Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa
File:                     3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa (raw, json)
Hash identifier:          w52dPLWTp2teQg0tGUtE3Ny3JrGSihSP1OiqZfdihlc=
Subject key identifier:   19:34:68:7B:CB:39:72:54:E6:D4:B5:70:0A:68:AD:D4:51:E5:68:7E
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       70B96EF817A6AB864F5246A4C2F3297618FDA917
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa
Signing time:             Tue 09 Apr 2024 23:47:01 +0000
ROA not before:           Tue 09 Apr 2024 23:42:01 +0000
ROA not after:            Tue 08 Apr 2025 23:47:01 +0000
asID:                     28270
IP address blocks:        179.191.128.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:b9:6e:f8:17:a6:ab:86:4f:52:46:a4:c2:f3:29:76:18:fd:a9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  9 23:42:01 2024 GMT
            Not After : Apr  8 23:47:01 2025 GMT
        Subject: CN=1934687BCB397254E6D4B5700A68ADD451E5687E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ff:ac:45:04:55:20:42:15:29:1f:9f:e1:e3:
                    db:79:cd:4e:27:fc:bb:8b:6a:7b:7f:36:90:56:c0:
                    89:8e:78:6d:6a:35:9f:92:3e:45:18:ad:a4:15:dd:
                    a6:93:5e:d6:bd:de:24:ee:70:dc:5c:f6:17:75:ec:
                    23:9b:23:f9:1e:d2:cf:b9:5f:5b:94:9e:f3:d6:fa:
                    e9:8d:7f:24:67:d0:4b:1e:c1:fb:39:c8:f3:00:21:
                    97:b6:f6:41:39:43:f6:15:e5:8a:23:24:f8:58:1a:
                    40:f1:3f:63:f7:3c:7a:34:ca:b8:7c:3a:5a:ef:d1:
                    11:f1:9a:18:0c:10:76:16:b7:db:01:bf:d8:74:98:
                    28:c1:3a:d5:cb:2f:a7:88:45:ef:d8:6b:a9:88:91:
                    d0:18:80:9b:8d:85:ba:53:84:bd:b7:a7:9c:80:c4:
                    4d:28:0b:9a:bc:5f:76:df:a8:a1:8b:b2:39:b4:8c:
                    47:9d:ec:bf:de:b2:f2:bf:52:db:58:fa:96:14:da:
                    54:d9:39:fa:90:ba:1c:75:64:91:0c:43:53:c4:dd:
                    6e:c5:5f:d7:5f:cd:31:43:64:48:41:bc:19:0a:25:
                    55:0c:cb:f3:30:d8:99:d2:82:ed:4d:7e:6a:56:01:
                    5f:30:83:d2:20:f5:40:8f:5e:e9:a2:7f:93:f5:b0:
                    ab:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:34:68:7B:CB:39:72:54:E6:D4:B5:70:0A:68:AD:D4:51:E5:68:7E
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3132382e302f31392d3139203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         77:21:74:59:fb:03:a1:21:c7:31:b6:23:67:62:7a:2a:e0:de:
         fe:b1:39:29:93:01:17:6e:85:03:63:be:4b:e4:d5:05:44:ef:
         f9:5b:00:6e:70:65:ea:ac:b0:97:18:60:cf:e2:58:4e:e1:6b:
         3e:78:55:29:34:bb:64:fa:c4:d6:94:3a:2b:7c:bf:39:0c:ca:
         02:ee:d0:8e:a2:4d:10:20:97:89:d4:ab:40:59:15:c1:6f:7d:
         7d:bb:ad:2d:db:a7:bf:dd:fb:4c:53:4d:a7:48:be:89:e3:f1:
         8c:05:62:ce:1e:fd:6d:23:db:3c:35:5d:3f:be:f7:bb:5c:e1:
         ea:e7:6d:9d:92:cd:5a:b3:96:af:04:25:18:93:f9:62:6e:eb:
         8d:b2:8a:e7:2f:10:85:74:62:0c:47:da:7a:ad:f3:8e:73:7e:
         8b:d4:e5:69:ea:88:62:3b:1b:42:a2:32:30:64:7d:ef:4b:51:
         89:54:06:30:4d:58:02:05:d4:36:9b:84:31:f6:51:13:82:ab:
         ea:1a:69:05:4f:b1:c0:ac:92:ce:81:08:66:c0:2c:96:08:27:
         01:fd:3e:6d:62:ca:ce:f7:0c:f9:8c:c1:70:70:d7:4c:79:03:
         94:fc:fd:a4:44:2a:0e:af:48:28:a5:c2:3f:a8:c2:24:f7:e7:
         5c:ca:77:a0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUcLlu+Bemq4ZPUkakwvMpdhj9qRcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDQ0YxMkEwRjY0NkM4MUFFNjRENTNEQjU4REYwMTY3
MDdENjUwQTAeFw0yNDA0MDkyMzQyMDFaFw0yNTA0MDgyMzQ3MDFaMDMxMTAvBgNV
BAMTKDE5MzQ2ODdCQ0IzOTcyNTRFNkQ0QjU3MDBBNjhBREQ0NTFFNTY4N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/6xFBFUgQhUpH5/h49t5zU4n
/LuLant/NpBWwImOeG1qNZ+SPkUYraQV3aaTXta93iTucNxc9hd17CObI/ke0s+5
X1uUnvPW+umNfyRn0Esewfs5yPMAIZe29kE5Q/YV5YojJPhYGkDxP2P3PHo0yrh8
Olrv0RHxmhgMEHYWt9sBv9h0mCjBOtXLL6eIRe/Ya6mIkdAYgJuNhbpThL23p5yA
xE0oC5q8X3bfqKGLsjm0jEed7L/esvK/UttY+pYU2lTZOfqQuhx1ZJEMQ1PE3W7F
X9dfzTFDZEhBvBkKJVUMy/Mw2JnSgu1NfmpWAV8wg9Ig9UCPXumif5P1sKuRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGTRoe8s5clTm1LVwCmit1FHlaH4wHwYDVR0j
BBgwFoAU3MzxKg9kbIGuZNU9tY3wFnB9ZQowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMS9EQ0NDRjEyQTBGNjQ2QzgxQUU2NEQ1M0RCNThERjAxNjcwN0Q2NTBBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQ0NGMTJBMEY2NDZDODFB
RTY0RDUzREI1OERGMDE2NzA3RDY1MEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzEv
MzEzNzM5MmUzMTM5MzEyZTMxMzIzODJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDMy
MzgzMjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAWzv4AwDQYJKoZIhvcNAQELBQADggEBAHchdFn7
A6EhxzG2I2dieirg3v6xOSmTARduhQNjvkvk1QVE7/lbAG5wZeqssJcYYM/iWE7h
az54VSk0u2T6xNaUOit8vzkMygLu0I6iTRAgl4nUq0BZFcFvfX27rS3bp7/d+0xT
TadIvonj8YwFYs4e/W0j2zw1XT++97tc4ernbZ2SzVqzlq8EJRiT+WJu642yiucv
EIV0YgxH2nqt845zfovU5WnqiGI7G0KiMjBkfe9LUYlUBjBNWAIF1DabhDH2UROC
q+oaaQVPscCsks6BCGbALJYIJwH9Pm1iys73DPmMwXBw10x5A5T8/aREKg6vSCil
wj+owiT351zKd6A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org