Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f32302d3230203d3e203238323730.roa
File:                     3137372e37352e3139322e302f32302d3230203d3e203238323730.roa (raw, json)
Hash identifier:          haCDqN0Wec63fFTgAtvYXI6uLPxoWFcljeNan7goZDE=
Subject key identifier:   3C:24:31:A9:91:AE:BF:3A:15:1C:D2:64:0A:DE:83:2A:F0:CB:D6:E2
Certificate issuer:       /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial:       40E7B8344B76B13956A39080EF1A55AC912AC1A8
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f32302d3230203d3e203238323730.roa
Signing time:             Mon 14 Oct 2024 01:49:51 +0000
ROA not before:           Mon 14 Oct 2024 01:44:51 +0000
ROA not after:            Mon 13 Oct 2025 01:49:51 +0000
asID:                     28270
IP address blocks:        177.75.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e7:b8:34:4b:76:b1:39:56:a3:90:80:ef:1a:55:ac:91:2a:c1:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
        Validity
            Not Before: Oct 14 01:44:51 2024 GMT
            Not After : Oct 13 01:49:51 2025 GMT
        Subject: CN=3C2431A991AEBF3A151CD2640ADE832AF0CBD6E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e3:bf:73:b6:d6:bd:c8:56:73:34:96:ae:f1:
                    39:53:51:d8:82:90:1e:e5:02:db:43:d5:d0:eb:3d:
                    6e:55:de:ac:cd:62:48:23:f2:14:01:c4:af:94:27:
                    c7:6f:4c:39:2a:15:a5:92:07:b9:5a:a3:42:d8:74:
                    5a:fe:0c:d0:32:cf:dc:bd:0f:e7:fd:9e:73:d7:47:
                    35:d8:48:fd:40:b2:c9:0e:a8:17:bb:2c:d0:3d:21:
                    35:d3:41:b7:1a:80:84:07:e4:1f:35:4d:7f:7d:df:
                    c6:d5:30:32:e8:15:a4:ab:5c:e7:fa:c6:d9:3a:b3:
                    33:b0:25:22:39:88:7a:fe:33:e7:c1:c5:f3:2c:6a:
                    78:30:3d:ba:50:9d:de:ba:88:03:b8:ea:d9:de:40:
                    83:3e:19:47:44:15:12:5b:c9:e9:14:af:48:10:6a:
                    92:db:5a:c1:00:eb:c6:15:25:6d:30:26:83:3f:2a:
                    42:13:8b:62:2d:dd:ea:ac:7c:49:b5:18:71:97:62:
                    a9:92:1b:2d:57:74:f8:12:de:d4:c9:9e:b2:03:94:
                    a9:1f:29:b1:b3:7e:4e:5a:19:02:2b:59:a3:bb:a6:
                    a3:b3:74:38:12:60:2d:83:32:9e:b2:2b:66:f9:b2:
                    6c:8a:67:fb:da:a7:22:f8:5a:8c:d0:81:2f:1b:3e:
                    2a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:24:31:A9:91:AE:BF:3A:15:1C:D2:64:0A:DE:83:2A:F0:CB:D6:E2
            X509v3 Authority Key Identifier:
                keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e37352e3139322e302f32302d3230203d3e203238323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.75.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:6b:db:5a:a5:60:33:f2:13:8a:c7:3e:49:51:73:ba:af:c8:
