Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e37352e3139322e302f32302d3230203d3e20323731373234.roa
File:                     3137372e37352e3139322e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          1deje7seZZT7biOQMiaN8ozzHZPpTAYzVdO91Hr/KqI=
Subject key identifier:   D1:D5:79:A5:56:B1:35:36:5C:3E:1D:06:9F:46:0B:BE:8D:EC:E4:8A
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       0B519795C4C9AF5A2EA8CE3025012E35AC67D641
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e37352e3139322e302f32302d3230203d3e20323731373234.roa
Signing time:             Mon 08 Apr 2024 20:06:52 +0000
ROA not before:           Mon 08 Apr 2024 20:01:52 +0000
ROA not after:            Mon 07 Apr 2025 20:06:52 +0000
asID:                     271724
IP address blocks:        177.75.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:51:97:95:c4:c9:af:5a:2e:a8:ce:30:25:01:2e:35:ac:67:d6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:52 2024 GMT
            Not After : Apr  7 20:06:52 2025 GMT
        Subject: CN=D1D579A556B135365C3E1D069F460BBE8DECE48A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:da:79:25:85:79:4f:95:8c:0b:d6:fd:cc:dc:
                    5a:0b:85:56:61:11:42:d9:fe:39:92:ad:ab:83:ab:
                    35:ae:52:83:33:48:ab:61:d2:4a:77:4e:9f:b4:90:
                    f4:b8:6f:d3:da:fa:ea:97:67:49:10:19:29:31:cf:
                    ec:41:ca:9c:4b:4a:86:3e:3f:96:9d:f8:c3:cb:fd:
                    f3:9d:69:68:14:8c:1b:32:b9:b7:f6:c7:b8:1e:6d:
                    b0:a0:30:2c:9b:fe:91:77:a7:16:66:60:d1:3e:b7:
                    c5:d3:8c:7e:9a:77:60:e9:02:b0:6a:de:15:13:e0:
                    16:78:11:5e:37:37:e2:4d:29:9d:fd:e9:05:bb:ba:
                    9f:98:3f:04:56:11:a3:78:b8:f0:5e:cf:f8:e0:db:
                    6c:82:dc:8c:4a:8c:70:6a:76:36:45:9f:ec:fa:7a:
                    3c:6e:c5:ec:98:51:d3:26:08:5b:9c:30:b9:fa:35:
                    60:00:73:5a:d2:8a:c2:a9:ea:e6:96:4a:ed:4a:22:
                    8a:bf:87:01:83:c7:bd:64:6e:05:78:c4:a0:63:a8:
                    00:c9:0f:60:b0:d4:91:2b:57:ed:e9:23:25:b4:92:
                    e4:3d:34:c0:92:0c:26:e4:22:86:3b:e6:f9:0a:6c:
                    8c:02:ce:f9:c4:cb:7c:d9:25:a5:0a:d6:3d:dd:c9:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D5:79:A5:56:B1:35:36:5C:3E:1D:06:9F:46:0B:BE:8D:EC:E4:8A
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e37352e3139322e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:7e:87:c3:04:01:0f:a8:6c:b6:45:ee:6d:2e:dc:01:7b:b9:
         21:cc:b4:fd:e1:c6:41:aa:36:b1:cc:56:4e:6b:b3:8d:2d:21:
         e7:2c:83:5d:25:64:55:b6:30:a8:56:2d:ad:45:8f:13:93:20:
         aa:ed:33:ab:a6:fb:e0:e3:90:27:3c:d6:0d:96:10:7c:c5:4d:
         fa:7c:4c:c6:3f:19:5f:92:56:53:2d:b6:18:d2:a6:cd:2a:32:
         3f:95:f8:89:1e:ca:c9:ce:cf:42:5f:8d:0a:71:9d:53:8c:b1:
         8c:d4:ef:8e:9c:e2:69:7b:04:d6:3b:d1:c8:e9:ab:22:06:90:
         eb:31:15:66:69:59:d9:43:a6:53:d1:fa:96:e3:82:ac:8a:ae:
         cf:c5:74:51:ae:f1:77:91:57:d5:d8:85:97:bd:e3:61:8c:3b:
         19:fd:c3:fd:ae:55:5a:04:56:74:8a:6e:f1:41:a7:9e:eb:6b:
         fb:b7:e3:cc:b0:ba:4d:16:b2:e6:c6:43:2b:66:a0:85:8b:88:
         af:a3:a7:48:12:24:06:3a:2e:00:75:13:63:cb:73:56:dc:42:
         7a:ee:7f:b7:4d:61:01:10:11:d6:43:d4:65:b8:77:73:0d:4a:
         d0:26:da:bc:ac:35:41:54:32:51:7f:3e:36:b3:72:04:d2:34:
         b0:3b:7f:60
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUC1GXlcTJr1ouqM4wJQEuNaxn1kEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDgyMDAxNTJaFw0yNTA0MDcyMDA2NTJaMDMxMTAvBgNV
BAMTKEQxRDU3OUE1NTZCMTM1MzY1QzNFMUQwNjlGNDYwQkJFOERFQ0U0OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT2nklhXlPlYwL1v3M3FoLhVZh
EULZ/jmSrauDqzWuUoMzSKth0kp3Tp+0kPS4b9Pa+uqXZ0kQGSkxz+xBypxLSoY+
P5ad+MPL/fOdaWgUjBsyubf2x7gebbCgMCyb/pF3pxZmYNE+t8XTjH6ad2DpArBq
3hUT4BZ4EV43N+JNKZ396QW7up+YPwRWEaN4uPBez/jg22yC3IxKjHBqdjZFn+z6
ejxuxeyYUdMmCFucMLn6NWAAc1rSisKp6uaWSu1KIoq/hwGDx71kbgV4xKBjqADJ
D2Cw1JErV+3pIyW0kuQ9NMCSDCbkIoY75vkKbIwCzvnEy3zZJaUK1j3dyQgFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU0dV5pVaxNTZcPh0Gn0YLvo3s5IowHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzNzM3MmUzNzM1MmUzMTM5MzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM3
MzEzNzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBASxS8AwDQYJKoZIhvcNAQELBQADggEBAIh+h8ME
AQ+obLZF7m0u3AF7uSHMtP3hxkGqNrHMVk5rs40tIecsg10lZFW2MKhWLa1FjxOT
IKrtM6um++DjkCc81g2WEHzFTfp8TMY/GV+SVlMtthjSps0qMj+V+IkeysnOz0Jf
jQpxnVOMsYzU746c4ml7BNY70cjpqyIGkOsxFWZpWdlDplPR+pbjgqyKrs/FdFGu
8XeRV9XYhZe942GMOxn9w/2uVVoEVnSKbvFBp57ra/u348ywuk0WsubGQytmoIWL
iK+jp0gSJAY6LgB1E2PLc1bcQnruf7dNYQEQEdZD1GW4d3MNStAm2rysNUFUMlF/
PjazcgTSNLA7f2A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org