Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e37352e3230382e302f32302d3230203d3e203238323730.roa
File:                     3137372e37352e3230382e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          y2gWbTTzZ/jXvKMjyNeLbji5VlczOynWrl34skD4TTo=
Subject key identifier:   71:2D:04:BC:5E:5E:F2:93:A0:6C:5A:25:AB:9B:D9:A7:8B:AF:5D:6F
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       4E3DEE225AA8C2A1402AC2200EAF2FD93BE8019A
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e37352e3230382e302f32302d3230203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:07:03 +0000
ROA not before:           Mon 08 Apr 2024 20:02:03 +0000
ROA not after:            Mon 07 Apr 2025 20:07:03 +0000
asID:                     28270
IP address blocks:        177.75.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3d:ee:22:5a:a8:c2:a1:40:2a:c2:20:0e:af:2f:d9:3b:e8:01:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:02:03 2024 GMT
            Not After : Apr  7 20:07:03 2025 GMT
        Subject: CN=712D04BC5E5EF293A06C5A25AB9BD9A78BAF5D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:e3:22:22:67:d3:1e:f7:15:d1:75:5b:12:
                    1e:64:84:5c:a8:ae:51:72:54:65:74:6a:37:3f:c4:
                    14:50:f4:29:c4:0a:8b:d5:f1:12:c5:0b:67:27:b2:
                    f6:2f:8b:b7:d5:8f:c6:18:15:0a:2b:79:37:70:8e:
                    ea:07:1e:5c:c2:48:2f:41:4a:b6:a5:55:bb:44:7a:
                    96:38:c4:ca:b2:58:34:f0:c4:16:90:39:00:ad:34:
                    93:3e:62:a9:67:84:3c:d9:6b:a1:e6:c8:cc:09:ec:
                    3f:dc:a5:a7:08:1a:dd:5e:44:ad:9e:ab:16:66:94:
                    82:ed:6c:b6:fb:1e:39:2a:89:a1:e4:3b:fd:d2:73:
                    54:ed:67:e6:1c:89:18:e0:04:22:64:ed:14:0b:51:
                    c2:dd:1e:52:ed:21:79:14:05:dc:b5:f9:cf:74:72:
                    f4:06:da:45:aa:e9:07:3f:b7:23:4f:ba:98:30:99:
                    68:39:8f:50:06:9f:5b:25:55:58:34:2f:75:6a:16:
                    d3:1e:85:12:b6:03:ef:02:f5:e8:c6:44:57:84:dc:
                    17:b9:c2:4c:8f:5e:6a:93:19:18:a5:4e:5a:ad:69:
                    09:1e:92:3d:76:bc:8a:a1:f8:3b:85:8e:d5:40:8a:
                    e1:72:55:6b:c1:7c:b6:e2:89:09:3b:96:dd:a1:89:
                    ce:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2D:04:BC:5E:5E:F2:93:A0:6C:5A:25:AB:9B:D9:A7:8B:AF:5D:6F
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e37352e3230382e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:fc:ce:c1:a9:f6:b7:5b:44:73:25:4c:b2:0c:09:1a:81:a4:
         a0:e9:b3:9b:8c:b7:f7:69:0b:8f:95:07:36:a2:a0:89:63:d2:
         97:6e:0c:4d:4e:a3:9b:31:f4:61:88:c9:94:3b:e3:ca:a7:21:
         1f:b5:0d:7b:07:ea:c5:87:65:30:b9:ff:b5:54:04:5b:51:75:
         9e:13:bb:a5:2d:2a:96:9e:62:82:42:c5:cc:fd:61:c2:92:76:
         1f:fb:c1:67:3d:fa:5f:34:f9:5c:ba:c9:bc:57:5a:e3:a7:9c:
         46:fc:db:b1:05:2e:fb:e4:93:ca:e6:ab:75:77:69:bd:fa:2e:
         26:fa:f7:c5:f2:f4:65:1a:e3:4d:ba:86:de:0c:ee:2b:29:88:
         f5:fe:1c:2e:fa:02:2c:1d:db:58:a9:cf:1f:6c:79:30:47:3c:
         36:21:a5:3f:5a:11:27:9a:08:13:07:04:cf:00:cc:01:5b:5b:
         e7:b5:ff:ee:4d:82:62:2d:d5:20:25:6d:dd:f5:3b:6c:dc:ef:
         ab:3e:35:82:45:5c:c2:13:ac:9f:58:56:3d:b6:f1:1d:1a:70:
         e4:bf:bc:69:86:c5:b8:dd:8a:d9:dd:39:39:b5:c6:54:60:a4:
         89:39:1d:de:13:39:27:b0:67:03:88:db:3b:e8:31:0c:8c:c3:
         7a:8b:3a:b6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTj3uIlqowqFAKsIgDq8v2TvoAZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDgyMDAyMDNaFw0yNTA0MDcyMDA3MDNaMDMxMTAvBgNV
BAMTKDcxMkQwNEJDNUU1RUYyOTNBMDZDNUEyNUFCOUJEOUE3OEJBRjVENkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAOMiImfTHvcV0XVbEh5khFyo
rlFyVGV0ajc/xBRQ9CnECovV8RLFC2cnsvYvi7fVj8YYFQoreTdwjuoHHlzCSC9B
SralVbtEepY4xMqyWDTwxBaQOQCtNJM+YqlnhDzZa6HmyMwJ7D/cpacIGt1eRK2e
qxZmlILtbLb7HjkqiaHkO/3Sc1TtZ+YciRjgBCJk7RQLUcLdHlLtIXkUBdy1+c90
cvQG2kWq6Qc/tyNPupgwmWg5j1AGn1slVVg0L3VqFtMehRK2A+8C9ejGRFeE3Be5
wkyPXmqTGRilTlqtaQkekj12vIqh+DuFjtVAiuFyVWvBfLbiiQk7lt2hic4DAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcS0EvF5e8pOgbFolq5vZp4uvXW8wHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzNzM3MmUzNzM1MmUzMjMwMzgyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4
MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsUvQMA0GCSqGSIb3DQEBCwUAA4IBAQCX/M7Bqfa3
W0RzJUyyDAkagaSg6bObjLf3aQuPlQc2oqCJY9KXbgxNTqObMfRhiMmUO+PKpyEf
tQ17B+rFh2Uwuf+1VARbUXWeE7ulLSqWnmKCQsXM/WHCknYf+8FnPfpfNPlcusm8
V1rjp5xG/NuxBS775JPK5qt1d2m9+i4m+vfF8vRlGuNNuobeDO4rKYj1/hwu+gIs
HdtYqc8fbHkwRzw2IaU/WhEnmggTBwTPAMwBW1vntf/uTYJiLdUgJW3d9Tts3O+r
PjWCRVzCE6yfWFY9tvEdGnDkv7xphsW43YrZ3Tk5tcZUYKSJOR3eEzknsGcDiNs7
6DEMjMN6izq2
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org