Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32322d3232203d3e20323632353039.roa
File:                     3137372e36372e342e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier:          j/iMpQUnPe0WRt/eezOtJeJ9W2uZ3AvVhAyAcoMtRAY=
Subject key identifier:   57:D4:D8:87:B1:72:45:90:81:58:CB:B8:AD:18:8A:DB:A3:86:68:56
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       4182984EC257A492EA6FB662AEA1757F0F359EDA
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32322d3232203d3e20323632353039.roa
Signing time:             Thu 07 Nov 2024 20:40:12 +0000
ROA not before:           Thu 07 Nov 2024 20:35:12 +0000
ROA not after:            Thu 06 Nov 2025 20:40:12 +0000
asID:                     262509
IP address blocks:        177.67.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:82:98:4e:c2:57:a4:92:ea:6f:b6:62:ae:a1:75:7f:0f:35:9e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:12 2024 GMT
            Not After : Nov  6 20:40:12 2025 GMT
        Subject: CN=57D4D887B17245908158CBB8AD188ADBA3866856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e1:9b:68:6f:4c:2d:4a:30:eb:78:b2:1c:a7:
                    af:eb:5d:74:96:24:15:3f:93:63:30:e4:e4:ba:20:
                    13:79:81:9b:21:93:b6:d5:07:6c:2e:3b:42:51:2b:
                    ee:38:16:8c:91:98:32:55:70:f9:e1:99:4c:38:e3:
                    66:a2:f7:75:aa:59:b9:2b:fc:bb:07:af:4d:32:63:
                    7b:ef:6f:f3:2a:83:cc:ff:03:47:7f:ec:31:9c:03:
                    55:55:1e:a2:73:55:e8:3b:ca:9d:3c:ff:a8:4a:bb:
                    63:50:f9:05:a6:1d:f3:30:ba:e8:ff:a4:cd:a7:7d:
                    c5:7f:a2:81:6d:59:42:97:1a:34:a8:6e:ef:fd:42:
                    0c:d0:3c:fa:70:db:29:b7:dc:31:b7:b3:9f:99:ad:
                    49:c7:7a:d1:80:af:60:42:a6:44:95:1f:e5:b6:31:
                    66:f1:d0:b9:20:9a:e3:f0:8c:80:8a:d5:4f:d9:a1:
                    9f:0b:b6:a3:04:96:46:80:49:eb:d4:5e:3c:1c:66:
                    5d:6c:ac:31:d6:f5:ec:07:26:f7:d1:41:29:90:77:
                    6e:36:27:33:05:42:bc:98:9b:87:6b:7f:9b:45:72:
                    d4:64:6b:53:92:85:96:cd:96:85:5d:6f:08:a8:96:
                    c4:fa:66:b6:14:f4:0a:42:33:71:2a:50:ee:cf:ad:
                    5c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D4:D8:87:B1:72:45:90:81:58:CB:B8:AD:18:8A:DB:A3:86:68:56
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32322d3232203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:ff:0f:69:b5:7a:2a:5a:53:ef:27:51:26:ee:48:ed:71:33:
         e5:f5:9c:22:48:32:bb:97:ad:ba:6b:7e:e5:4f:e6:f4:37:9f:
         ae:d5:97:4d:2a:a3:82:98:dc:81:8c:84:10:b9:98:98:bc:c7:
         6d:ed:0f:36:30:95:41:9a:b5:46:94:59:7b:b7:4e:3a:d0:82:
         47:b5:7a:2f:61:01:66:e7:38:82:2e:3c:f5:4e:9c:a9:16:0d:
         0f:2a:67:48:b4:02:f5:39:af:49:7d:a6:d9:87:f9:e2:c1:98:
         09:6a:8f:ab:12:34:2d:a5:20:6f:ad:18:a7:fd:e7:e3:9f:a7:
         78:fd:7d:55:9a:9c:73:8a:26:30:41:5c:05:3d:77:8c:2c:65:
         02:74:d2:f5:30:fc:e7:64:57:c1:12:26:93:fd:9e:a2:db:9d:
         c8:6f:55:63:68:14:cc:4b:a4:1d:22:dc:9c:aa:ca:95:40:e8:
         10:9f:f9:40:c0:24:9a:d8:0a:c4:bc:5f:a3:1d:f1:a3:3b:b0:
         f1:03:ae:e3:77:d1:36:ed:a0:00:ed:cb:c0:62:d1:ea:f0:23:
         bf:6a:2d:93:30:3b:88:00:d5:0f:94:24:a2:f2:4d:01:f5:b6:
         6f:85:8e:c8:70:c3:e7:0b:12:b0:31:db:17:a8:8d:a3:62:3c:
         b5:20:72:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org