Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e302e302f32312d3231203d3e203238323730.roa
File:                     3137372e36372e302e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier:          Wis/14ojvOebk+Y9UDQUzO1ZiwX+4OSJSqlJdOEFLRo=
Subject key identifier:   AE:E3:87:8E:47:C5:BA:4B:A2:0D:CE:6C:9A:F3:70:7C:13:13:24:F9
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       3F7456CE4D24AE0A072A7C94F5E4451C29319A9B
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e302e302f32312d3231203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:06:55 +0000
ROA not before:           Mon 08 Apr 2024 20:01:55 +0000
ROA not after:            Mon 07 Apr 2025 20:06:55 +0000
asID:                     28270
IP address blocks:        177.67.0.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:74:56:ce:4d:24:ae:0a:07:2a:7c:94:f5:e4:45:1c:29:31:9a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:55 2024 GMT
            Not After : Apr  7 20:06:55 2025 GMT
        Subject: CN=AEE3878E47C5BA4BA20DCE6C9AF3707C131324F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:67:c5:91:bf:66:60:f4:aa:bb:27:ba:fa:aa:
                    0b:cf:83:0c:e7:ca:1a:30:cb:f9:49:f7:af:3f:cc:
                    7e:2a:01:32:22:fe:d1:63:71:94:11:2c:82:66:f5:
                    8a:20:60:de:61:d7:6b:18:33:b3:0e:c8:cd:6f:7e:
                    ca:18:46:d1:f6:11:95:f9:57:e9:82:a3:e4:e3:3d:
                    34:de:92:09:57:49:86:d7:b2:e6:7b:fb:63:48:1d:
                    95:1a:29:dc:76:4d:29:cf:32:18:80:69:8e:e5:87:
                    0f:ab:28:8c:0a:9c:c8:2f:d5:8f:02:63:b5:66:0b:
                    e0:8f:62:e0:d9:79:fc:0e:9e:e0:f7:74:9c:8b:1a:
                    11:a4:d2:a0:b6:90:89:da:fe:97:56:27:e6:ba:50:
                    87:08:e0:75:5a:3f:ef:b1:57:2e:ba:59:37:7e:80:
                    84:4d:69:28:8c:a6:c5:a1:69:48:ab:51:d0:5e:bc:
                    db:3d:c3:36:de:e7:71:b8:be:12:2c:0a:06:54:01:
                    be:c9:e8:b6:9c:1a:00:40:aa:37:ed:57:5a:59:a7:
                    4a:d9:8c:c2:da:20:27:53:7a:f5:0a:c4:31:63:7a:
                    8e:93:7c:02:47:8b:eb:3b:33:a8:6b:61:f9:72:5a:
                    86:f6:a5:22:28:e0:c6:98:a0:01:59:1e:63:27:99:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E3:87:8E:47:C5:BA:4B:A2:0D:CE:6C:9A:F3:70:7C:13:13:24:F9
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e302e302f32312d3231203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b0:01:b6:c9:80:03:25:43:2e:44:c5:7e:1f:e6:93:26:4a:72:
         83:1a:d3:30:f5:a8:0f:40:a1:ac:55:74:75:80:34:f9:51:9d:
         76:0d:97:ba:b5:d1:09:43:9d:d6:47:23:b1:e9:33:60:73:60:
         fc:53:8b:bb:39:78:64:d2:3e:7d:24:6b:b0:19:de:29:da:69:
         6a:79:c6:c1:b9:2c:c6:6f:81:1a:aa:d7:77:3c:53:c7:aa:f9:
         dd:65:0e:53:75:9c:56:de:1a:f4:24:ac:d9:70:3e:a4:ab:88:
         1d:9c:06:ba:91:c4:ca:3e:57:42:7b:8b:5d:b8:98:1d:7e:b1:
         d1:78:06:7d:b3:be:27:8c:7d:08:8e:fa:96:aa:91:07:8f:69:
         55:85:07:36:14:84:60:fb:52:45:26:bb:de:6c:f0:6a:b7:6f:
         30:01:e5:6a:18:5c:1c:7c:6f:12:42:3d:cf:3a:7f:4e:8d:a2:
         08:0a:be:cb:fb:0b:a2:ce:32:af:63:9f:24:b1:69:c2:09:f8:
         39:f0:8d:1a:16:7b:51:3b:29:a5:02:d2:c6:ce:99:c6:d9:b7:
         36:e5:41:ec:80:02:cd:f5:19:37:ec:d0:5b:2c:ce:e4:62:72:
         4c:06:3d:e3:5e:b9:55:76:53:93:1f:f0:3f:1c:ec:fb:59:cc:
         5e:8a:3e:7a
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUP3RWzk0krgoHKnyU9eRFHCkxmpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDgyMDAxNTVaFw0yNTA0MDcyMDA2NTVaMDMxMTAvBgNV
BAMTKEFFRTM4NzhFNDdDNUJBNEJBMjBEQ0U2QzlBRjM3MDdDMTMxMzI0RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtZ8WRv2Zg9Kq7J7r6qgvPgwzn
yhowy/lJ968/zH4qATIi/tFjcZQRLIJm9YogYN5h12sYM7MOyM1vfsoYRtH2EZX5
V+mCo+TjPTTekglXSYbXsuZ7+2NIHZUaKdx2TSnPMhiAaY7lhw+rKIwKnMgv1Y8C
Y7VmC+CPYuDZefwOnuD3dJyLGhGk0qC2kIna/pdWJ+a6UIcI4HVaP++xVy66WTd+
gIRNaSiMpsWhaUirUdBevNs9wzbe53G4vhIsCgZUAb7J6LacGgBAqjftV1pZp0rZ
jMLaICdTevUKxDFjeo6TfAJHi+s7M6hrYflyWob2pSIo4MaYoAFZHmMnmUBfAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUruOHjkfFukuiDc5smvNwfBMTJPkwHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzNzM3MmUzNjM3MmUzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzgzMjM3
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAOxQwAwDQYJKoZIhvcNAQELBQADggEBALABtsmAAyVDLkTF
fh/mkyZKcoMa0zD1qA9AoaxVdHWANPlRnXYNl7q10QlDndZHI7HpM2BzYPxTi7s5
eGTSPn0ka7AZ3inaaWp5xsG5LMZvgRqq13c8U8eq+d1lDlN1nFbeGvQkrNlwPqSr
iB2cBrqRxMo+V0J7i124mB1+sdF4Bn2zvieMfQiO+paqkQePaVWFBzYUhGD7UkUm
u95s8Gq3bzAB5WoYXBx8bxJCPc86f06NoggKvsv7C6LOMq9jnySxacIJ+DnwjRoW
e1E7KaUC0sbOmcbZtzblQeyAAs31GTfs0FsszuRickwGPeNeuVV2U5Mf8D8c7PtZ
zF6KPno=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org