Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3132382e302f32302d3230203d3e203238323730.roa
File:                     3137392e3139312e3132382e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          gR9aKEHruMWl2rVFd/TQpAnt5hryC1GGq1twaaeEH2E=
Subject key identifier:   B0:25:B7:62:F6:5D:1D:C1:22:CA:84:BC:8A:88:F4:B5:AD:C5:4A:9C
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       7F6F2BBA79B6492A36904CA8BD895C84B23AEB28
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3132382e302f32302d3230203d3e203238323730.roa
Signing time:             Sat 13 Apr 2024 19:40:51 +0000
ROA not before:           Sat 13 Apr 2024 19:35:51 +0000
ROA not after:            Sat 12 Apr 2025 19:40:51 +0000
asID:                     28270
IP address blocks:        179.191.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6f:2b:ba:79:b6:49:2a:36:90:4c:a8:bd:89:5c:84:b2:3a:eb:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr 13 19:35:51 2024 GMT
            Not After : Apr 12 19:40:51 2025 GMT
        Subject: CN=B025B762F65D1DC122CA84BC8A88F4B5ADC54A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8f:0c:64:e5:d0:ad:e2:9c:77:f3:91:30:36:
                    1b:d0:22:61:33:df:8d:6b:22:37:65:ab:69:92:9b:
                    29:67:b0:a3:2a:92:87:ba:40:5e:59:14:07:07:44:
                    73:d9:17:84:4e:55:77:82:21:55:f3:db:ba:81:f9:
                    dc:3f:76:b9:3e:ee:e0:24:f1:af:f2:ec:03:7e:08:
                    22:48:ca:50:40:b0:1c:ce:fe:af:b4:83:64:4a:54:
                    78:c0:d1:61:bd:cc:4c:69:1b:80:61:b6:08:fb:36:
                    21:21:38:34:75:03:42:16:71:6f:4c:42:62:54:8c:
                    8d:2b:c5:38:d1:cb:34:75:da:ca:95:c8:5a:5e:45:
                    47:60:37:6c:12:b3:7f:74:a3:7b:ac:d4:90:d9:37:
                    9d:12:2a:05:f7:c1:2f:68:5e:64:0f:bd:b2:48:97:
                    7e:66:a7:aa:2a:0e:87:3f:1b:6e:83:00:75:20:4d:
                    71:50:43:f0:ec:10:3b:69:71:2e:94:41:12:e2:a0:
                    77:c9:c4:ec:62:97:45:90:a3:15:fb:aa:84:af:a3:
                    82:6c:ae:c2:e0:38:54:bc:77:a9:dc:36:57:ee:16:
                    7a:9a:cf:a8:9e:64:84:a2:41:c9:c1:46:e6:78:43:
                    e7:2e:e4:80:68:04:4e:1b:87:16:eb:6f:f3:16:95:
                    48:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:25:B7:62:F6:5D:1D:C1:22:CA:84:BC:8A:88:F4:B5:AD:C5:4A:9C
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3132382e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:19:8b:e0:34:f7:4b:1c:21:bd:50:02:29:40:92:60:ca:1c:
         3f:0e:d7:90:f1:0f:d4:15:f3:26:45:5d:84:00:b5:43:4b:27:
         ab:f2:ea:83:34:28:05:e7:a5:a2:58:02:79:51:ca:50:22:be:
         3b:29:fc:be:b0:fa:fd:d6:00:fc:38:50:e6:8f:cd:bf:9c:bf:
         f9:e5:8f:fd:20:aa:f5:3d:91:e3:13:c2:fd:ab:a2:96:f7:4a:
         1a:2b:37:98:b9:3d:32:02:67:74:a1:8a:eb:61:2d:03:51:8f:
         01:14:f8:73:fb:eb:9c:f2:0d:31:8b:ee:37:2c:33:12:74:14:
         62:c0:80:d7:5c:29:5f:08:9b:e5:8a:2d:1c:7b:55:b5:f6:4b:
         cc:96:ae:ce:1f:da:20:8c:f1:53:04:2a:1f:cf:15:32:54:bf:
         cf:e6:54:7f:9f:0a:90:6f:79:0d:f6:04:b3:95:ab:7f:40:bb:
         4d:39:04:e0:28:cd:df:41:2a:13:25:c4:d7:46:f4:6e:d8:1e:
         cc:8d:48:aa:31:4f:ee:eb:06:20:3d:85:f2:b1:16:df:cd:8e:
         84:e4:24:fc:c3:ba:98:a7:fe:88:56:8c:7c:da:b0:4e:70:bf:
         6e:f2:dc:2b:e4:41:4b:3a:2b:35:3c:da:a0:c9:2b:3a:47:aa:
         fe:29:da:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org