Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f31392d3139203d3e203238323730.roa
File:                     3137372e37352e3139322e302f31392d3139203d3e203238323730.roa (raw, json)
Hash identifier:          +fQbKAj8BL8V2Ytzb0IFH/OhKvxZUDlPcHbuVg6vP/Y=
Subject key identifier:   2A:5C:B7:DE:5C:9B:80:86:7B:F3:26:BC:70:93:00:54:9B:3B:77:0A
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       3359E54669CCBBAC73954E30D53E2E973F712AF4
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f31392d3139203d3e203238323730.roa
Signing time:             Thu 07 Nov 2024 20:40:13 +0000
ROA not before:           Thu 07 Nov 2024 20:35:13 +0000
ROA not after:            Thu 06 Nov 2025 20:40:13 +0000
asID:                     28270
IP address blocks:        177.75.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:59:e5:46:69:cc:bb:ac:73:95:4e:30:d5:3e:2e:97:3f:71:2a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:13 2024 GMT
            Not After : Nov  6 20:40:13 2025 GMT
        Subject: CN=2A5CB7DE5C9B80867BF326BC709300549B3B770A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:aa:34:03:c5:a4:54:4d:5d:76:92:15:81:03:
                    cf:87:8b:8a:fd:48:cd:99:22:75:97:3b:a0:f9:8a:
                    13:65:98:b3:98:69:89:30:a3:4b:64:e9:f8:37:db:
                    c3:c6:38:56:7f:a0:da:51:34:69:e4:82:39:7c:91:
                    1c:0a:25:cf:b0:bd:95:59:c4:0a:1b:94:9f:8c:21:
                    66:44:58:c4:30:3c:cd:d0:f1:10:69:e0:69:9b:60:
                    ab:48:3d:0b:38:23:26:29:d3:d7:b7:18:3e:5b:72:
                    f3:e0:69:95:57:f2:07:4e:06:6c:b7:38:3a:5b:21:
                    7e:5c:1b:2a:6b:c7:6f:af:32:a6:5a:ec:65:a5:c0:
                    39:2e:a3:ae:e4:82:ae:00:77:c6:1b:9c:03:82:78:
                    59:8f:9c:61:d6:bb:bd:2c:1f:02:85:5e:b8:ed:bd:
                    ab:b8:da:88:14:f9:34:4e:0d:5b:f9:ff:e4:9b:ae:
                    24:22:99:2c:a2:87:b7:8f:fa:5a:8f:fa:66:e9:10:
                    2f:9e:d0:c1:29:77:44:be:de:70:38:28:31:95:31:
                    18:5a:33:11:04:d2:fb:d7:39:c1:7a:c5:31:d6:28:
                    f5:03:a3:24:1a:cb:11:8a:84:5f:12:66:0d:10:1f:
                    45:1d:8a:18:9b:59:10:04:5e:f6:59:12:94:cb:75:
                    20:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5C:B7:DE:5C:9B:80:86:7B:F3:26:BC:70:93:00:54:9B:3B:77:0A
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f31392d3139203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:1d:93:e4:6e:4e:2e:83:1a:b7:a4:c3:50:ab:78:3a:6f:29:
         93:88:7c:ac:e3:ec:ca:72:db:7a:c9:47:0a:1d:f9:83:01:c4:
         a3:46:14:1e:ff:d0:72:bd:ed:db:4e:2e:7a:76:2d:79:de:31:
         b9:d3:17:ae:ca:17:2f:a3:71:27:0d:a0:a7:63:2a:c4:df:e3:
         fb:61:76:97:92:11:1a:40:e7:63:37:e7:cf:1a:c5:b6:46:0c:
         46:0b:4a:32:ee:99:79:0d:04:be:34:82:4d:b4:e2:de:5d:c1:
         2e:50:4b:5e:db:07:96:b6:81:7e:32:2c:6f:86:23:90:be:23:
         48:ad:4d:bf:b9:2f:bf:b2:42:ad:f6:36:00:e3:14:7b:0d:c7:
         d0:86:50:80:43:16:a4:b5:19:ca:8c:ec:e3:b3:4c:23:49:59:
         e1:2c:ae:b8:75:c3:47:da:a7:2a:d3:41:1b:43:76:5b:48:c6:
         4d:c4:bb:fb:c1:32:0f:d4:39:45:6e:c3:51:ff:4d:30:e8:a4:
         fa:27:66:93:c2:0e:6f:9d:17:7d:a4:17:77:6c:36:aa:f8:ab:
         0e:b5:a5:98:d9:10:d1:7e:f8:ae:cc:d9:73:71:9b:2e:90:08:
         3b:97:4a:d0:99:3e:a2:02:ae:cd:42:62:d6:60:5c:a6:41:c6:
         d8:26:55:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org