:33:27:f2:1c:e4:ab:cc:
         e9:a5:13:f6:63:17:8a:63:d9:fa:bb:b3:39:8f:42:f2:0f:f5:
         b4:e5:58:4f:2c:14:c3:0e:02:cc:51:6f:bc:41:01:ce:0c:5c:
         bb:41:14:b3:d4:e4:2f:20:74:fc:1a:e8:ff:a7:cd:41:ae:0f:
         08:d9:ee:c0:39:79:ab:7d:1f:51:8a:66:eb:e3:e8:97:d1:4a:
         e7:9c:86:2f:b0:43:b6:29:0b:a8:c6:cc:53:84:55:f2:f8:d1:
         eb:75:c7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org