Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e302e302f32312d3234203d3e20323632353039.roa
File:                     3137372e36372e302e302f32312d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          Ufat1InBA5gIDEWrHS8fdWewje2ea9pmQWPo/jPXCSI=
Subject key identifier:   B2:D6:3B:E5:1E:4B:51:5A:53:8D:AA:0E:8E:EC:93:AD:CE:3A:E2:02
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       030BF628DEA7C80E2EEB4E269FF15E88394945E0
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e302e302f32312d3234203d3e20323632353039.roa
Signing time:             Tue 06 Feb 2024 11:31:19 +0000
ROA not before:           Tue 06 Feb 2024 11:26:19 +0000
ROA not after:            Tue 04 Feb 2025 11:31:19 +0000
asID:                     262509
IP address blocks:        177.67.0.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0b:f6:28:de:a7:c8:0e:2e:eb:4e:26:9f:f1:5e:88:39:49:45:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Feb  6 11:26:19 2024 GMT
            Not After : Feb  4 11:31:19 2025 GMT
        Subject: CN=B2D63BE51E4B515A538DAA0E8EEC93ADCE3AE202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:96:3c:af:bf:87:c1:70:d7:ea:9a:e9:d5:
                    0c:ae:9c:3f:e9:69:33:18:3e:28:21:c2:4e:d6:92:
                    c4:ab:30:8e:f8:b1:ca:e6:37:56:65:2a:23:08:e8:
                    e6:86:d4:ad:08:16:b5:1c:f7:18:87:8c:ad:52:b4:
                    53:e5:05:ce:4f:52:06:54:80:0a:e1:4c:9e:e5:6f:
                    c9:4e:a5:cf:9c:77:cd:c4:c1:ee:63:99:b8:b1:d2:
                    cc:74:2d:b3:f4:f4:83:3d:3c:53:e2:30:e9:88:49:
                    61:65:e4:7f:82:6c:df:32:49:2a:c9:9b:5b:6d:f9:
                    81:c1:79:95:bd:0a:2c:d2:a0:95:53:a4:e3:13:a3:
                    f2:c1:86:ad:87:0d:75:f6:20:41:fe:d1:1e:6f:3f:
                    72:95:0a:86:c6:b9:af:3d:90:d6:e2:f1:7c:8e:af:
                    f7:9e:cb:ea:49:81:b4:e6:b9:82:bc:23:96:08:13:
                    8c:aa:d1:fd:2a:39:1b:07:74:4d:8c:6e:3a:dd:0e:
                    42:e2:99:ea:ac:c3:5a:6e:f8:b4:00:e2:af:75:4d:
                    69:1d:b7:9d:7e:42:a8:17:50:80:ab:16:d6:1e:eb:
                    0b:27:e2:13:31:64:72:93:f1:d9:8e:fe:9b:5d:05:
                    bc:77:82:fc:67:ac:3c:39:6f:c6:8b:a2:6e:ff:25:
                    ff:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D6:3B:E5:1E:4B:51:5A:53:8D:AA:0E:8E:EC:93:AD:CE:3A:E2:02
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e302e302f32312d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:79:ce:47:78:e0:19:1b:73:40:a5:8c:4b:78:01:fc:b8:42:
         46:f7:90:d9:12:95:a7:3d:81:61:59:82:f3:2f:ad:52:d0:86:
         63:9c:b6:05:66:da:f0:96:28:ae:0a:31:ba:66:dc:ea:5c:97:
         b5:31:f2:67:ac:37:46:23:a6:de:dc:37:89:91:04:8d:c0:d2:
         5d:44:d6:f9:41:a2:8f:05:10:f1:48:09:59:13:9e:e0:20:f0:
         30:0d:ad:05:b2:39:f5:c2:96:68:cd:76:23:12:77:38:57:d6:
         52:80:11:44:73:b7:b7:b7:b4:9a:21:f1:a1:cc:e6:32:a6:c7:
         51:48:55:0b:80:ef:23:b1:1b:4f:15:89:a6:b2:19:7b:b7:0b:
         70:54:16:c0:46:e1:71:bf:43:7b:33:04:34:5c:b9:e8:9c:e5:
         e2:6e:07:26:fd:cd:43:23:e6:56:f8:67:0d:3d:0a:cf:f2:7b:
         ed:45:f4:e1:45:d3:10:4c:88:d2:f3:f3:58:44:67:60:79:4a:
         fc:f2:dd:7a:e0:5b:2f:de:06:59:98:e1:88:da:e4:ce:27:05:
         bd:30:43:f1:72:48:7b:5a:09:f4:e7:06:3a:a8:fd:bd:1e:be:
         f6:f1:54:28:02:f8:43:f4:11:31:da:af:9c:c7:c3:68:e1:20:
         cf:ca:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org