Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa
File:                     3137302e302e3230342e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier:          bThqp67YoW7ebv5/rys8XVmpRi6nvs/e+Btv0sYndkc=
Subject key identifier:   E8:74:1E:C3:87:BE:B2:A7:10:6E:D3:58:2B:94:6D:D7:4C:43:E9:F9
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       035BFAB365AD43638BE714BA0B4279DB539F3BE9
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa
Signing time:             Mon 08 Apr 2024 20:06:58 +0000
ROA not before:           Mon 08 Apr 2024 20:01:58 +0000
ROA not after:            Mon 07 Apr 2025 20:06:58 +0000
asID:                     271724
IP address blocks:        170.0.204.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5b:fa:b3:65:ad:43:63:8b:e7:14:ba:0b:42:79:db:53:9f:3b:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:58 2024 GMT
            Not After : Apr  7 20:06:58 2025 GMT
        Subject: CN=E8741EC387BEB2A7106ED3582B946DD74C43E9F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:98:99:95:0d:e2:f8:80:b8:69:23:84:5d:57:
                    83:e9:c0:59:0a:e2:e9:73:85:5b:ac:8b:00:0a:2b:
                    ca:54:44:fb:9f:a4:2f:32:d3:45:15:69:87:18:cb:
                    dc:14:22:fb:39:7e:3f:1b:89:13:65:77:7b:b7:7f:
                    d2:47:1d:93:df:a8:44:52:90:fa:47:2f:45:dd:16:
                    c4:48:7e:82:f5:72:5b:a4:88:aa:87:d5:a6:33:f8:
                    9b:5d:6f:f9:0f:52:cd:15:80:ab:9b:29:b1:85:78:
                    d1:8e:2d:e6:a7:81:e7:1c:1b:13:04:83:9e:8c:3c:
                    e5:47:21:a5:c8:6c:ed:d5:99:6e:b6:9e:eb:5f:a6:
                    31:ee:69:96:25:59:57:f0:59:c8:3c:ad:4e:57:3b:
                    fd:50:eb:21:8b:5a:8b:91:c3:f0:f2:0f:21:c4:5c:
                    a5:f8:a4:ef:3b:f9:78:39:13:36:c3:28:c9:7e:57:
                    ae:bc:eb:3f:9c:f8:77:be:52:3a:2e:12:5d:7f:ed:
                    d5:13:4f:45:7a:71:6b:e5:28:28:db:ef:01:fe:e3:
                    ab:a4:c9:53:6f:7f:8e:b4:25:63:d7:3d:ef:71:30:
                    af:7e:67:08:83:c3:03:06:34:a5:96:2b:38:9b:c6:
                    75:be:08:33:32:46:86:07:f9:7f:4b:86:a0:f0:2f:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:74:1E:C3:87:BE:B2:A7:10:6E:D3:58:2B:94:6D:D7:4C:43:E9:F9
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:24:73:90:ba:c7:3b:a1:91:d5:28:cb:b6:bb:93:92:1b:53:
         81:be:4a:e4:ac:90:83:0f:71:87:75:ce:8f:08:a4:c5:49:dc:
         e4:1e:82:67:f7:9c:51:09:3b:72:1b:ae:ce:79:d5:f9:88:58:
         22:1e:f7:6a:e1:31:42:01:fd:92:b9:f2:a5:11:3b:95:ec:5b:
         88:ca:5d:92:59:f4:32:b5:a0:a9:57:35:1b:31:eb:a5:ff:7b:
         2e:7f:de:59:7e:35:1e:d0:10:56:95:00:35:eb:f3:ff:c9:21:
         e9:31:4e:d4:7e:24:ea:21:48:47:ee:f9:72:20:92:3a:b8:dc:
         8b:fa:8c:8b:b7:9c:27:62:36:a1:a4:6e:09:d6:7e:f5:54:9f:
         ee:cd:7a:b5:58:f6:62:f4:5e:99:20:cd:8f:4d:49:23:e0:ea:
         0a:88:2b:4b:2b:3e:42:c8:b2:2a:0c:b6:d0:02:d4:1a:91:7f:
         47:6e:93:10:55:31:49:b7:ee:f5:d9:fb:39:29:2e:f9:a8:da:
         02:78:9b:b8:d3:c0:b4:a1:de:6b:a7:fb:b9:ef:4d:c9:ef:16:
         84:74:c8:56:af:b2:b8:4f:91:71:55:ae:b5:5c:79:a6:d2:22:
         54:61:cb:ac:0f:60:b5:67:5a:b1:05:81:01:18:be:c3:95:12:
         8a:fe:29:41
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUA1v6s2WtQ2OL5xS6C0J521OfO+kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDgyMDAxNThaFw0yNTA0MDcyMDA2NThaMDMxMTAvBgNV
BAMTKEU4NzQxRUMzODdCRUIyQTcxMDZFRDM1ODJCOTQ2REQ3NEM0M0U5RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCamJmVDeL4gLhpI4RdV4PpwFkK
4ulzhVusiwAKK8pURPufpC8y00UVaYcYy9wUIvs5fj8biRNld3u3f9JHHZPfqERS
kPpHL0XdFsRIfoL1clukiKqH1aYz+Jtdb/kPUs0VgKubKbGFeNGOLeangeccGxME
g56MPOVHIaXIbO3VmW62nutfpjHuaZYlWVfwWcg8rU5XO/1Q6yGLWouRw/DyDyHE
XKX4pO87+Xg5EzbDKMl+V6686z+c+He+UjouEl1/7dUTT0V6cWvlKCjb7wH+46uk
yVNvf460JWPXPe9xMK9+ZwiDwwMGNKWWKzibxnW+CDMyRoYH+X9LhqDwL25pAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6HQew4e+sqcQbtNYK5Rt10xD6fkwHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzNzMwMmUzMDJlMzIzMDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNzMx
MzczMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCqgDMMA0GCSqGSIb3DQEBCwUAA4IBAQAPJHOQusc7
oZHVKMu2u5OSG1OBvkrkrJCDD3GHdc6PCKTFSdzkHoJn95xRCTtyG67OedX5iFgi
Hvdq4TFCAf2SufKlETuV7FuIyl2SWfQytaCpVzUbMeul/3suf95ZfjUe0BBWlQA1
6/P/ySHpMU7UfiTqIUhH7vlyIJI6uNyL+oyLt5wnYjahpG4J1n71VJ/uzXq1WPZi
9F6ZIM2PTUkj4OoKiCtLKz5CyLIqDLbQAtQakX9HbpMQVTFJt+712fs5KS75qNoC
eJu408C0od5rp/u5703J7xaEdMhWr7K4T5FxVa61XHmm0iJUYcusD2C1Z1qxBYEB
GL7DlRKK/ilB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org