Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e372e302f32342d3234203d3e20323632353039.roa
File:                     3137372e36372e372e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier:          NqC9VOauOqgnA7kS2sm8vYThAbkTNIeDuzcNyuHEAPE=
Subject key identifier:   C0:AF:04:E7:F7:02:0E:AB:BF:BC:47:3F:98:3A:E9:16:61:3D:A5:E6
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       273830134846B97A0687F6E7827A67110E9B1DD3
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e372e302f32342d3234203d3e20323632353039.roa
Signing time:             Mon 08 Apr 2024 20:07:05 +0000
ROA not before:           Mon 08 Apr 2024 20:02:05 +0000
ROA not after:            Mon 07 Apr 2025 20:07:05 +0000
asID:                     262509
IP address blocks:        177.67.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:38:30:13:48:46:b9:7a:06:87:f6:e7:82:7a:67:11:0e:9b:1d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:05 2024 GMT
            Not After : Apr  7 20:07:05 2025 GMT
        Subject: CN=C0AF04E7F7020EABBFBC473F983AE916613DA5E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f9:ed:84:6f:7e:e3:fc:b3:ec:68:08:0c:16:
                    79:6c:89:25:ec:69:3a:8d:65:c4:68:c1:62:7f:18:
                    ff:ab:10:10:07:62:83:ee:31:12:f8:0d:f0:b8:04:
                    37:23:11:77:8f:39:db:5c:56:ff:fb:10:58:fc:0d:
                    6f:83:30:2d:d1:b4:6f:35:1a:af:89:99:fd:39:03:
                    e3:01:ec:01:50:00:5f:ec:54:3e:50:7c:12:19:3d:
                    2e:95:44:9b:d8:34:e4:03:29:5a:7e:ac:f5:fe:c9:
                    ec:b3:81:b3:2c:38:c6:c4:22:ad:6c:7b:da:b9:72:
                    f3:3f:71:36:0a:af:a7:93:29:81:e4:45:d4:66:94:
                    ee:52:b0:4e:82:8e:cc:2f:78:17:ed:28:5a:97:9f:
                    00:76:ca:d3:00:df:2c:74:d7:ef:fe:ad:60:b3:c4:
                    1d:b8:9e:39:51:f5:8e:d7:da:c8:ed:54:87:d8:05:
                    50:d8:ab:b3:e4:97:6d:29:d9:f3:a0:a0:e6:18:e8:
                    13:eb:58:23:af:c7:37:1e:8f:5e:d5:e8:00:55:7b:
                    57:c7:1a:60:7e:c7:25:95:d2:6a:de:f6:37:68:2a:
                    5b:27:36:31:43:27:83:fc:ff:5d:46:91:a0:ea:22:
                    f8:64:04:a2:ea:a2:06:ac:2c:ce:6e:d4:51:df:aa:
                    a0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AF:04:E7:F7:02:0E:AB:BF:BC:47:3F:98:3A:E9:16:61:3D:A5:E6
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e36372e372e302f32342d3234203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:8b:a4:f2:8d:eb:81:a8:31:1f:61:89:d8:ab:d7:97:f3:2a:
         93:2f:b5:6f:03:89:f3:ab:fb:21:dc:ad:18:a9:55:ba:93:c1:
         b1:17:33:06:03:d5:78:d3:21:c8:a9:9a:21:fb:21:a4:6e:59:
         f1:d7:7a:45:e1:74:85:1b:7f:81:3a:03:e4:89:0a:2c:d9:24:
         aa:72:f7:47:be:9e:95:ba:57:37:55:0a:07:20:4c:6a:f3:79:
         bf:00:c8:70:cb:0d:31:20:2e:07:2b:55:db:3a:9a:f2:b5:5f:
         2d:4d:22:5b:6b:b4:86:95:78:ba:53:77:b1:40:df:13:8c:a8:
         09:86:a8:c5:59:7d:e7:c9:c7:15:d3:7f:76:64:53:89:ca:8f:
         7d:f5:00:cc:95:33:e1:29:1c:81:34:ea:08:56:25:d0:0a:69:
         30:66:4a:99:ba:dc:e0:90:65:b5:c2:ad:ca:1f:2a:35:2b:4a:
         b6:65:d2:34:0e:65:b6:96:8b:86:f6:c7:57:45:49:d2:27:d6:
         0b:0c:8d:cf:a3:20:ec:eb:33:5c:5f:61:90:57:88:63:6d:ca:
         d3:2f:45:ba:9f:1a:fd:55:79:2a:6e:24:d6:3c:77:d9:eb:da:
         f4:bb:14:31:2c:d0:88:67:e5:f1:95:3f:e5:85:54:7d:67:10:
         7c:33:92:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org