Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37302e3132382e302f32302d3230203d3e203238323730.roa
File:                     3137372e37302e3132382e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          msvrl4iSyTvPSuS2NoqMzn7NQzIMvS7eFTPgWd1bYDo=
Subject key identifier:   F9:68:8C:33:39:07:0D:F6:C8:C7:2B:86:63:9B:38:3A:6A:1A:99:98
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       4E46EBF9F19C96B25C40CAD335B7254973CE3293
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37302e3132382e302f32302d3230203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:49:51 +0000
ROA not before:           Mon 14 Oct 2024 01:44:51 +0000
ROA not after:            Mon 13 Oct 2025 01:49:51 +0000
asID:                     28270
IP address blocks:        177.70.128.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:46:eb:f9:f1:9c:96:b2:5c:40:ca:d3:35:b7:25:49:73:ce:32:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:51 2024 GMT
            Not After : Oct 13 01:49:51 2025 GMT
        Subject: CN=F9688C3339070DF6C8C72B86639B383A6A1A9998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5f:37:34:99:aa:81:f4:4b:4a:55:50:b6:25:
                    2d:02:b2:e3:79:a7:fa:62:64:28:87:be:74:1e:b5:
                    4b:4c:18:6b:87:ee:d8:36:4a:0d:e8:b1:72:86:11:
                    fc:f3:5d:d8:6c:c7:70:7d:d3:c2:e7:ee:83:0f:52:
                    b0:d5:41:4b:49:5e:69:49:99:b1:11:9d:52:1f:db:
                    f7:82:18:7f:f3:78:5a:ef:81:18:8f:3e:20:60:96:
                    53:c1:39:8a:5a:11:87:76:45:2a:5e:38:c6:18:36:
                    5f:0c:1f:6e:7c:8c:06:80:13:77:1d:60:5d:76:e5:
                    fa:64:9d:41:d8:d4:ca:c2:9d:1d:2d:2d:59:b2:e8:
                    3e:39:bb:77:cb:c3:6b:9a:6d:31:80:57:ad:fb:ad:
                    d1:a3:03:05:19:19:04:80:f1:a4:83:68:21:0f:96:
                    0f:ae:1a:1f:cf:9e:53:25:56:48:74:06:db:de:1c:
                    34:dd:57:aa:9c:f3:d4:8b:a7:c8:36:71:4b:a1:30:
                    1c:14:3c:4e:02:d1:33:04:c3:ee:3b:ab:15:85:5d:
                    94:e5:9b:d5:3e:da:61:f9:14:f2:ef:17:7d:4e:df:
                    2f:86:0e:f3:6a:4d:ea:01:ac:a9:23:22:e1:60:25:
                    69:35:21:e5:51:82:5a:e1:36:ba:73:22:93:c5:98:
                    a4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:68:8C:33:39:07:0D:F6:C8:C7:2B:86:63:9B:38:3A:6A:1A:99:98
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37302e3132382e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         98:fc:58:f2:fb:3a:96:04:35:89:a4:bf:fc:c4:94:36:ac:2c:
         0a:44:90:55:7a:85:80:d0:13:8a:c3:09:ef:c3:6b:ce:f8:91:
         c5:10:c0:0b:b2:f7:bb:f9:2e:2e:6e:bb:ed:95:9a:c5:85:a8:
         4a:78:68:87:47:a1:d1:d1:96:bc:30:37:d0:8b:d5:b3:6c:1f:
         f1:24:e1:9d:66:78:1b:55:e1:7d:c3:9d:80:94:de:97:d6:88:
         9c:15:f8:68:0b:84:1d:fb:70:df:1b:b4:ee:c5:05:31:8d:3c:
         69:9a:62:02:ef:9b:e3:1c:36:73:50:79:1c:c6:33:ba:f6:89:
         fe:3e:8b:ad:25:82:0f:d5:fa:f1:93:05:1b:7a:96:8d:c5:04:
         4f:e3:b9:b0:8f:e1:cc:31:88:0c:9a:54:aa:13:59:4e:f4:97:
         a0:12:a4:05:68:97:8a:9c:7b:15:63:c4:9e:ce:01:56:61:5a:
         1a:61:5a:dd:e7:d8:de:8b:be:4c:20:83:80:a1:16:ab:c5:07:
         04:43:e8:9b:fd:d8:d6:75:1a:73:b6:9a:76:1a:ec:2a:a1:a8:
         7b:dd:1f:66:3c:03:54:c1:59:2d:3f:1c:d8:45:d7:25:59:94:
         5c:98:e7:ba:7e:c1:4e:52:1b:08:82:64:b5:89:29:0a:8b:20:
         67:64:1e:bc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTkbr+fGclrJcQMrTNbclSXPOMpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2
MTU4ODZGQzAeFw0yNDEwMTQwMTQ0NTFaFw0yNTEwMTMwMTQ5NTFaMDMxMTAvBgNV
BAMTKEY5Njg4QzMzMzkwNzBERjZDOEM3MkI4NjYzOUIzODNBNkExQTk5OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcXzc0maqB9EtKVVC2JS0CsuN5
p/piZCiHvnQetUtMGGuH7tg2Sg3osXKGEfzzXdhsx3B908Ln7oMPUrDVQUtJXmlJ
mbERnVIf2/eCGH/zeFrvgRiPPiBgllPBOYpaEYd2RSpeOMYYNl8MH258jAaAE3cd
YF125fpknUHY1MrCnR0tLVmy6D45u3fLw2uabTGAV637rdGjAwUZGQSA8aSDaCEP
lg+uGh/PnlMlVkh0BtveHDTdV6qc89SLp8g2cUuhMBwUPE4C0TMEw+47qxWFXZTl
m9U+2mH5FPLvF31O3y+GDvNqTeoBrKkjIuFgJWk1IeVRglrhNrpzIpPFmKTbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU+WiMMzkHDfbIxyuGY5s4OmoamZgwHwYDVR0j
BBgwFoAUfK1/vrYtQb7euCBJqDbkZ2FYhvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC83Q0FEN0ZCRUI2MkQ0MUJFREVCODIwNDlBODM2RTQ2NzYxNTg4NkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQUQ3RkJFQjYyRDQxQkVE
RUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzM3MmUzNzMwMmUzMTMyMzgyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4
MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsUaAMA0GCSqGSIb3DQEBCwUAA4IBAQCY/Fjy+zqW
BDWJpL/8xJQ2rCwKRJBVeoWA0BOKwwnvw2vO+JHFEMALsve7+S4ubrvtlZrFhahK
eGiHR6HR0Za8MDfQi9WzbB/xJOGdZngbVeF9w52AlN6X1oicFfhoC4Qd+3DfG7Tu
xQUxjTxpmmIC75vjHDZzUHkcxjO69on+PoutJYIP1frxkwUbepaNxQRP47mwj+HM
MYgMmlSqE1lO9JegEqQFaJeKnHsVY8SezgFWYVoaYVrd59jei75MIIOAoRarxQcE
Q+ib/djWdRpztpp2Guwqoah73R9mPANUwVktPxzYRdclWZRcmOe6fsFOUhsIgmS1
iSkKiyBnZB68
-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:14 2024 by rpki-client on console.sobornost.net