Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e362e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e362e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          +n2SkTJ1oZTi1bF+GUaXBADyxcHn4LWfukYJ+aAhsr0=
Subject key identifier:   FE:02:81:A6:83:BC:94:D1:F3:AE:3F:59:3F:B3:D7:29:0F:B5:85:CA
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       6808A55ECB08A07D73984C5203A50FA056ECB858
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e362e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 08 Apr 2024 20:06:58 +0000
ROA not before:           Mon 08 Apr 2024 20:01:58 +0000
ROA not after:            Mon 07 Apr 2025 20:06:58 +0000
asID:                     262509
IP address blocks:        177.67.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:08:a5:5e:cb:08:a0:7d:73:98:4c:52:03:a5:0f:a0:56:ec:b8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:58 2024 GMT
            Not After : Apr  7 20:06:58 2025 GMT
        Subject: CN=FE0281A683BC94D1F3AE3F593FB3D7290FB585CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:02:ae:60:2b:24:fc:df:27:0b:34:b4:0e:99:
                    b3:2c:91:81:d9:eb:d9:9e:f7:78:3f:0a:ba:c3:e8:
                    5f:01:41:20:60:c3:e0:f6:7e:1f:01:de:81:9f:0f:
                    e8:5c:07:36:aa:c3:83:b3:fe:b0:ef:86:37:21:c8:
                    72:aa:f4:b1:3e:de:8b:b8:6f:3c:a2:f1:43:3d:ed:
                    0f:0d:19:40:17:ec:19:2e:bc:2e:cf:19:46:43:d1:
                    84:08:d9:d5:b2:72:50:a5:9f:59:dd:5a:7d:4c:84:
                    52:58:e6:98:05:ef:5f:e2:d2:06:d8:e4:c0:41:9c:
                    7a:4d:5f:2c:e2:29:26:17:66:49:d7:17:ca:72:3a:
                    6c:ac:a8:d3:84:7e:bb:eb:e5:9e:c7:13:48:3e:61:
                    66:41:80:ea:fc:67:72:37:9a:c0:20:2a:ce:dd:ff:
                    78:a3:32:c8:73:7d:77:29:cd:92:7c:69:68:76:9e:
                    1b:6f:cd:1a:92:62:13:7c:88:04:47:cb:e1:74:04:
                    7e:c1:47:7a:ca:84:3d:23:61:52:cf:c5:7e:b3:66:
                    f1:78:1c:16:e6:27:83:b9:ce:b1:26:52:46:ce:5e:
                    9f:cc:b1:8c:6a:e2:1e:44:a4:7a:54:ca:e8:89:3e:
                    55:bc:cb:d6:bb:ca:cf:d4:60:3d:8b:b6:12:7f:99:
                    39:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:02:81:A6:83:BC:94:D1:F3:AE:3F:59:3F:B3:D7:29:0F:B5:85:CA
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e362e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:eb:03:e7:f5:46:fa:ae:f0:e4:42:40:89:f2:a9:c9:88:b6:
         ab:5f:9e:b6:2c:3c:1f:13:77:b5:70:f0:aa:ab:16:41:20:33:
         e5:33:fb:8c:a8:31:85:0b:52:4e:b5:19:c9:f2:70:b1:b3:0d:
         de:b1:61:de:00:9b:9a:6f:6e:72:c4:b4:76:9e:b9:2e:c9:6c:
         fe:a8:8c:9a:88:49:2c:8f:a8:6d:3d:4c:e1:81:3a:3f:19:86:
         0e:86:a5:23:fa:e7:23:6f:b3:77:d7:80:93:24:d7:8c:14:6b:
         71:dc:03:a2:79:6d:33:a2:65:1e:3c:0d:0e:af:33:05:73:a7:
         ca:f5:5e:71:4a:02:20:ed:53:c7:db:41:92:54:63:89:ce:ec:
         f4:7d:0c:1f:89:d9:98:33:67:76:6c:70:37:24:51:8c:31:90:
         84:22:86:28:68:95:3a:5c:94:22:95:d9:36:f1:11:90:e4:df:
         93:28:8f:a3:63:7e:c6:3c:80:2c:62:79:80:fe:ec:da:f6:0d:
         e2:ab:a4:33:d7:e0:0e:e7:5e:a1:f4:4b:9f:5a:66:80:7a:9b:
         0c:99:20:46:ec:d8:31:fc:1d:6b:a7:fa:5d:64:a3:bd:36:f7:
         77:0a:30:36:49:25:9c:c9:ad:df:18:46:71:bf:db:2c:f6:46:
         f1:a9:ba:08
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaAilXssIoH1zmExSA6UPoFbsuFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDgyMDAxNThaFw0yNTA0MDcyMDA2NThaMDMxMTAvBgNV
BAMTKEZFMDI4MUE2ODNCQzk0RDFGM0FFM0Y1OTNGQjNENzI5MEZCNTg1Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqAq5gKyT83ycLNLQOmbMskYHZ
69me93g/CrrD6F8BQSBgw+D2fh8B3oGfD+hcBzaqw4Oz/rDvhjchyHKq9LE+3ou4
bzyi8UM97Q8NGUAX7BkuvC7PGUZD0YQI2dWyclCln1ndWn1MhFJY5pgF71/i0gbY
5MBBnHpNXyziKSYXZknXF8pyOmysqNOEfrvr5Z7HE0g+YWZBgOr8Z3I3msAgKs7d
/3ijMshzfXcpzZJ8aWh2nhtvzRqSYhN8iARHy+F0BH7BR3rKhD0jYVLPxX6zZvF4
HBbmJ4O5zrEmUkbOXp/MsYxq4h5EpHpUyuiJPlW8y9a7ys/UYD2LthJ/mTkrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU/gKBpoO8lNHzrj9ZP7PXKQ+1hcowHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzNzM3MmUzNjM3MmUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM1
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFDBjANBgkqhkiG9w0BAQsFAAOCAQEAresD5/VG+q7w
5EJAifKpyYi2q1+etiw8HxN3tXDwqqsWQSAz5TP7jKgxhQtSTrUZyfJwsbMN3rFh
3gCbmm9ucsS0dp65Lsls/qiMmohJLI+obT1M4YE6PxmGDoalI/rnI2+zd9eAkyTX
jBRrcdwDonltM6JlHjwNDq8zBXOnyvVecUoCIO1Tx9tBklRjic7s9H0MH4nZmDNn
dmxwNyRRjDGQhCKGKGiVOlyUIpXZNvERkOTfkyiPo2N+xjyALGJ5gP7s2vYN4quk
M9fgDudeofRLn1pmgHqbDJkgRuzYMfwda6f6XWSjvTb3dwowNkklnMmt3xhGcb/b
LPZG8am6CA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org