Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e352e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e352e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          2+9rBkc6ezzI8en6zYmYup8gZoj9NK6CWC0kKm+SHuw=
Subject key identifier:   F4:F1:4B:90:11:6C:C4:07:D2:EA:2E:BC:8D:52:F1:97:C2:93:1A:E5
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       350B0BE6D9EE72385BEBAE9B08DD1BAEC8CEC480
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e352e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 08 Apr 2024 20:07:00 +0000
ROA not before:           Mon 08 Apr 2024 20:02:00 +0000
ROA not after:            Mon 07 Apr 2025 20:07:00 +0000
asID:                     262509
IP address blocks:        177.67.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:0b:0b:e6:d9:ee:72:38:5b:eb:ae:9b:08:dd:1b:ae:c8:ce:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:00 2024 GMT
            Not After : Apr  7 20:07:00 2025 GMT
        Subject: CN=F4F14B90116CC407D2EA2EBC8D52F197C2931AE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:48:67:ac:4b:fc:a0:34:c9:c0:22:4c:b0:2e:
                    99:b1:d9:06:d0:3a:4c:dc:ff:cc:ed:a5:a5:48:46:
                    f0:f7:75:a0:d3:7c:32:e2:25:e2:bb:2a:bf:8a:82:
                    7f:7f:ab:3c:6e:11:14:58:5f:ea:d8:46:6d:a7:b1:
                    a1:a7:2d:5b:c3:67:38:7e:60:d2:1f:83:19:19:28:
                    c0:bb:c0:17:ca:bd:06:b8:ef:f9:ec:38:76:b2:85:
                    c8:55:08:77:76:29:6c:b3:b1:d2:d4:ab:aa:10:0a:
                    f1:ca:e7:7f:96:56:a9:5c:63:b8:5b:55:79:69:ed:
                    63:4c:90:eb:46:3d:11:1a:72:d5:85:e0:bf:e4:c0:
                    70:3f:4a:ba:ae:c9:ab:9a:4c:e3:7e:73:58:0a:fe:
                    29:d7:1c:5d:0b:bd:ab:b8:7d:e8:94:5b:84:72:88:
                    01:9a:d1:7f:5b:15:03:d2:62:a3:61:dc:09:10:0d:
                    90:bc:94:fb:b2:bc:24:c3:e8:1e:6d:eb:a3:a6:f7:
                    47:25:e9:2b:67:cb:f6:25:ab:80:3e:1c:c4:12:c7:
                    9b:ab:ff:93:3f:af:8e:d3:04:82:16:66:86:7b:54:
                    46:d3:99:c7:21:c8:bb:ac:85:90:3d:88:24:79:c7:
                    9b:3b:a5:c5:6d:2e:eb:18:b9:c5:45:c3:1e:2e:3f:
                    94:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F1:4B:90:11:6C:C4:07:D2:EA:2E:BC:8D:52:F1:97:C2:93:1A:E5
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e352e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:d5:7d:8a:b6:1c:45:d2:e7:69:da:56:3f:c4:2d:78:0d:79:
         02:a0:12:49:a6:9e:10:40:42:b6:78:1d:d1:97:b1:fa:e7:6c:
         8b:a9:41:63:9a:7a:25:d7:2e:74:a6:c4:fb:51:19:8c:94:aa:
         6b:01:de:8f:88:da:46:99:41:16:83:9b:ac:a7:8e:ce:c5:9a:
         2e:af:c9:c5:52:65:22:e3:51:16:24:b3:a9:06:37:30:ea:42:
         57:e6:6f:cd:5f:0f:53:2c:ec:8e:0b:43:2c:11:68:88:ae:11:
         8a:82:06:1e:82:f4:fd:f5:7c:5a:af:47:17:ca:38:ba:0b:8b:
         c2:b2:e4:c2:f8:3e:e9:58:2d:7f:45:83:fa:43:d6:c5:7c:70:
         58:bd:a1:50:9e:11:25:7e:23:7c:83:ba:46:c0:41:2e:01:9f:
         21:ba:21:e6:a1:dc:c1:22:2b:d3:4e:9c:06:7c:79:f5:aa:e2:
         61:8d:84:5a:88:00:5b:d5:5c:6e:a5:23:8a:9a:41:50:92:ed:
         1d:c4:34:38:6a:c6:de:76:ba:88:71:53:6c:a2:74:73:da:df:
         86:18:7c:f4:69:dc:00:f5:ac:f6:e9:e9:e2:d8:4d:5a:2a:6c:
         7e:e7:e9:29:f5:fe:cf:f6:6d:1e:47:16:fd:9e:ff:01:ab:c8:
         3a:4a:c4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org