Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32322d3232203d3e20323632353039.roa
File:                     3137372e36372e342e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier:          9HqyevWR08rWcSQ/PntRwnkNH6uTfGOKkFfSu2ultb8=
Subject key identifier:   F4:EF:AD:02:D1:EF:49:FE:BC:E7:67:E6:36:B7:EA:B8:5C:28:BB:72
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       42BF1F24557BA3A292920BBA3052DE4DC82E35F5
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32322d3232203d3e20323632353039.roa
Signing time:             Mon 14 Oct 2024 01:49:48 +0000
ROA not before:           Mon 14 Oct 2024 01:44:48 +0000
ROA not after:            Mon 13 Oct 2025 01:49:48 +0000
asID:                     262509
IP address blocks:        177.67.4.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:bf:1f:24:55:7b:a3:a2:92:92:0b:ba:30:52:de:4d:c8:2e:35:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:48 2024 GMT
            Not After : Oct 13 01:49:48 2025 GMT
        Subject: CN=F4EFAD02D1EF49FEBCE767E636B7EAB85C28BB72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:42:2a:5d:01:e2:47:55:88:29:ca:05:d3:a1:
                    e8:a1:84:73:98:cb:a2:03:59:33:8d:69:47:5c:70:
                    3e:40:79:b6:a4:9f:2a:46:36:a9:46:6b:7a:63:3d:
                    7b:b6:d7:ef:17:4a:f1:5f:6c:dd:6c:b4:af:6e:a5:
                    32:93:f9:0c:45:cc:7f:c7:50:9b:ad:1a:93:2f:99:
                    cd:1b:63:06:ad:76:43:10:db:78:5b:8d:a3:7f:85:
                    73:61:66:9d:5d:bb:15:7f:4d:5f:31:14:3c:cb:a3:
                    23:16:63:82:a2:20:e8:1a:bb:c0:da:4c:b2:c0:fe:
                    d1:8b:4b:a2:2e:f4:d1:e3:0a:42:35:0f:36:6f:6c:
                    17:66:82:dd:43:65:24:ed:3a:12:24:ae:a2:e4:70:
                    58:8b:d4:04:5d:b8:67:5e:e1:2e:58:db:c5:cd:28:
                    42:ce:7a:b0:19:e1:f6:b5:35:1b:1f:0f:8e:8a:a1:
                    c4:d7:f8:7b:bb:98:9f:c4:61:35:fa:dd:71:b2:14:
                    89:24:90:7d:50:10:9f:80:d8:b1:cd:6f:73:b1:66:
                    56:13:c5:c1:84:c7:36:b6:84:e6:96:b1:42:8e:f6:
                    d3:32:94:1e:74:64:1e:5f:e5:cb:d2:4e:89:1e:8e:
                    b2:31:24:54:b3:dd:e6:26:06:d9:d9:f4:82:8c:a6:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EF:AD:02:D1:EF:49:FE:BC:E7:67:E6:36:B7:EA:B8:5C:28:BB:72
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32322d3232203d3e20323632353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:85:e8:a4:32:ea:71:5c:66:e6:37:c6:97:1c:91:ae:f9:3b:
         db:1c:a3:c6:d6:03:04:76:90:28:ee:eb:bf:d0:e5:d1:37:96:
         2c:4d:d8:90:6f:64:2c:da:2e:f5:13:b5:70:54:05:1d:0c:15:
         09:fa:da:f7:46:0e:fe:00:d0:fd:38:fb:f7:80:9c:0a:54:27:
         fb:3d:c5:5f:89:87:84:b7:fc:4b:5e:63:a3:9e:4a:6a:cc:a1:
         ca:43:95:d1:c0:39:be:90:b8:f2:13:4e:df:a5:76:3a:18:68:
         d5:ab:95:73:35:c8:1e:a7:e6:c0:6e:d6:92:58:c3:3e:6d:08:
         05:5b:c1:1f:73:b8:38:3b:7e:65:ae:b9:00:f9:f0:e0:ca:4d:
         b2:ef:f6:19:50:7a:71:38:0b:de:81:2d:48:c1:47:e6:ec:5a:
         56:a3:9d:74:d1:a8:57:16:66:1c:67:c6:ad:f7:0a:56:1c:ca:
         2f:88:d1:b1:52:38:13:dc:86:3e:53:56:37:35:d3:00:a4:a4:
         07:e6:f1:4b:be:e9:3a:36:5c:84:30:a9:19:31:fa:49:7e:fa:
         83:de:f5:0d:89:cc:5c:b0:96:21:37:a7:6b:a7:a9:dd:db:e0:
         0b:55:68:6d:fa:cf:ec:77:ee:19:79:1c:4d:6b:6e:3e:16:6d:
         0c:1d:44:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:14 2024 by rpki-client on console.sobornost.net