Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3134342e302f32302d3230203d3e203238323730.roa
File:                     3137392e3139312e3134342e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          HPhpI2H6Pq9TBtz5+y6e6tQKAJXWl0hMhXQyoSBOh7k=
Subject key identifier:   18:0F:BF:D6:BE:34:18:0C:71:36:84:FD:B0:E9:52:15:27:5E:8D:94
Certificate issuer:       /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial:       17EF85A7F8E59DF1AB131AA7A7DE93F8AD9A34F8
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3134342e302f32302d3230203d3e203238323730.roa
Signing time:             Mon 08 Apr 2024 20:06:53 +0000
ROA not before:           Mon 08 Apr 2024 20:01:53 +0000
ROA not after:            Mon 07 Apr 2025 20:06:53 +0000
asID:                     28270
IP address blocks:        179.191.144.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ef:85:a7:f8:e5:9d:f1:ab:13:1a:a7:a7:de:93:f8:ad:9a:34:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
        Validity
            Not Before: Apr  8 20:01:53 2024 GMT
            Not After : Apr  7 20:06:53 2025 GMT
        Subject: CN=180FBFD6BE34180C713684FDB0E95215275E8D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:70:7d:60:02:bd:34:71:89:33:90:75:6d:
                    3f:4a:98:1c:99:ed:8e:b8:6d:27:99:c8:c7:cd:07:
                    49:b9:63:75:ce:95:33:a9:df:0c:bc:dd:28:70:bb:
                    4a:2b:09:d5:a2:b3:b4:2b:c5:9d:9e:af:29:54:16:
                    b9:5f:11:a3:92:aa:2e:b4:48:b9:16:1e:16:d0:44:
                    af:1d:d9:0c:4a:80:b2:7a:c0:9f:47:3d:1c:3f:02:
                    a9:30:fd:2f:43:aa:ac:d1:07:8a:5c:f9:8c:e7:af:
                    27:6d:e6:59:3f:55:16:45:22:52:a5:8c:81:bb:6a:
                    08:85:d3:18:67:e8:5d:2f:f7:b8:0b:60:e9:1b:d6:
                    c1:ff:0a:5b:0e:f3:b4:06:59:9e:28:a7:ab:3e:29:
                    bc:f1:cb:7a:c3:9f:f6:e6:53:1f:6b:33:9a:17:2a:
                    29:ae:52:5e:9b:bd:a2:ba:5b:ea:f2:3b:d2:26:f9:
                    75:59:6a:d0:2b:7d:ad:a1:cf:cc:a8:b3:d5:91:c8:
                    ff:7d:eb:20:bc:4c:d5:d4:d5:c4:b7:a5:ba:3a:a7:
                    dc:40:19:31:e7:a2:fd:53:7c:60:99:ec:ad:14:4a:
                    8b:06:b0:a8:63:9b:6e:92:6d:5c:83:2d:b1:c5:d5:
                    58:e8:93:47:d1:bd:37:a2:29:29:e3:9b:9d:b7:e0:
                    b1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0F:BF:D6:BE:34:18:0C:71:36:84:FD:B0:E9:52:15:27:5E:8D:94
            X509v3 Authority Key Identifier:
                keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/3137392e3139312e3134342e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:d0:41:5f:be:47:6f:11:d9:c7:1c:d4:74:f0:b7:ea:1f:28:
         9e:d1:68:db:03:a4:04:4d:58:37:53:90:31:03:07:cb:45:6f:
         30:2e:1e:3a:04:7e:71:bd:da:cb:81:02:a0:00:27:63:bf:2d:
         0b:c7:22:6c:b5:fe:23:5a:e5:ce:4a:d6:8e:0d:06:69:dd:99:
         f4:05:de:1a:e2:c6:71:ef:79:27:98:4b:cc:56:56:07:af:17:
         31:6a:5e:66:62:4e:13:36:c3:84:1b:96:ed:ba:e6:b8:5e:2a:
         ef:a4:38:70:97:b4:6c:6a:02:c0:6a:6b:9b:4d:70:6a:04:0e:
         9b:3c:48:26:34:b7:75:05:ee:6a:6b:56:a2:f5:d8:6e:57:57:
         d3:ee:fc:3a:6a:6e:39:6f:5f:30:a0:d1:39:ed:c8:db:23:3d:
         40:45:0a:ce:da:85:75:1a:4a:e1:63:db:15:6c:6d:cf:bc:3b:
         cd:02:5c:43:1b:3e:55:2c:7e:39:f5:c0:c3:4e:38:77:ff:02:
         63:f5:ab:a2:6a:f9:18:da:e7:53:4b:ee:92:b1:f6:32:60:e7:
         e0:0f:36:e5:32:b6:bf:71:6e:79:f8:6d:f8:fb:0e:36:7e:55:
         f6:cb:c8:39:06:52:46:9e:ef:60:42:8e:78:b6:10:7f:de:b2:
         64:5b:bc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org