Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e322e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e322e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          cBJmFN1l3yQaz7xL4G3NRW0rBTXKTG5lnBV/2hotH1g=
Subject key identifier:   74:B8:FD:73:97:21:6D:51:CE:0E:B3:2C:5C:9D:49:6E:30:A6:D9:D7
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       2FE726039E8AB319F63664751C91C9192D84D99F
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e322e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 08 Apr 2024 20:07:06 +0000
ROA not before:           Mon 08 Apr 2024 20:02:06 +0000
ROA not after:            Mon 07 Apr 2025 20:07:06 +0000
asID:                     262509
IP address blocks:        177.67.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e7:26:03:9e:8a:b3:19:f6:36:64:75:1c:91:c9:19:2d:84:d9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:06 2024 GMT
            Not After : Apr  7 20:07:06 2025 GMT
        Subject: CN=74B8FD7397216D51CE0EB32C5C9D496E30A6D9D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:f0:5e:09:49:3a:be:9f:94:5e:60:9e:2e:
                    bc:78:79:45:bd:4f:b6:ce:40:b9:ef:dc:93:6c:5a:
                    ff:b7:d7:9f:27:7f:3a:dd:95:d4:50:05:e9:fe:38:
                    be:5f:5d:79:30:70:43:59:ae:18:ea:30:de:b5:90:
                    13:2b:b3:05:7d:d5:93:97:60:75:8f:a0:14:f0:c3:
                    9a:78:b0:06:9c:b6:c6:b1:a5:61:69:81:bb:70:96:
                    17:38:85:03:be:1b:15:f1:30:a7:7a:44:b3:89:94:
                    39:51:15:8a:d9:96:fe:fa:28:43:4f:cf:ad:31:8e:
                    8d:42:dc:11:32:9e:13:1a:55:dd:94:55:cf:82:29:
                    6c:18:0c:35:65:ea:59:bd:78:d8:ca:af:70:40:7a:
                    fd:27:f9:5a:05:8f:7b:48:1e:1d:fb:81:ff:2f:41:
                    43:7b:4f:36:11:4f:1e:2e:87:fb:50:ea:c7:81:fd:
                    a2:62:57:00:a2:49:1c:b2:28:e2:52:2b:e3:a9:ba:
                    7b:2e:67:9c:4a:36:07:92:29:12:91:ab:6f:3c:c2:
                    53:0f:c1:4b:ef:f3:0a:4f:37:ff:15:b5:64:5f:c0:
                    b9:5e:6a:0d:bb:06:ec:0e:7d:95:9b:9e:ce:2f:b8:
                    1b:a5:64:77:ad:e0:53:fe:b6:c1:cd:8c:43:ee:0d:
                    02:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B8:FD:73:97:21:6D:51:CE:0E:B3:2C:5C:9D:49:6E:30:A6:D9:D7
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e322e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:32:d2:f6:4a:12:3e:b4:41:ec:ae:03:b9:14:e2:62:dd:ec:
         86:37:e4:ed:37:30:d3:70:db:7e:58:49:71:a0:64:47:8b:d9:
         40:78:7e:c5:04:69:1c:3a:0d:5b:67:90:27:f6:66:05:82:e7:
         07:d6:7a:af:f5:d7:c6:25:af:7e:dd:0d:a6:35:14:90:c4:8e:
         d2:16:9d:53:9e:e5:c5:b8:d9:f4:ba:a2:fb:de:13:58:44:34:
         90:8d:0a:ef:93:f6:de:5f:06:2e:95:59:30:9f:63:a0:d4:71:
         64:6e:81:76:ca:d2:2d:e7:12:a1:9c:85:51:0a:d4:c9:34:16:
         ff:e8:65:5c:e7:3c:34:7c:a0:d7:cd:ee:d1:12:c6:4c:6a:c7:
         c5:5f:ac:8a:4b:67:ab:fe:87:fe:4f:a3:e7:5e:54:ec:26:8f:
         5e:00:ec:1a:c5:80:18:c2:2a:0e:2b:86:3b:bf:8c:38:7b:7e:
         87:56:e0:63:3a:4c:87:d4:a1:1d:ea:27:9d:17:e1:5b:92:11:
         35:6d:0c:7a:4a:4b:7a:2f:c6:60:90:8d:71:05:07:06:ab:6b:
         a6:5c:ae:62:ff:35:a8:f3:ee:d3:aa:6b:a0:12:f4:7d:e1:58:
         89:5e:7c:91:56:f5:88:02:cd:15:83:87:03:04:df:eb:43:83:
         37:c6:cd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org