         81:97:aa:ce:87:0c:a1:59:4e:2e:f2:b5:c3:f8:16:48:2e:0e:
         41:1f:51:d8:76:3c:d8:2a:10:e8:aa:13:05:30:77:92:33:12:
         49:a5:9a:87:81:41:a7:d0:ba:0c:a9:6d:ba:e0:14:1e:1d:c2:
         77:f0:3b:b2:c5:d5:3e:e6:48:7f:62:bb:38:23:b9:ea:de:e0:
         be:5c:fe:ed:fc:bf:f9:02:4e:aa:c8:dd:64:62:2b:c8:6a:6a:
         fe:95:b2:a4:7d:2e:bf:3f:c8:05:4c:a8:f3:8e:f1:e1:6f:ca:
         7b:3c:a7:74:da:e2:1c:05:f4:ac:58:06:5f:f4:87:f8:5d:a7:
         c2:1f:60:40:27:2f:5d:cd:a7:bc:63:93:05:22:8d:10:a7:d1:
         ee:76:76:07:44:37:02:44:c1:95:0a:ef:60:c2:26:8b:67:40:
         b8:96:8c:10:04:77:aa:43:db:67:51:8f:52:6d:31:77:d6:65:
         e6:27:85:d6:c2:bc:09:50:d4:d5:f6:19:29:d7:e5:b5:82:d6:
         35:5e:4e:6c:90:ca:c7:4b:ba:93:75:c1:de:3e:01:4a:fd:b4:
         b9:c2:1f:3c:e8:f8:57:8a:56:3a:3c:6c:02:1e:86:9e:47:17:
         26:ff:a4:02
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQOe4NEt2sTlWo5CA7xpVrJEqwagwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NBRDdGQkVCNjJENDFCRURFQjgyMDQ5QTgzNkU0Njc2
MTU4ODZGQzAeFw0yNDEwMTQwMTQ0NTFaFw0yNTEwMTMwMTQ5NTFaMDMxMTAvBgNV
BAMTKDNDMjQzMUE5OTFBRUJGM0ExNTFDRDI2NDBBREU4MzJBRjBDQkQ2RTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe479ztta9yFZzNJau8TlTUdiC
kB7lAttD1dDrPW5V3qzNYkgj8hQBxK+UJ8dvTDkqFaWSB7lao0LYdFr+DNAyz9y9
D+f9nnPXRzXYSP1AsskOqBe7LNA9ITXTQbcagIQH5B81TX9938bVMDLoFaSrXOf6
xtk6szOwJSI5iHr+M+fBxfMsangwPbpQnd66iAO46tneQIM+GUdEFRJbyekUr0gQ
apLbWsEA68YVJW0wJoM/KkITi2It3eqsfEm1GHGXYqmSGy1XdPgS3tTJnrIDlKkf
KbGzfk5aGQIrWaO7pqOzdDgSYC2DMp6yK2b5smyKZ/vapyL4WozQgS8bPiqPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUPCQxqZGuvzoVHNJkCt6DKvDL1uIwHwYDVR0j
BBgwFoAUfK1/vrYtQb7euCBJqDbkZ2FYhvwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1o5bkVRVmNHc1ZHN3NSQ1RrWTJadnZtREhob0U1WmdiakRLRnFNRnQ3
REYvMC83Q0FEN0ZCRUI2MkQ0MUJFREVCODIwNDlBODM2RTQ2NzYxNTg4NkZDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDQUQ3RkJFQjYyRDQxQkVE
RUI4MjA0OUE4MzZFNDY3NjE1ODg2RkMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNaOW5FUVZjR3NWRzdzUkNUa1kyWnZ2bURIaG9FNVpnYmpES0ZxTUZ0N0RGLzAv
MzEzNzM3MmUzNzM1MmUzMTM5MzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4
MzIzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEsUvAMA0GCSqGSIb3DQEBCwUAA4IBAQBCa9tapWAz
8hOKxz5JUXO6r8iBl6rOhwyhWU4u8rXD+BZILg5BH1HYdjzYKhDoqhMFMHeSMxJJ
pZqHgUGn0LoMqW264BQeHcJ38DuyxdU+5kh/Yrs4I7nq3uC+XP7t/L/5Ak6qyN1k
YivIamr+lbKkfS6/P8gFTKjzjvHhb8p7PKd02uIcBfSsWAZf9If4XafCH2BAJy9d
zae8Y5MFIo0Qp9HudnYHRDcCRMGVCu9gwiaLZ0C4lowQBHeqQ9tnUY9SbTF31mXm
J4XWwrwJUNTV9hkp1+W1gtY1Xk5skMrHS7qTdcHePgFK/bS5wh886PhXilY6PGwC
HoaeRxcm/6QC
-----END CERTIFICATE-----
Generated at Fri Nov 8 03:29:14 2024 by rpki-client on console.sobornost.net