Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e342e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e342e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          KBmyE4lRrnrLs80jEAH9DVZjFW6jPL9uB5niu2XEnRU=
Subject key identifier:   7B:4F:ED:2C:98:32:3A:B3:86:4C:C8:92:74:C9:96:0E:5A:19:41:26
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       7480263FCF032B2F62A43550C96C986F64DD23F9
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e342e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 08 Apr 2024 20:06:55 +0000
ROA not before:           Mon 08 Apr 2024 20:01:55 +0000
ROA not after:            Mon 07 Apr 2025 20:06:55 +0000
asID:                     262509
IP address blocks:        177.67.4.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:80:26:3f:cf:03:2b:2f:62:a4:35:50:c9:6c:98:6f:64:dd:23:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:55 2024 GMT
            Not After : Apr  7 20:06:55 2025 GMT
        Subject: CN=7B4FED2C98323AB3864CC89274C9960E5A194126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:82:49:ed:d4:8d:c3:25:0a:c5:c8:c2:c0:50:
                    fe:a3:70:36:bb:be:59:31:b3:16:d5:8e:95:85:cd:
                    25:60:08:3b:41:2c:fa:b9:c4:09:6e:c2:74:b3:a3:
                    67:46:e6:9f:8e:1e:23:4c:78:71:32:1f:9f:82:49:
                    02:a0:67:d8:a7:19:83:e7:76:dd:27:3c:ca:ce:52:
                    79:54:3e:e1:82:ef:1b:a4:07:24:ba:f2:17:49:e3:
                    bc:d3:6b:91:b9:33:d2:56:34:3f:57:ce:78:f8:c5:
                    79:0a:80:7c:20:ea:af:d2:95:ab:8d:d3:d3:aa:ca:
                    e5:20:b5:a4:a8:ab:bc:3a:06:a0:79:53:61:f8:a0:
                    20:c7:70:c0:1f:10:51:5a:51:80:f3:eb:5b:f6:b4:
                    83:49:c2:bd:f6:bf:4f:f7:f8:9d:47:64:69:c9:88:
                    e0:fa:5b:1d:ee:00:99:b4:42:c2:1b:5a:62:7a:57:
                    37:34:c9:47:23:3e:1f:0b:eb:59:68:37:cd:6f:26:
                    48:6f:81:33:08:21:23:b6:ef:ee:d1:bf:c1:3f:2b:
                    24:a9:47:be:c9:05:7a:64:c1:53:7d:a9:f7:95:0d:
                    ba:db:41:57:82:5e:59:58:01:67:44:29:3c:cf:f1:
                    14:84:a5:f9:14:49:48:6a:39:3b:2f:a6:d2:cc:dc:
                    b1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4F:ED:2C:98:32:3A:B3:86:4C:C8:92:74:C9:96:0E:5A:19:41:26
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e342e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:2e:e8:49:d0:c6:cd:f9:be:03:c6:48:dd:cb:21:a7:38:
         39:b6:01:8a:7c:97:e8:da:2b:60:7f:03:ef:55:fa:c5:fd:25:
         35:4c:f8:b6:cd:43:36:71:8d:5f:49:cd:b9:e4:26:a8:7c:58:
         e4:1e:b2:24:3e:45:6f:67:f3:12:8b:e1:21:52:d2:0e:bb:8a:
         52:95:87:7f:b8:b6:d9:d4:b3:6e:d6:ca:f3:17:71:52:13:93:
         51:68:a8:df:2a:c9:22:ea:58:d0:7e:b7:ac:93:9b:33:ac:ce:
         0f:eb:ed:7c:fa:bb:f8:61:1d:86:12:d7:ed:cd:a2:71:e8:f3:
         57:4a:27:7a:14:b9:9d:af:61:10:36:1b:95:ab:74:ca:0f:a4:
         b0:e5:ac:98:ba:24:df:62:80:e5:06:e6:4d:8d:0c:2c:96:87:
         95:df:32:5d:2a:cf:3e:b9:2c:7a:9b:9b:5b:e3:8e:e6:65:98:
         15:bb:85:f2:13:28:e0:4b:90:82:c9:3f:89:4d:a6:d5:64:15:
         23:0e:0c:5f:d9:3d:02:b0:91:dd:bb:82:4c:5b:77:c5:1d:f1:
         cb:64:ed:61:2e:19:dd:49:ce:86:89:28:68:b6:5d:23:a5:d1:
         f4:cd:db:94:d3:6a:91:0d:71:4e:28:c0:1c:10:78:a5:d8:73:
         24:9c:f4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org