Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3234382e302f32312d3231203d3e203532363630.roa
File:                     3137372e36362e3234382e302f32312d3231203d3e203532363630.roa (raw, json)
Hash identifier:          yQ2i/trlQaD08KZYCxhlP0tVuliV6Z+18NbRyGIoBrY=
Subject key identifier:   40:42:51:79:EC:A5:49:F2:57:CB:EB:AE:26:A8:EC:00:48:CD:71:5F
Certificate issuer:       /CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
Certificate serial:       366CEC3CD24C8638FFAF542F1B7CC4B64E5FAEB4
Authority key identifier: DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3234382e302f32312d3231203d3e203532363630.roa
Signing time:             Tue 14 Feb 2023 19:58:36 +0000
ROA not before:           Tue 14 Feb 2023 19:53:36 +0000
ROA not after:            Tue 13 Feb 2024 19:58:36 +0000
asID:                     52660
IP address blocks:        177.66.248.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6c:ec:3c:d2:4c:86:38:ff:af:54:2f:1b:7c:c4:b6:4e:5f:ae:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
        Validity
            Not Before: Feb 14 19:53:36 2023 GMT
            Not After : Feb 13 19:58:36 2024 GMT
        Subject: CN=40425179ECA549F257CBEBAE26A8EC0048CD715F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:2e:09:9b:9a:35:83:8d:23:56:53:91:09:
                    b7:b9:8c:35:45:36:ef:e6:57:59:56:72:1e:68:a2:
                    b6:38:4b:22:2f:02:b4:41:12:56:92:20:4d:ea:7a:
                    03:f0:6d:7a:ad:20:7f:60:10:e1:45:d2:e0:38:2d:
                    b5:ac:f0:c3:c1:8a:22:91:dc:25:d4:73:5c:ed:6d:
                    d1:30:bc:c1:3b:b8:2d:34:ad:08:bb:76:65:68:22:
                    63:d7:9b:0f:6a:f7:1e:c7:07:17:89:8e:95:26:9f:
                    37:c3:2d:fb:17:7f:c0:36:89:65:f8:bc:02:d3:e3:
                    53:29:d8:ff:f7:9c:b1:d4:0f:54:24:38:64:dd:62:
                    85:e8:5a:10:5d:10:55:8b:7f:6f:2e:a0:08:14:27:
                    1c:ed:6f:f8:37:3d:fc:2c:a4:ed:26:5d:69:c3:0e:
                    0e:9f:91:c2:55:4c:fb:8d:d8:90:c5:fa:15:5c:f3:
                    08:12:e4:0d:50:ef:04:ca:0b:f5:28:49:32:f9:43:
                    dc:bf:9e:d1:d6:f9:26:3b:52:e9:2e:d5:a4:51:47:
                    54:f0:40:83:42:c1:70:50:db:c0:3f:35:0f:3d:c7:
                    46:09:5b:e5:db:99:71:5a:23:60:46:6a:30:84:a3:
                    29:9d:07:54:06:d6:cc:bc:3f:b1:ed:c0:1f:98:56:
                    86:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:42:51:79:EC:A5:49:F2:57:CB:EB:AE:26:A8:EC:00:48:CD:71:5F
            X509v3 Authority Key Identifier:
                keyid:DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3234382e302f32312d3231203d3e203532363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:eb:89:51:94:2a:66:e7:9f:fe:3a:f5:bf:b4:df:cd:04:4b:
