Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f32302d3230203d3e203238323730.roa
File:                     3137372e37352e3139322e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          5UakubrY7vZjrNY/1BfIhzwPDRLMabaBRxbv6xI4UdY=
Subject key identifier:   8F:E9:2F:67:5A:CC:78:5E:74:AE:05:12:79:CD:FA:20:87:AC:54:E7
Certificate issuer:       /CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
Certificate serial:       2880FAF62E5D75A80F0B6031D3DB1FA7C288E3A1
Authority key identifier: A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f32302d3230203d3e203238323730.roa
Signing time:             Thu 07 Nov 2024 20:40:16 +0000
ROA not before:           Thu 07 Nov 2024 20:35:16 +0000
ROA not after:            Thu 06 Nov 2025 20:40:16 +0000
asID:                     28270
IP address blocks:        177.75.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:80:fa:f6:2e:5d:75:a8:0f:0b:60:31:d3:db:1f:a7:c2:88:e3:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C
        Validity
            Not Before: Nov  7 20:35:16 2024 GMT
            Not After : Nov  6 20:40:16 2025 GMT
        Subject: CN=8FE92F675ACC785E74AE051279CDFA2087AC54E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c2:f2:79:6b:7e:d4:29:d0:dd:07:e9:2e:88:
                    8f:92:ab:f1:04:37:be:64:0b:04:f2:1a:be:32:03:
                    ca:8b:e7:e4:d0:2e:fe:88:ee:2c:19:ee:d3:03:ef:
                    ab:fb:82:3f:95:22:67:1a:41:99:6d:78:5d:16:73:
                    d2:b4:be:37:5e:4c:40:9b:79:55:64:83:fa:b7:52:
                    69:fa:a1:9b:57:13:2d:cc:fd:0a:31:c6:c2:0c:df:
                    d2:b0:69:c5:d1:de:07:30:cd:41:70:f3:81:6b:5f:
                    db:93:4d:b0:34:87:7d:96:3c:4b:db:18:b1:5d:6e:
                    fa:d4:9a:54:d8:51:62:a2:68:12:da:cb:5b:80:20:
                    53:a1:cc:1b:ca:64:af:5c:90:4d:30:23:77:ca:8d:
                    f2:0e:72:c1:08:4c:f2:27:9c:e9:b7:c6:49:92:12:
                    00:7a:96:03:bc:db:1e:19:e9:79:0b:8d:2c:93:c1:
                    4f:1c:d0:e0:b1:ca:7c:ab:ea:99:63:af:81:cd:34:
                    19:e5:a5:97:2a:ad:41:2f:c0:eb:59:a3:a2:91:97:
                    77:f4:ab:b3:87:b3:e2:4a:c9:b8:9e:86:10:7e:ee:
                    08:18:9b:5a:27:8b:5f:83:8b:d6:6c:50:db:17:f2:
                    86:cb:6c:48:2e:51:f5:0b:ec:c6:1f:f7:56:52:4f:
                    54:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E9:2F:67:5A:CC:78:5E:74:AE:05:12:79:CD:FA:20:87:AC:54:E7
            X509v3 Authority Key Identifier:
                keyid:A8:F9:9C:2E:E0:BA:1D:37:CC:7A:BE:7C:50:89:84:BA:A0:B0:8D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8F99C2EE0BA1D37CC7ABE7C508984BAA0B08D5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:1e:a4:b3:10:fa:b1:3f:03:c6:4b:09:8d:02:e1:a7:3c:91:
         43:b0:4e:20:a3:5e:fd:c7:21:09:db:38:62:55:32:72:83:3d:
         86:a4:72:e9:33:0a:12:fa:05:7c:79:31:6d:c2:2e:00:cb:05:
         74:94:91:8e:22:fc:bb:9c:f5:dc:da:b4:e6:fd:00:cf:e8:6d:
         a4:9c:58:e0:0c:54:b5:f2:e1:8a:0e:b3:8c:22:06:a7:80:6d:
         1f:be:b3:28:f2:19:8b:c4:65:8e:27:29:4b:2d:78:98:c3:88:
         6a:dc:c9:98:be:ce:9d:fc:63:15:be:1d:ea:55:1e:c1:aa:88:
         0b:52:3f:0e:b1:88:5e:ae:b9:44:ce:60:9e:75:54:c6:1c:13:
         eb:d1:aa:f7:cc:30:ea:66:fa:a2:f6:65:6f:6a:d7:c1:33:13:
         86:4a:1b:11:17:5b:9b:7f:2a:23:66:28:83:b8:a7:97:b8:e4:
         f4:a9:eb:27:82:cd:5f:cd:2f:38:96:f5:c0:97:63:36:7b:21:
         a0:c8:e1:58:d5:ef:2c:33:43:11:0c:39:76:36:1a:55:09:02:
         fa:e4:b4:df:23:42:9b:48:51:bf:9e:87:65:c1:9e:65:48:a6:
         4f:da:2a:7d:2c:b1:cf:1d:4c:b5:7a:9c:a4:9a:cf:4a:96:08:
         ef:29:ff:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 23:22:08 2024 by rpki-client on console-ams.rpki-client.org