Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e302e302f32312d3234203d3e203238323730.roa
File:                     3137372e36372e302e302f32312d3234203d3e203238323730.roa (raw, json)
Hash identifier:          sMe44uJKjM0mh7WCTmYMd7oXbgnbNwjn+pY5aTQrlcU=
Subject key identifier:   3A:BD:63:A9:E2:9C:A8:FE:75:E3:5A:6F:17:EC:43:97:26:72:53:BD
Certificate issuer:       /CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
Certificate serial:       337F9ECD43F6FB7ABA7E8A7340FABA7F74EBF339
Authority key identifier: AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e302e302f32312d3234203d3e203238323730.roa
Signing time:             Thu 22 Feb 2024 04:18:02 +0000
ROA not before:           Thu 22 Feb 2024 04:13:02 +0000
ROA not after:            Thu 20 Feb 2025 04:18:02 +0000
asID:                     28270
IP address blocks:        177.67.0.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:7f:9e:cd:43:f6:fb:7a:ba:7e:8a:73:40:fa:ba:7f:74:eb:f3:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE
        Validity
            Not Before: Feb 22 04:13:02 2024 GMT
            Not After : Feb 20 04:18:02 2025 GMT
        Subject: CN=3ABD63A9E29CA8FE75E35A6F17EC4397267253BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:3e:23:9f:dc:b6:f0:2a:6a:a2:86:b3:b5:
                    e0:d2:cc:dd:98:4a:cc:76:4a:0b:89:de:5a:1f:98:
                    75:7d:81:76:90:1c:29:26:67:b8:f7:53:a1:61:fc:
                    ab:aa:e6:82:1a:d8:ca:0e:e0:8a:16:e3:53:f5:19:
                    20:18:4b:3e:69:cb:54:0e:09:4f:ab:22:0f:21:9f:
                    9a:5b:6b:4c:0d:d1:da:b4:24:3a:16:16:6c:af:3d:
                    86:f8:74:6c:70:78:d5:69:eb:5c:e0:34:5b:77:2e:
                    88:84:f8:f0:3e:79:a0:6a:22:24:e1:2a:dc:48:24:
                    c0:06:e2:f8:d9:94:be:fb:05:54:33:29:53:21:4a:
                    4d:31:7d:b0:81:2b:21:70:78:32:16:ca:aa:1d:bb:
                    1f:55:80:65:1b:12:f7:fd:f0:ec:d2:08:7a:5f:88:
                    8f:cd:03:41:3c:a8:90:e8:10:05:49:16:58:cc:37:
                    13:75:12:62:ee:45:2c:65:ce:97:6e:a2:65:36:c3:
                    6c:e6:b8:46:fa:cb:c2:04:de:1e:fc:f8:e4:36:44:
                    02:9a:c6:88:72:7a:12:80:9c:f2:a4:2b:04:0b:84:
                    4b:d8:73:4e:ef:a5:54:09:fe:b9:53:49:dc:22:d4:
                    df:af:98:11:a9:57:47:7c:3a:6a:46:81:83:8d:6b:
                    ba:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:BD:63:A9:E2:9C:A8:FE:75:E3:5A:6F:17:EC:43:97:26:72:53:BD
            X509v3 Authority Key Identifier:
                keyid:AD:AC:8B:53:05:17:8F:E7:FF:8F:AF:3D:8C:BA:26:A5:E6:26:32:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ADAC8B5305178FE7FF8FAF3D8CBA26A5E62632EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e302e302f32312d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:1c:3a:ba:93:5b:05:7b:ef:6d:ec:21:8d:50:83:80:42:c8:
         d9:71:68:32:e6:09:d5:2e:39:7b:67:37:39:d3:6d:63:d1:b8:
         96:61:38:86:31:4c:68:35:90:18:96:b8:c7:24:2b:20:30:e4:
         45:a6:71:f3:01:71:46:24:5a:bb:47:8d:54:8f:ca:14:32:23:
         e9:ce:ec:d3:fd:fe:77:78:b8:ca:e6:42:ee:a9:8d:c6:71:8f:
         32:69:0c:d0:ac:4c:03:fa:f9:ef:42:55:7b:ef:ce:cb:ad:f7:
         f9:4f:df:de:db:85:df:1d:c4:f4:59:9b:9a:e8:73:9b:37:d4:
         bf:e2:50:de:43:60:e6:c9:3c:09:70:87:6f:bc:0a:fd:ea:c6:
         6b:9b:ad:1b:99:02:b6:ba:29:46:26:38:af:3c:dd:b6:a2:71:
         76:58:bd:88:6f:72:53:6c:f7:a5:72:ab:a8:39:21:75:ea:c3:
         24:45:22:1b:fe:3b:49:e1:72:96:b1:d0:3b:ba:d2:d3:15:76:
         1d:f2:c7:3f:c9:3c:c7:14:83:be:98:81:4a:ce:70:78:04:6a:
         b0:54:99:dc:e4:91:c8:a4:cf:e8:14:1f:f3:f1:00:7e:4d:6c:
         3b:91:b8:4f:c5:a7:70:05:fc:58:88:13:27:d8:89:ab:ba:a3:
         be:67:75:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org