Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e332e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e332e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          eJ8JDXOB3QvAE7oip0XJbCCLO0bmR4WYJVTdTnDnBHU=
Subject key identifier:   A7:9C:0B:E3:0E:B7:C1:8B:89:51:EC:42:D7:1E:EA:5C:C0:FC:C6:48
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       515C715CA6FAE9905C2F0D375DB2FD0E65BA5845
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e332e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 08 Apr 2024 20:07:04 +0000
ROA not before:           Mon 08 Apr 2024 20:02:04 +0000
ROA not after:            Mon 07 Apr 2025 20:07:04 +0000
asID:                     262509
IP address blocks:        177.67.3.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:5c:71:5c:a6:fa:e9:90:5c:2f:0d:37:5d:b2:fd:0e:65:ba:58:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:04 2024 GMT
            Not After : Apr  7 20:07:04 2025 GMT
        Subject: CN=A79C0BE30EB7C18B8951EC42D71EEA5CC0FCC648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0f:06:ed:b8:e6:8e:ac:37:b2:ac:af:bd:4b:
                    d1:e3:87:5d:84:c1:b3:b3:81:d2:cf:f8:59:0e:61:
                    a0:27:6e:57:65:5f:e4:17:e2:75:c8:ee:e0:f3:cb:
                    f8:14:62:20:6b:dd:e1:1b:40:71:88:da:01:16:77:
                    2d:8e:f1:2e:f0:6d:d7:8b:95:69:a9:0f:da:ea:73:
                    f3:2a:6d:df:44:0d:d7:47:cb:4c:6f:cd:e0:97:ce:
                    e4:3c:d1:42:0b:d6:a2:b1:0b:f9:08:0b:10:f9:57:
                    db:ed:a4:fa:2d:82:9a:4a:5a:b5:d3:cb:fd:cc:60:
                    5c:79:99:a8:06:ac:59:3c:69:0e:2a:62:32:07:f1:
                    1a:a5:bf:9e:53:ac:57:0e:49:01:1e:cb:0b:fd:32:
                    11:7a:19:99:57:11:81:a7:e6:09:95:2c:fa:39:b4:
                    1f:b0:a5:c3:f0:78:5c:1b:79:8e:34:6f:4c:0b:38:
                    71:30:35:c6:12:a7:0f:f4:9a:c6:7d:84:84:65:d0:
                    56:ba:6d:ee:24:34:00:ae:0f:99:15:23:fd:8b:f6:
                    b4:d5:c7:98:55:29:e0:3e:e6:4d:9a:1c:ea:95:2f:
                    88:65:4a:05:d7:01:e9:93:4c:1f:ca:f3:75:06:38:
                    c8:06:c0:79:87:98:ae:8d:50:4a:cf:92:e1:02:fb:
                    d6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9C:0B:E3:0E:B7:C1:8B:89:51:EC:42:D7:1E:EA:5C:C0:FC:C6:48
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e332e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:0f:cb:2a:a7:32:53:48:c1:63:12:6d:33:f8:18:5e:10:09:
         d0:82:ab:de:74:af:3f:6a:4e:f2:37:a5:f6:60:7c:d1:88:7c:
         c4:7a:3c:b4:60:4a:bf:a0:96:da:3d:af:81:0a:06:4b:27:5a:
         0c:17:43:70:b8:97:96:32:ad:dc:83:36:ce:79:99:21:b3:98:
         9b:08:13:b2:76:1d:95:0b:ed:0f:98:1e:8f:e2:54:df:61:6a:
         7b:a7:14:02:8f:fa:4a:9c:52:3d:77:9a:7b:81:8f:d2:19:9f:
         95:bc:1d:76:78:bd:29:cc:dd:9f:11:a2:9e:6a:5a:e3:f7:76:
         0f:00:d8:6a:ea:61:41:02:69:8d:16:5c:d5:de:a4:05:05:b3:
         43:34:c5:2c:ad:02:14:08:9f:6c:c8:db:d2:60:fe:2b:69:02:
         38:6c:2f:b5:65:4b:ce:35:3d:e2:7a:5d:4a:45:92:c8:c9:92:
         5a:bd:5b:dc:d1:8c:93:ca:d9:48:fb:1d:f3:c9:af:de:20:ce:
         05:2a:85:c9:65:ed:b4:ce:cc:0c:e0:f0:5d:14:36:90:17:19:
         26:d0:bf:37:f8:64:4c:2c:51:bc:59:df:9c:71:ff:ef:e7:a3:
         b1:c7:5e:79:4c:f5:00:97:fc:65:60:7b:e1:00:f2:9d:ee:12:
         d2:09:30:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org