         19:ff:26:2e:72:4b:64:85:b0:95:24:d8:a3:e0:ec:f6:6b:f2:
         06:be:4e:f8:8d:a9:5e:d4:4d:af:f2:97:34:19:4e:61:7b:c1:
         33:ed:7f:fb:3f:87:e1:d4:66:a6:90:9a:0d:0f:d7:dd:05:25:
         cb:64:3f:39:84:5d:12:43:b1:14:ac:eb:a9:ce:0e:23:f3:8a:
         c8:40:c7:8e:0e:23:e3:9f:6e:10:f2:38:f5:8c:5f:67:a8:81:
         5b:b1:60:24:53:a2:7d:72:87:37:8b:77:3b:cd:f3:99:16:07:
         a7:67:b9:53:86:7f:29:ae:1f:3e:c6:64:a5:85:9c:be:85:f1:
         35:5d:79:33:5a:7f:89:d3:62:39:e7:62:1a:32:15:78:4e:59:
         01:d6:9f:a7:66:63:74:63:e9:91:b7:f4:00:0a:cf:0a:f9:35:
         9b:8b:d0:d8:2b:a2:2a:15:5f:f8:0b:f6:c9:d0:a9:c7:f5:d5:
         39:f4:2e:61:01:75:06:78:7f:9a:22:15:7c:a4:51:9c:c7:25:
         4a:5e:95:ef:f1:14:9f:92:ba:4a:4d:b2:22:81:b2:a0:e6:6b:
         b3:3a:5a:74:2f:95:74:64:ce:b8:ec:4d:8c:4a:84:49:0a:4e:
         36:96:c7:7c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUNmzsPNJMhjj/r1QvG3zEtk5frrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDOEU5MTczRjQwOTBERkVFOURDMkRDMjJEREUyM0I4
REUyM0FDQzAeFw0yMzAyMTQxOTUzMzZaFw0yNDAyMTMxOTU4MzZaMDMxMTAvBgNV
BAMTKDQwNDI1MTc5RUNBNTQ5RjI1N0NCRUJBRTI2QThFQzAwNDhDRDcxNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9C4Jm5o1g40jVlORCbe5jDVF
Nu/mV1lWch5oorY4SyIvArRBElaSIE3qegPwbXqtIH9gEOFF0uA4LbWs8MPBiiKR
3CXUc1ztbdEwvME7uC00rQi7dmVoImPXmw9q9x7HBxeJjpUmnzfDLfsXf8A2iWX4
vALT41Mp2P/3nLHUD1QkOGTdYoXoWhBdEFWLf28uoAgUJxztb/g3PfwspO0mXWnD
Dg6fkcJVTPuN2JDF+hVc8wgS5A1Q7wTKC/UoSTL5Q9y/ntHW+SY7Uuku1aRRR1Tw
QINCwXBQ28A/NQ89x0YJW+XbmXFaI2BGajCEoymdB1QG1sy8P7HtwB+YVoZFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQEJReeylSfJXy+uuJqjsAEjNcV8wHwYDVR0j
BBgwFoAU3MjpFz9AkN/uncLcIt3iO43iOswwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzlFV3VjdWJyM3Q0RVFDZVU1MmZMRjRmcXBuN0NvRW1lajhwSm9DQVNR
MXEvMC9EQ0M4RTkxNzNGNDA5MERGRUU5REMyREMyMkRERTIzQjhERTIzQUNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQzhFOTE3M0Y0MDkwREZF
RTlEQzJEQzIyRERFMjNCOERFMjNBQ0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M5RVd1Y3VicjN0NEVRQ2VVNTJmTEY0ZnFwbjdDb0VtZWo4cEpvQ0FTUTFxLzAv
MzEzNzM3MmUzNjM2MmUzMjM0MzgyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTMy
MzYzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDsUL4MA0GCSqGSIb3DQEBCwUAA4IBAQB064lRlCpm
55/+OvW/tN/NBEsZ/yYucktkhbCVJNij4Oz2a/IGvk74jale1E2v8pc0GU5he8Ez
7X/7P4fh1GamkJoND9fdBSXLZD85hF0SQ7EUrOupzg4j84rIQMeODiPjn24Q8jj1
jF9nqIFbsWAkU6J9coc3i3c7zfOZFgenZ7lThn8prh8+xmSlhZy+hfE1XXkzWn+J
02I552IaMhV4TlkB1p+nZmN0Y+mRt/QACs8K+TWbi9DYK6IqFV/4C/bJ0KnH9dU5
9C5hAXUGeH+aIhV8pFGcxyVKXpXv8RSfkrpKTbIigbKg5muzOlp0L5V0ZM647E2M
SoRJCk42lsd8
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org