Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e372e302f32342d3234203d3e203238323730.roa
File:                     3137372e36372e372e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier:          Z84aG3Xh0rRfRtiwuaWHCO+Qp7VBql8FZJkNgq+cROM=
Subject key identifier:   58:4A:05:8E:D4:24:3B:70:56:4A:8C:7B:1A:0E:B4:0E:CA:F7:E9:95
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       20D7B24E5CEE1511597D60ACF0A9FF46978C9484
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e372e302f32342d3234203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:52:54 +0000
ROA not before:           Mon 14 Oct 2024 01:47:54 +0000
ROA not after:            Mon 13 Oct 2025 01:52:54 +0000
asID:                     28270
IP address blocks:        177.67.7.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d7:b2:4e:5c:ee:15:11:59:7d:60:ac:f0:a9:ff:46:97:8c:94:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:47:54 2024 GMT
            Not After : Oct 13 01:52:54 2025 GMT
        Subject: CN=584A058ED4243B70564A8C7B1A0EB40ECAF7E995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:77:20:8d:19:4d:fa:80:49:c8:7f:f5:ac:90:
                    5a:9d:9d:9a:a0:dc:37:6a:a7:59:ef:7c:c3:68:69:
                    21:8e:e6:2a:89:46:0a:f1:2a:8c:24:04:b6:d7:ae:
                    cd:8c:da:99:18:b6:40:f8:ba:dd:f3:be:f5:46:19:
                    f2:c1:5a:e2:90:1e:4e:36:79:40:5d:63:8c:0f:05:
                    e7:1e:98:be:b3:7d:31:6f:0b:4a:96:1e:c5:96:6e:
                    b8:b6:b9:7c:30:c1:74:fb:72:5e:4f:1f:7d:ed:34:
                    52:7f:d7:0a:aa:99:d8:94:cd:5a:c2:5b:83:d7:4e:
                    ef:1e:d8:e0:64:8c:fc:ef:05:c5:4c:34:e2:c9:c8:
                    2e:88:37:5c:07:91:8c:b0:ce:44:44:84:0f:5e:63:
                    e1:b1:89:62:63:e6:ad:55:55:88:7d:fc:f6:ca:31:
                    91:fe:cc:f5:7a:da:3a:22:cb:e0:2e:38:61:ee:84:
                    02:35:83:52:68:32:8a:f1:e6:66:dc:6a:dd:8b:47:
                    05:8c:ca:38:f1:41:8a:45:66:7c:79:f6:bd:4a:ab:
                    1b:c7:3d:5e:42:94:27:ea:b6:0f:de:d4:10:9c:37:
                    90:13:1b:ce:a1:fa:9a:e8:16:e0:a6:27:a5:54:61:
                    83:c6:5a:77:44:05:59:84:24:df:0c:df:fe:6b:93:
                    06:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4A:05:8E:D4:24:3B:70:56:4A:8C:7B:1A:0E:B4:0E:CA:F7:E9:95
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e372e302f32342d3234203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:59:8f:20:94:1b:d8:fa:40:5c:fb:ae:d0:a0:87:90:1c:af:
         c3:f8:cb:25:3e:e5:2c:61:12:3d:7b:36:2a:60:5f:84:6c:c6:
         ca:3c:a3:cd:c1:53:90:ae:5c:b2:fa:62:ec:f6:00:93:13:57:
         1e:7e:20:a4:d0:6d:30:6a:6c:22:79:a7:30:02:f5:8a:7e:ed:
         b8:7a:b0:61:12:71:f6:f6:34:33:3a:35:a0:59:de:f7:03:03:
         4a:c8:1d:bc:16:24:7a:62:57:2c:9a:d9:e1:7f:32:7c:21:ae:
         e7:6b:82:ba:bb:0b:da:f9:30:e7:cc:11:10:04:3c:28:55:b0:
         4b:77:6f:04:b6:c9:05:13:4e:86:92:65:69:df:97:a2:55:86:
         e3:10:63:af:87:c0:aa:f1:3f:89:6a:bb:e7:c9:aa:5e:e5:8e:
         17:99:5b:1d:25:81:92:19:75:5f:e4:1b:71:0e:f4:bf:e0:b6:
         9e:fa:a7:07:0e:e5:cd:65:c1:c4:7b:8e:e6:31:ff:d4:72:0b:
         af:11:04:7b:1c:c0:68:22:db:19:91:48:cb:f5:3a:3d:14:5a:
         e9:b6:64:57:3f:fe:2f:04:64:9a:7a:b1:e7:dd:ba:a9:54:b7:
         02:c5:ca:93:77:ae:bc:a1:1e:f0:da:fb:2a:4a:46:47:29:fa:
         f7:d6:5c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:14 2024 by rpki-client on console.sobornost.net