Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa
File:                     3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa (raw, json)
Hash identifier:          QnuPmGTpUxmsMwhtqzv0rQYZYjtFTZER0Uk50fKXskA=
Subject key identifier:   FA:C0:5A:C2:40:05:21:1E:A7:B7:FD:D3:59:05:48:FF:1E:E3:4E:CA
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       73BA1D88AC4DFB79A2E07FCB3FCDF391243C9267
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa
Signing time:             Mon 08 Apr 2024 20:06:58 +0000
ROA not before:           Mon 08 Apr 2024 20:01:58 +0000
ROA not after:            Mon 07 Apr 2025 20:06:58 +0000
asID:                     271724
IP address blocks:        179.191.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ba:1d:88:ac:4d:fb:79:a2:e0:7f:cb:3f:cd:f3:91:24:3c:92:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:58 2024 GMT
            Not After : Apr  7 20:06:58 2025 GMT
        Subject: CN=FAC05AC24005211EA7B7FDD3590548FF1EE34ECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:28:e8:df:21:6b:1c:54:b0:bd:b4:02:f9:
                    ab:e5:0a:5c:7e:f1:8a:9a:a9:16:e5:a8:08:72:88:
                    be:b6:e7:35:f2:03:48:4c:12:0d:d4:0e:a9:f4:ec:
                    8e:a0:eb:af:b8:ab:f2:93:18:39:9e:b8:8c:59:ad:
                    5c:9a:29:c8:3c:0d:03:1e:a8:e9:c7:24:a8:cc:e3:
                    b5:25:a0:99:ef:33:cb:09:b8:db:a0:0b:9d:5b:5d:
                    13:88:21:d5:c0:7e:3a:a0:a6:4f:cf:54:d9:2b:ed:
                    07:ed:68:c7:7c:14:58:4a:6a:73:03:de:5b:05:22:
                    e2:ab:da:f0:88:3c:fa:b0:38:ef:5e:f9:de:ab:a2:
                    fa:c4:56:c0:e7:e7:5c:b0:d3:7b:d1:43:c6:91:9f:
                    7b:da:8c:ed:7f:44:3e:c3:8f:89:6e:f8:1b:c6:69:
                    8c:ec:7c:15:10:78:7f:05:9e:9b:85:9d:52:77:8f:
                    82:db:79:63:15:3d:c8:30:22:ed:24:be:90:d8:45:
                    32:42:15:29:39:22:2f:61:ed:b4:36:ec:77:0e:96:
                    55:aa:9c:cd:7a:1a:e9:cf:be:46:d8:07:ae:da:b6:
                    1b:fd:aa:16:a3:b3:4b:2d:b2:0f:e4:77:00:2f:4d:
                    c9:d7:08:08:39:75:e3:4e:17:6c:44:ac:6c:0f:e6:
                    34:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C0:5A:C2:40:05:21:1E:A7:B7:FD:D3:59:05:48:FF:1E:E3:4E:CA
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3132382e302f32302d3230203d3e20323731373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:9a:79:38:c3:78:4f:33:71:46:4e:3a:16:64:df:77:bf:f2:
         5c:76:44:88:c2:43:64:f9:c4:f5:8f:f4:e3:ef:25:dc:de:c5:
         e4:f8:4e:e4:56:ed:cb:da:a8:7e:7d:9c:31:94:b1:e1:ad:f3:
         30:71:a0:3a:20:a3:32:e0:f1:d8:f7:a4:74:70:c4:ac:30:2d:
         a5:27:3b:ab:92:c3:44:a6:39:7d:8d:f9:f0:c3:93:52:64:3d:
         6c:85:e3:75:51:61:7a:86:2b:3e:5d:5f:04:25:f2:fc:ab:1f:
         42:d5:7b:93:36:7f:c2:01:ed:de:63:2c:51:b9:7c:aa:47:82:
         c2:51:4c:83:93:73:40:03:ec:ad:6d:05:21:60:ae:ed:c8:a1:
         b9:36:88:88:76:7e:f9:8c:43:a5:83:6c:28:02:6e:04:47:f0:
         ba:25:eb:44:45:83:76:9f:32:cb:b2:3c:e8:c4:af:dd:e2:d1:
         df:d6:cd:cb:81:8c:af:6e:63:36:2d:48:2e:e4:de:42:41:84:
         79:17:67:da:59:59:1c:3c:f2:6e:85:fe:4d:b6:b6:bb:65:8c:
         d7:cf:93:d6:2b:48:df:a8:97:43:fa:50:0b:d9:1d:4e:44:4b:
         f4:3c:fc:dd:ea:2e:ff:7a:86:8f:19:ef:13:3b:e1:e3:33:83:
         91:15:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org