Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e38372e3134342e302f32312d3231203d3e203238323730.roa
File:                     3137372e38372e3134342e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier:          oQweNJSwBJYmxDaXmvHIoVx1U6WnyDat9i6rvQadp+w=
Subject key identifier:   27:5F:FB:18:D1:30:EA:F3:F1:D9:67:F0:F7:FC:53:7F:8B:AB:63:E3
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       2879FA104BD2FB856F376C4F5A36C6D49F0C7658
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e38372e3134342e302f32312d3231203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:06:56 +0000
ROA not before:           Mon 08 Apr 2024 20:01:56 +0000
ROA not after:            Mon 07 Apr 2025 20:06:56 +0000
asID:                     28270
IP address blocks:        177.87.144.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:79:fa:10:4b:d2:fb:85:6f:37:6c:4f:5a:36:c6:d4:9f:0c:76:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:56 2024 GMT
            Not After : Apr  7 20:06:56 2025 GMT
        Subject: CN=275FFB18D130EAF3F1D967F0F7FC537F8BAB63E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:ab:c4:93:13:2c:11:01:dd:47:cb:01:4d:
                    63:50:14:6b:b2:a1:8b:e7:60:9c:77:a6:aa:52:3a:
                    20:1e:31:08:80:58:03:c8:2c:66:bd:e6:d5:81:1b:
                    19:75:bc:0e:6d:c1:0e:da:46:de:48:97:51:67:af:
                    8e:21:36:a0:ed:de:cb:ef:59:e2:88:0f:f9:cb:81:
                    52:08:19:83:e3:1e:1b:08:ab:15:e2:4a:96:22:12:
                    06:12:54:b7:0b:dc:fc:f8:b2:f2:80:fc:91:ac:64:
                    19:e7:94:74:ac:70:f5:cf:b2:65:f1:68:a4:58:f1:
                    4c:17:12:d8:c7:39:66:84:5f:d1:44:a3:ce:b2:97:
                    54:65:81:70:59:fa:3a:91:15:db:b4:6e:c2:77:73:
                    5a:35:a5:f0:c2:8d:40:d6:42:19:43:26:e4:a1:f4:
                    1a:ad:ff:ab:3d:be:0f:14:d0:2c:0e:ed:3b:c5:aa:
                    25:fc:fa:46:cb:6b:4a:b1:24:37:64:6c:e6:3d:eb:
                    df:85:7b:d4:c7:79:0b:99:87:39:fd:30:2b:70:ae:
                    14:4a:45:04:a6:ef:f7:64:ac:11:c2:b3:22:5d:ca:
                    08:44:b5:01:e5:b4:2d:02:53:70:35:b4:ea:9c:65:
                    a6:91:dd:ad:7c:42:cb:2a:4f:f0:0d:a1:33:f3:05:
                    49:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5F:FB:18:D1:30:EA:F3:F1:D9:67:F0:F7:FC:53:7F:8B:AB:63:E3
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137372e38372e3134342e302f32312d3231203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b0:01:1d:2b:ae:48:5e:4b:7a:94:5d:d0:d1:40:35:5a:98:10:
         2e:c6:bf:b9:72:a3:52:a4:9b:e8:8b:dd:49:96:98:fa:5b:3b:
         eb:0a:4a:bd:b0:95:7e:bd:6f:6d:e2:87:e8:e1:ad:8a:ab:18:
         04:3d:e2:62:9c:55:80:45:b4:63:c9:86:f4:a2:72:b3:53:81:
         d0:b9:ad:59:03:4f:60:91:9c:61:12:db:4c:13:d9:2f:45:95:
         47:08:68:dc:41:48:be:df:1d:b4:71:5d:0b:7d:b5:fc:b7:bc:
         b6:30:64:7d:7b:9e:90:a6:a8:37:1a:69:5a:bc:f0:cf:8e:eb:
         ba:32:6e:b2:b9:0b:cc:21:e2:7c:6c:14:f2:ac:b4:9a:b6:d3:
         83:84:5f:39:7a:8f:cd:13:55:19:89:51:f2:d6:1a:fc:a7:a6:
         bf:7b:49:1e:c7:8b:c6:55:c0:68:8e:7d:2e:8a:18:67:0d:a0:
         fd:7d:3b:9d:d6:2b:c8:7c:7e:d6:92:f6:2e:1b:f4:e2:c7:a3:
         6e:9c:cd:34:8b:5a:39:4d:e4:1e:7d:89:72:3c:f4:3b:0b:16:
         48:bb:df:15:90:5e:12:f8:64:b7:ef:d9:03:92:e0:cc:b7:1b:
         3d:02:db:b6:4e:c8:e3:0a:2e:1c:f5:d9:42:5d:d6:fb:59:84:
         5d:5f:b5:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org