Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e3234372e35322e302f32322d3232203d3e203238323730.roa
File:                     3137302e3234372e35322e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier:          gJagsMJ8Idjk3XQgX9GUjSsLzC9xAeC+seG51IgJbRI=
Subject key identifier:   2D:A3:29:1E:D0:99:87:63:79:8B:43:13:66:CC:7B:71:F2:F7:6F:E3
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       4327582AED5C08BE1991B659E8B62A893BFA9720
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e3234372e35322e302f32322d3232203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:07:00 +0000
ROA not before:           Mon 08 Apr 2024 20:02:00 +0000
ROA not after:            Mon 07 Apr 2025 20:07:00 +0000
asID:                     28270
IP address blocks:        170.247.52.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:27:58:2a:ed:5c:08:be:19:91:b6:59:e8:b6:2a:89:3b:fa:97:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:00 2024 GMT
            Not After : Apr  7 20:07:00 2025 GMT
        Subject: CN=2DA3291ED0998763798B431366CC7B71F2F76FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:64:1d:c8:7a:2a:b8:33:d9:8d:18:44:bc:e6:
                    b2:25:d5:48:0f:08:01:2c:6c:a4:5d:1c:21:39:84:
                    fa:43:e9:78:06:f0:2c:38:eb:10:b4:69:7c:9c:2c:
                    8b:3a:68:2f:55:d6:a0:01:65:cf:94:8c:68:8f:ba:
                    83:df:21:13:7e:c4:c8:29:23:33:52:4c:81:38:19:
                    fa:c8:64:7e:cf:62:a9:db:eb:b7:73:97:3f:15:d0:
                    fd:92:fc:7d:bc:30:16:76:53:32:e3:69:4e:8a:eb:
                    3d:89:e9:ed:95:45:9c:37:4d:69:cd:67:29:5f:3b:
                    9d:d6:ef:b4:66:dc:e8:dd:fc:24:6d:ed:4f:e7:b9:
                    5e:e3:70:f1:6a:9a:42:2a:6f:4a:21:d5:5c:27:a5:
                    1c:4d:43:c1:59:e6:c9:6c:55:a7:d0:6c:3f:4c:a0:
                    a5:20:e6:f7:4d:61:96:4a:81:68:b4:d4:2f:6b:26:
                    e6:c1:b7:87:60:e4:ef:e9:e3:49:64:03:09:aa:67:
                    3e:df:27:5f:0d:5c:8c:b9:d3:79:c5:62:fb:d0:5a:
                    e7:a4:c1:87:7a:34:ea:b9:7e:13:b0:bc:b1:b0:0e:
                    59:00:d4:f4:9f:3a:0e:10:56:ec:b4:3b:04:4d:99:
                    e8:44:27:e6:50:1f:f2:a5:0d:06:58:3b:90:65:cc:
                    d6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A3:29:1E:D0:99:87:63:79:8B:43:13:66:CC:7B:71:F2:F7:6F:E3
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137302e3234372e35322e302f32322d3232203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:f7:6d:cb:26:e3:c6:d8:66:1a:80:cf:b3:3d:76:9a:da:e0:
         26:fc:9d:9b:27:dc:08:f0:cb:07:8d:79:3b:f8:ee:04:09:1f:
         57:3f:35:cc:c8:83:23:a1:51:0d:16:73:2a:df:5a:9c:9b:d4:
         27:dd:ec:31:66:48:26:43:3e:3f:0f:59:e3:84:f7:b6:b9:3c:
         16:fc:40:74:07:84:bd:55:ea:23:de:2a:72:f4:9a:d6:e8:2a:
         a3:a8:dd:77:aa:e5:2c:f7:58:b8:41:d1:c7:e8:af:07:bb:32:
         a6:8c:4c:de:33:5e:11:67:09:d6:09:1e:4e:20:8a:02:82:ad:
         d1:7e:9e:f7:91:aa:af:62:8c:f2:fa:68:75:e3:c0:08:cc:96:
         eb:09:f7:0e:b5:42:b4:8b:71:e0:62:aa:95:16:55:68:92:fc:
         40:58:8b:2d:77:26:c8:58:f2:c4:19:1d:4a:65:0c:0d:33:1d:
         71:66:d6:1f:7c:24:37:f9:4d:07:7c:49:cb:33:1e:48:08:37:
         05:c4:4e:88:1f:02:9a:1a:40:22:ea:b2:b2:24:b1:82:6d:e5:
         59:a8:15:aa:2c:0d:15:f9:f1:05:e4:65:83:c4:fd:82:66:57:
         58:2c:6f:21:62:c9:b1:a9:b3:74:f7:76:d1:a8:da:26:2a:f2:
         b5:0a:d7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org