Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e322e302f32342d3234203d3e203238323730.roa
File:                     3137372e36372e322e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          0jS4q4MPBjwPZxRaR2Cz53UZ8HnD5P4f4HZwz2wJIZA=
Subject key identifier:   E0:D0:61:99:C4:9E:C2:18:D9:4D:99:87:14:A7:EE:74:0F:F3:5F:D7
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       5FBA2853685247A60443E54CED5DE57335E68F6C
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e322e302f32342d3234203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:52:53 +0000
ROA not before:           Mon 14 Oct 2024 01:47:53 +0000
ROA not after:            Mon 13 Oct 2025 01:52:53 +0000
asID:                     28270
IP address blocks:        177.67.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ba:28:53:68:52:47:a6:04:43:e5:4c:ed:5d:e5:73:35:e6:8f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:47:53 2024 GMT
            Not After : Oct 13 01:52:53 2025 GMT
        Subject: CN=E0D06199C49EC218D94D998714A7EE740FF35FD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:98:e3:8e:7c:ae:87:d4:3b:bb:0f:57:ed:
                    d6:d1:e9:1b:c3:2b:66:4a:5b:38:83:2b:78:b5:8e:
                    8c:8c:ae:35:1a:9e:c7:b2:82:70:41:48:e3:d5:47:
                    db:88:60:11:66:90:fe:98:67:67:29:88:b5:11:76:
                    b1:c6:f9:9f:1b:e8:05:a4:05:f4:8f:38:8a:cc:64:
                    e9:bb:83:8a:9e:47:e5:ae:c2:3d:f4:f9:95:98:b4:
                    04:3b:40:24:ce:c3:5b:2a:f7:06:70:11:58:8c:e4:
                    b6:6d:f4:b5:d6:e9:18:e8:64:64:1d:67:b0:71:de:
                    4a:44:65:d9:0f:92:43:4b:51:c9:47:a6:db:da:de:
                    86:4a:cc:0d:5f:8f:b1:d4:df:9a:0c:03:54:77:22:
                    82:5b:d4:53:23:2e:af:c4:93:af:80:ce:4f:d9:c0:
                    2b:eb:cb:43:33:96:87:dd:b6:50:39:2f:db:ba:af:
                    1e:41:4c:9b:dd:e7:7a:66:53:e7:a0:ea:6f:38:d4:
                    61:e9:22:a6:d2:07:ff:ad:df:8c:c1:2b:c8:5c:c9:
                    cb:82:54:aa:13:64:6f:7a:c0:bf:a7:8c:73:5f:fe:
                    8a:c6:dd:67:ef:06:8d:c4:6c:79:1b:c8:c0:1e:24:
                    1b:00:99:4c:33:e2:90:9f:8b:90:98:88:41:07:1a:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D0:61:99:C4:9E:C2:18:D9:4D:99:87:14:A7:EE:74:0F:F3:5F:D7
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e322e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:45:16:b4:40:1a:7e:90:93:3f:77:df:7d:70:87:d0:3e:be:
         97:db:94:f0:28:df:f2:51:47:82:0d:a8:34:7e:70:23:31:aa:
         0d:db:2b:3e:74:85:98:e1:89:85:85:b0:33:56:7b:69:3f:0e:
         4f:49:4b:c1:20:27:a2:7c:c9:73:e2:95:a7:57:42:d5:e0:1e:
         e9:59:a8:24:17:e0:ff:2f:17:e2:d7:88:84:54:47:4d:f8:4a:
         de:d0:de:0f:6a:35:58:6b:0e:9e:de:d3:cd:ad:30:d0:9e:bc:
         eb:20:62:2c:c8:d4:c0:2c:84:9a:a0:a2:e3:55:0c:ea:d6:31:
         ab:6b:e2:df:bd:6b:53:8f:7c:d7:d0:17:5f:30:87:5d:c0:37:
         a3:8e:0f:02:79:6b:81:fa:ba:35:fe:b5:96:ea:a7:e2:0c:af:
         18:1e:03:cc:ec:11:d1:87:11:fd:c9:f7:75:59:38:7d:f0:aa:
         19:5f:5b:ca:6f:05:d2:76:0b:1b:c7:ed:53:78:36:d3:37:f7:
         1e:69:1a:90:16:d5:a0:2e:ef:9b:cc:4d:34:c6:0c:cf:65:26:
         74:9c:39:7b:60:2e:0a:64:78:6c:ff:9c:e1:87:0a:e1:90:6e:
         67:6a:5e:c2:19:a7:01:74:96:03:01:ae:20:7a:34:19:2e:90:
         94:01:f7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:14 2024 by rpki-client on console.sobornost.net