Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e332e302f32342d3234203d3e203238323730.roa
File:                     3137372e36372e332e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          QZFn/qIcHLhf9YW06gdO3EloE6YnQ4FXgXnmRgoR39I=
Subject key identifier:   EF:7E:C2:75:EA:F0:BE:72:5D:8F:B5:33:F8:1F:27:3B:DE:73:3E:03
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       23683B905BDB0D0A6443A432898D8710681E4BF6
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e332e302f32342d3234203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:52:53 +0000
ROA not before:           Mon 14 Oct 2024 01:47:53 +0000
ROA not after:            Mon 13 Oct 2025 01:52:53 +0000
asID:                     28270
IP address blocks:        177.67.3.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:68:3b:90:5b:db:0d:0a:64:43:a4:32:89:8d:87:10:68:1e:4b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:47:53 2024 GMT
            Not After : Oct 13 01:52:53 2025 GMT
        Subject: CN=EF7EC275EAF0BE725D8FB533F81F273BDE733E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:13:ec:86:56:59:8f:45:c9:5a:af:39:b0:
                    78:65:f4:9c:ae:3c:26:22:64:83:cf:1e:e4:ca:57:
                    15:92:48:d0:f4:48:6a:83:50:59:94:ea:ff:9e:73:
                    da:73:6d:70:cc:ac:e0:6f:fa:ac:42:ef:ed:20:13:
                    3d:a3:43:1f:7b:9a:7a:e1:51:a1:58:0b:63:eb:14:
                    0e:f8:17:d5:37:cd:36:ba:c9:42:0c:54:3b:f3:32:
                    c6:e1:47:ec:12:13:0f:b4:18:bf:ec:2a:d1:84:4f:
                    f1:d6:ad:c1:85:dc:af:01:19:ad:0b:90:2c:84:08:
                    d1:c9:d0:a0:59:22:67:e6:71:fb:85:5a:9c:a8:a5:
                    c1:97:e3:3f:37:4e:b0:4f:ca:e7:76:e2:4b:4a:ce:
                    9c:54:64:c2:db:27:63:78:2a:4b:15:2e:c8:f7:fd:
                    06:82:85:12:aa:48:d6:59:b9:a0:df:be:2b:5c:56:
                    d7:ef:e1:c5:68:45:99:42:ef:0f:94:7e:1b:08:00:
                    88:5b:88:18:f5:b1:92:3e:42:65:72:9f:f2:2f:cc:
                    a9:cb:4e:f8:d3:73:97:38:6b:4f:44:6a:d3:91:c7:
                    4b:98:ce:fe:a3:ca:63:93:33:11:d9:3a:be:3e:b5:
                    29:64:55:aa:74:9a:c2:91:34:bf:0d:70:b3:8c:7e:
                    92:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7E:C2:75:EA:F0:BE:72:5D:8F:B5:33:F8:1F:27:3B:DE:73:3E:03
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e332e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:81:0c:20:2e:a8:fe:00:32:b6:28:8f:93:33:db:12:80:bf:
         eb:25:2e:53:07:84:c6:dd:ba:89:f6:d3:67:7e:0c:b0:7c:d5:
         52:bb:7b:28:53:e4:90:42:89:62:e5:46:44:7d:21:a3:6f:5c:
         30:f1:88:eb:36:d1:1e:e7:4e:22:83:64:4f:a1:cd:cc:70:23:
         f0:b2:92:7d:07:38:39:3f:9a:a0:d4:95:d0:8a:72:da:f9:2b:
         2e:7f:6e:25:de:f0:a2:33:3e:c4:30:12:18:48:86:04:90:a5:
         9f:f0:e3:60:fa:15:ec:c4:52:56:2c:04:56:cb:c7:64:a2:d6:
         a7:41:e8:1f:ef:bb:54:b5:86:cf:2a:27:8e:25:42:04:31:3d:
         64:7e:30:ac:da:7b:a0:dc:ed:06:6e:b2:a6:14:d5:60:4b:f2:
         f7:2a:84:bc:21:6f:d7:41:72:82:c9:be:65:d5:5e:ca:6f:16:
         87:c6:47:1b:d3:33:9e:73:45:cf:1d:b8:bc:da:36:93:eb:a3:
         74:f2:19:8f:53:78:f9:ac:ac:ad:31:32:02:f5:bc:e6:a0:a3:
         b2:bf:3a:16:a0:56:8c:e3:8b:67:ae:8a:c4:5f:13:ed:0d:9e:
         ae:43:50:50:91:f4:d3:aa:56:7a:5e:8e:30:e0:e9:35:57:1e:
         48:27:12:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:34:50 2025 by rpki-client