Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e37352e3139322e302f32302d3230203d3e203238323730.roa
File:                     3137372e37352e3139322e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          4xjz0Vm4BVh2F4LU04qMEaPMW2LvVoNWETfK2dEUx64=
Subject key identifier:   2C:29:52:52:E9:55:50:4B:1B:AA:75:91:3A:74:BB:9F:9C:5C:8E:79
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       296598201D4F5E0C6DC68B367F054075DC27E205
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e37352e3139322e302f32302d3230203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:06:53 +0000
ROA not before:           Mon 08 Apr 2024 20:01:53 +0000
ROA not after:            Mon 07 Apr 2025 20:06:53 +0000
asID:                     28270
IP address blocks:        177.75.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:65:98:20:1d:4f:5e:0c:6d:c6:8b:36:7f:05:40:75:dc:27:e2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:53 2024 GMT
            Not After : Apr  7 20:06:53 2025 GMT
        Subject: CN=2C295252E955504B1BAA75913A74BB9F9C5C8E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7c:30:16:be:30:ca:3e:3c:f4:02:2e:cd:e8:
                    09:2b:08:fd:64:54:3a:74:f1:2e:dc:47:b9:39:03:
                    e4:0b:de:c8:d9:a0:1b:f4:78:31:bb:b2:16:77:a7:
                    ba:72:93:1f:4a:ab:b3:7a:e2:fc:53:92:8c:12:f3:
                    83:9c:b5:93:95:4e:57:2a:0c:e7:70:fb:99:d7:16:
                    a2:51:46:a1:b5:79:36:c9:ca:d7:a5:9e:8b:13:2f:
                    df:94:b5:62:95:d4:96:3b:a6:2f:4c:ac:88:f6:60:
                    34:ac:b0:12:97:bf:49:42:bd:b4:9e:6f:bd:df:72:
                    7d:0d:1e:18:ee:e3:6d:86:fc:51:02:44:b1:c8:a9:
                    f4:1a:58:f2:7f:be:8c:e0:f1:44:ec:62:22:94:2a:
                    1d:31:33:ab:cc:11:ca:51:43:1c:68:c8:d9:00:a9:
                    23:a8:b0:0b:0b:e2:95:52:ea:f6:d8:13:0e:ea:f8:
                    42:19:8b:10:f0:94:9f:68:54:5d:c6:26:4d:e0:9f:
                    5c:a1:a2:26:96:a7:45:32:b3:36:bc:19:9f:43:18:
                    f9:37:11:2b:ad:58:1b:a0:f9:d2:17:fd:48:44:22:
                    bc:fa:75:aa:11:c2:39:df:13:8a:df:5f:ca:1b:33:
                    f1:71:8b:3a:9e:d5:db:15:ef:55:65:78:c2:40:4c:
                    11:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:29:52:52:E9:55:50:4B:1B:AA:75:91:3A:74:BB:9F:9C:5C:8E:79
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e37352e3139322e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:52:75:d0:30:9a:3f:59:8b:9d:78:b6:0d:ff:59:16:42:b1:
         aa:2d:75:a5:e3:92:d4:90:b0:18:e6:f2:17:76:9a:4e:16:41:
         22:f5:81:91:2a:75:b5:64:df:c1:27:60:1c:c6:9d:5a:8b:2a:
         e9:87:aa:19:13:da:eb:6c:bf:53:2d:4c:3c:7c:53:b8:81:d4:
         69:ad:35:9e:ed:dc:c4:78:e4:95:9e:e6:3d:3d:d8:7f:71:d3:
         ac:fb:d4:d4:5a:73:5a:2b:31:de:6b:a1:47:15:44:0c:51:b3:
         01:13:85:90:2e:0e:db:54:0e:b6:38:b9:a8:25:11:ad:a3:57:
         a0:ac:06:53:43:25:37:bd:ff:42:3a:d0:1d:0f:3e:da:b1:10:
         a8:14:41:cf:84:70:8d:4c:50:84:c8:f3:ec:e6:93:16:29:fb:
         3b:36:81:b6:a6:68:ce:3a:c7:48:4e:1d:0b:12:83:a8:de:8d:
         4e:a1:f2:60:ed:f8:76:fa:71:ff:7e:2b:96:de:c4:15:0d:90:
         83:ef:6d:02:eb:22:82:79:a2:04:29:6c:b1:0d:c5:82:6b:ce:
         aa:13:55:cf:0b:be:4f:6c:8b:2f:f9:19:c2:fb:d6:a9:f0:8b:
         11:79:3a:f4:e1:4b:97:53:86:7a:15:81:8b:62:64:13:a1:df:
         f1:70:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org