Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e312e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e312e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          DZaycubq70i9/A5GjQk9LCAZ0bN/fIJnWom/Fbc9rmc=
Subject key identifier:   82:78:58:41:BB:F4:10:8C:B1:8A:B3:23:41:BA:06:D4:5C:E8:D2:EE
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       6E538ED4E175D8C1C5FF349DB4942FBDABE178A5
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e312e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 08 Apr 2024 20:07:04 +0000
ROA not before:           Mon 08 Apr 2024 20:02:04 +0000
ROA not after:            Mon 07 Apr 2025 20:07:04 +0000
asID:                     262509
IP address blocks:        177.67.1.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:53:8e:d4:e1:75:d8:c1:c5:ff:34:9d:b4:94:2f:bd:ab:e1:78:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:04 2024 GMT
            Not After : Apr  7 20:07:04 2025 GMT
        Subject: CN=82785841BBF4108CB18AB32341BA06D45CE8D2EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:20:44:cd:19:6e:d2:83:54:58:52:55:b6:
                    73:4a:92:5d:7a:a0:f7:7a:fa:a6:d8:82:0b:25:d0:
                    bf:8e:21:2c:84:7d:57:1a:c0:9d:bd:25:4d:42:54:
                    dc:1f:13:90:d8:6d:3d:8f:f3:68:84:ca:77:f8:b7:
                    07:78:c4:a7:e8:fe:77:23:5b:3a:84:b5:56:4b:48:
                    e7:db:36:73:09:23:6b:50:2a:10:c8:6c:ce:64:03:
                    be:f7:bd:3d:7e:5a:81:58:12:d1:70:2a:e6:e7:25:
                    f3:2b:15:1b:5a:a5:b2:24:20:9e:0b:89:7c:c2:24:
                    b6:1b:7c:8e:e6:37:6f:fa:83:8d:57:9c:b8:64:b9:
                    48:b8:e3:24:f2:39:aa:ec:4f:9d:bd:9a:9d:30:25:
                    3a:61:07:33:42:62:24:e6:e6:3c:dc:59:b0:28:2d:
                    58:31:b5:9f:88:f6:b5:1f:33:9c:04:5c:2e:ea:d0:
                    d5:b2:ae:b1:4f:21:e9:2b:40:e3:60:a0:a7:8b:ca:
                    a5:42:f2:e5:69:e0:1a:84:06:e5:31:5f:96:87:4a:
                    45:87:6a:c2:df:2c:35:ed:7b:76:43:82:db:03:64:
                    a8:bc:79:b1:66:a0:ea:98:5a:4f:2e:42:71:01:83:
                    2c:a4:7d:39:8e:f9:dc:7b:22:ac:4d:6b:2f:49:ad:
                    d4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:78:58:41:BB:F4:10:8C:B1:8A:B3:23:41:BA:06:D4:5C:E8:D2:EE
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e312e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:27:b5:1c:1f:ba:44:80:e2:d2:6d:a2:e9:88:c2:f7:b5:f1:
         35:b3:86:f2:bc:44:de:de:eb:12:0f:bf:7b:6f:13:8b:82:fc:
         31:d1:e0:4f:b0:42:f3:94:af:7d:c5:14:18:d6:2c:5c:f1:80:
         b0:4a:d8:68:af:ce:a6:fc:f7:c2:77:42:e7:28:ca:b9:8f:f9:
         ef:03:7d:d3:ab:3e:d4:56:88:71:ce:27:4e:94:46:d5:90:77:
         e6:af:6d:c5:25:3e:f2:aa:46:3f:ee:60:a6:18:9f:70:00:de:
         02:5a:65:bb:f4:9d:94:6d:05:be:31:20:0f:81:88:0f:52:1f:
         bd:98:3f:54:e9:16:03:18:83:54:86:7a:df:16:6e:44:14:9f:
         83:e5:0a:7f:ed:41:a1:1e:7a:00:f7:ff:f7:87:eb:1d:e5:f2:
         70:8f:28:38:74:ae:3a:7d:61:ce:d5:c3:59:b9:aa:bd:76:65:
         72:13:a6:d3:98:8a:66:9a:3d:32:70:a3:9c:8c:22:34:64:31:
         09:c7:11:b6:79:a9:af:d4:70:aa:65:60:8a:2c:58:c2:fa:c2:
         2e:9e:f6:e0:d9:a8:bf:69:05:8d:62:fa:ce:0e:86:6a:bd:ab:
         4f:bb:40:59:57:21:c2:6e:97:08:bb:ff:c4:3b:2e:3b:4a:2b:
         9c:3b:d9:68
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUblOO1OF12MHF/zSdtJQvvavheKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDgyMDAyMDRaFw0yNTA0MDcyMDA3MDRaMDMxMTAvBgNV
BAMTKDgyNzg1ODQxQkJGNDEwOENCMThBQjMyMzQxQkEwNkQ0NUNFOEQyRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IiBEzRlu0oNUWFJVtnNKkl16
oPd6+qbYggsl0L+OISyEfVcawJ29JU1CVNwfE5DYbT2P82iEynf4twd4xKfo/ncj
WzqEtVZLSOfbNnMJI2tQKhDIbM5kA773vT1+WoFYEtFwKubnJfMrFRtapbIkIJ4L
iXzCJLYbfI7mN2/6g41XnLhkuUi44yTyOarsT529mp0wJTphBzNCYiTm5jzcWbAo
LVgxtZ+I9rUfM5wEXC7q0NWyrrFPIekrQONgoKeLyqVC8uVp4BqEBuUxX5aHSkWH
asLfLDXte3ZDgtsDZKi8ebFmoOqYWk8uQnEBgyykfTmO+dx7IqxNay9JrdTjAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUgnhYQbv0EIyxirMjQboG1Fzo0u4wHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzNzM3MmUzNjM3MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM1
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFDATANBgkqhkiG9w0BAQsFAAOCAQEAjie1HB+6RIDi
0m2i6YjC97XxNbOG8rxE3t7rEg+/e28Ti4L8MdHgT7BC85SvfcUUGNYsXPGAsErY
aK/Opvz3wndC5yjKuY/57wN906s+1FaIcc4nTpRG1ZB35q9txSU+8qpGP+5gphif
cADeAlplu/SdlG0FvjEgD4GID1IfvZg/VOkWAxiDVIZ63xZuRBSfg+UKf+1BoR56
APf/94frHeXycI8oOHSuOn1hztXDWbmqvXZlchOm05iKZpo9MnCjnIwiNGQxCccR
tnmpr9RwqmVgiixYwvrCLp724Nmov2kFjWL6zg6Gar2rT7tAWVchwm6XCLv/xDsu
O0ornDvZaA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org