Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e37302e3132382e302f32302d3230203d3e203238323730.roa
File:                     3137372e37302e3132382e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          XztD2COHmGnJoGFr2KS9418FWhDmTdNldF14QwuCnO4=
Subject key identifier:   93:DE:72:55:34:6F:42:9E:D1:E7:43:16:54:63:03:E6:5C:07:3A:15
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       1109F26FDB869E529D059691E2347668064DBE61
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e37302e3132382e302f32302d3230203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:07:05 +0000
ROA not before:           Mon 08 Apr 2024 20:02:05 +0000
ROA not after:            Mon 07 Apr 2025 20:07:05 +0000
asID:                     28270
IP address blocks:        177.70.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:09:f2:6f:db:86:9e:52:9d:05:96:91:e2:34:76:68:06:4d:be:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:05 2024 GMT
            Not After : Apr  7 20:07:05 2025 GMT
        Subject: CN=93DE7255346F429ED1E74316546303E65C073A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:d9:83:7b:89:75:7c:bf:0b:4f:e8:0f:f8:
                    16:a9:72:6f:8c:f9:a8:30:ef:84:39:7c:6a:63:ff:
                    bf:ee:3b:b7:ed:21:db:5a:70:01:db:48:43:75:63:
                    27:cb:0b:2c:c5:f2:77:28:29:ca:d9:ba:5e:3d:b0:
                    47:0e:af:8b:01:76:09:b7:34:44:e6:d4:a2:d8:eb:
                    2d:5f:8c:51:93:ca:6c:17:15:9f:75:cd:df:d3:41:
                    0d:0c:bf:88:e6:31:55:bc:25:5d:41:c6:55:e7:f0:
                    ef:a4:89:53:ea:7d:ce:4b:c8:2a:64:f6:66:b9:ca:
                    e4:43:66:81:7a:93:e3:df:a1:e6:cc:4d:43:a5:a3:
                    f5:3e:a0:c7:ac:c3:8b:9f:47:f7:e2:ea:d5:7c:35:
                    aa:7a:19:1a:42:77:08:97:22:01:b7:09:a1:99:5a:
                    86:7b:3c:b5:17:b5:2b:06:1f:58:47:c1:d1:dc:9c:
                    e8:bb:a7:53:c4:ce:19:58:69:38:9c:2e:8e:92:bc:
                    9c:91:1a:87:81:ec:ae:c9:7f:af:bb:d8:2f:10:c0:
                    0b:f6:af:16:56:4e:d3:47:c3:a8:36:e9:47:54:9c:
                    a6:69:10:ec:26:c8:54:af:d4:42:70:b0:ad:3c:50:
                    0f:0f:4b:b5:49:83:cd:f1:b3:c7:36:49:6e:7f:51:
                    89:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DE:72:55:34:6F:42:9E:D1:E7:43:16:54:63:03:E6:5C:07:3A:15
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e37302e3132382e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:d6:12:65:5c:df:e6:84:08:01:f2:54:48:40:44:67:87:c3:
         65:46:a4:09:00:53:80:9c:e2:bc:ea:0f:6d:99:85:e5:a0:ef:
         28:eb:28:b8:4b:7f:7e:33:cb:a8:9d:87:dd:8d:8f:31:f4:82:
         2b:46:08:ee:5e:52:39:e0:56:6d:c1:fe:ff:13:a1:c0:0e:2b:
         b7:53:4d:c7:b6:f5:f4:12:10:da:43:d2:81:cd:fa:d0:50:72:
         79:3a:67:cd:58:6a:91:75:a9:5a:4c:9b:16:e9:c2:4f:8b:6c:
         6b:73:23:dc:b6:f1:56:97:d2:9b:6d:b0:d5:fb:e3:d3:21:35:
         31:e2:8f:b6:d9:1a:23:11:0a:7e:2c:8e:fc:3a:53:d2:63:56:
         c2:ec:c9:a0:2c:a0:32:f1:13:82:3c:30:95:a4:1c:8f:e4:1b:
         92:eb:d5:a6:e7:50:c0:3e:96:36:84:81:88:27:56:0c:de:f1:
         21:c2:5d:e0:28:12:b3:a3:6d:b5:ab:1a:82:86:f0:d6:e6:fa:
         9a:e0:17:ef:30:4d:cb:79:4f:ca:20:00:d6:25:0e:66:13:ec:
         de:aa:22:10:39:ef:ff:6a:f0:9b:04:57:ef:70:97:17:63:e0:
         9c:75:4f:4f:8f:cf:44:12:e2:d1:91:3b:f0:01:d3:e6:fd:87:
         af:35:04:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org