Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e342e302f32322d3232203d3e20323632353039.roa
File:                     3137372e36372e342e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier:          u8C1u2JJaIB1H7nfrMiSlZN3YpBaepcLSaieu+niKUI=
Subject key identifier:   FC:32:C8:75:DA:F1:03:3E:AE:41:CE:A6:19:BD:55:8F:65:13:B4:87
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       4BFF4CCAFAA404FA1797A4F22D2452F6A6971758
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e342e302f32322d3232203d3e20323632353039.roa
Signing time:             Mon 08 Apr 2024 20:06:58 +0000
ROA not before:           Mon 08 Apr 2024 20:01:58 +0000
ROA not after:            Mon 07 Apr 2025 20:06:58 +0000
asID:                     262509
IP address blocks:        177.67.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ff:4c:ca:fa:a4:04:fa:17:97:a4:f2:2d:24:52:f6:a6:97:17:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:58 2024 GMT
            Not After : Apr  7 20:06:58 2025 GMT
        Subject: CN=FC32C875DAF1033EAE41CEA619BD558F6513B487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:37:80:37:98:1b:ac:74:f8:7d:8d:2b:62:04:
                    83:1d:a9:aa:91:e6:13:68:36:e0:15:ba:64:d9:27:
                    17:33:76:7d:ba:cf:84:3c:fd:5c:c5:5a:d6:3b:a9:
                    de:01:af:ae:d0:ba:6e:9f:57:93:44:e2:b6:95:64:
                    05:8f:47:fe:81:bc:d6:98:77:61:f6:99:77:d8:90:
                    b4:b1:f4:09:17:ef:fb:2a:38:bc:c2:e1:7d:78:8e:
                    cd:58:fd:07:e4:ca:21:f4:7b:ed:8f:44:3b:4e:b9:
                    75:5d:45:84:d6:c8:5c:70:bc:47:88:31:01:96:09:
                    38:15:90:53:5f:40:1b:dd:bd:26:03:ef:04:1f:4c:
                    f6:fe:97:0e:bd:3d:95:7d:4c:ee:22:fd:1e:e1:3b:
                    af:65:03:45:08:96:8c:13:2a:4f:2a:88:1f:68:a9:
                    9b:d5:b9:bf:a9:63:1b:ed:70:e3:a6:7d:33:2a:a1:
                    14:f8:79:c0:fe:02:49:53:50:ff:f1:5c:38:ea:1a:
                    56:8d:c3:87:da:1e:b1:70:a3:29:11:80:a9:bc:dd:
                    b0:d4:b3:e5:6f:b8:de:0b:a5:f9:88:b0:b7:a0:8f:
                    e7:be:9a:5e:d7:56:d3:69:df:e8:cf:41:cb:c6:06:
                    10:5e:8f:98:d6:f5:09:73:14:94:6b:b1:54:9c:0d:
                    7a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:32:C8:75:DA:F1:03:3E:AE:41:CE:A6:19:BD:55:8F:65:13:B4:87
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e342e302f32322d3232203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:a1:f7:aa:4e:60:62:16:00:6f:ce:d5:ca:1b:8a:16:c4:70:
         e2:24:74:3f:d6:e5:01:3c:b6:6f:c3:11:89:83:c2:8b:d6:84:
         b6:08:eb:cc:d7:8a:cc:94:cf:5c:e2:bc:2e:71:5f:93:b5:1b:
         f4:9e:35:f8:7a:47:da:63:bd:f4:c1:b6:ba:4b:84:59:44:f3:
         52:2a:2c:bc:a3:a5:15:82:a7:39:f5:65:ee:d2:0f:e7:e8:c3:
         93:4d:ee:20:19:e4:31:fc:87:f9:08:e6:af:b7:3d:05:c1:8d:
         f7:b1:7c:4a:d1:ec:d1:e5:02:97:3b:8d:0d:63:ca:8a:85:25:
         32:d7:57:f3:5c:b9:6d:48:09:06:a4:12:db:23:b8:6e:d4:bd:
         b0:20:9a:e1:1e:4b:b4:68:2b:41:ef:07:18:66:20:9c:70:41:
         8f:77:1d:d7:80:16:29:06:34:e7:52:b3:bf:ed:10:c4:62:df:
         b8:7f:7c:46:82:82:5a:d5:69:d5:ec:12:d6:22:76:6c:b7:06:
         1d:85:8e:13:38:3d:67:88:87:3b:f1:52:49:da:78:7a:59:0b:
         48:a5:72:b3:53:a8:35:62:da:4f:fe:f6:e5:af:9c:dc:84:78:
         97:7c:fd:56:5f:63:59:a6:43:61:b5:09:22:78:e9:f5:b6:7c:
         e7:05:b2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org