Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3234382e302f32332d3233203d3e203532363630.roa
File:                     3137372e36362e3234382e302f32332d3233203d3e203532363630.roa (raw, json)
Hash identifier:          Tgp5QqSZUSdBjK6bA4imO02PkI+EKWyvISF1EaQoTIk=
Subject key identifier:   3F:F3:7B:1A:20:CD:23:E9:FE:E4:46:16:0D:25:CE:D9:8A:03:45:66
Certificate issuer:       /CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
Certificate serial:       45C5A2170E6FFEE0E18B3C31AEDAB73E31C60D2C
Authority key identifier: DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3234382e302f32332d3233203d3e203532363630.roa
Signing time:             Tue 21 Mar 2023 19:35:22 +0000
ROA not before:           Tue 21 Mar 2023 19:30:22 +0000
ROA not after:            Tue 19 Mar 2024 19:35:22 +0000
asID:                     52660
IP address blocks:        177.66.248.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c5:a2:17:0e:6f:fe:e0:e1:8b:3c:31:ae:da:b7:3e:31:c6:0d:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
        Validity
            Not Before: Mar 21 19:30:22 2023 GMT
            Not After : Mar 19 19:35:22 2024 GMT
        Subject: CN=3FF37B1A20CD23E9FEE446160D25CED98A034566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:5b:a8:50:2b:e0:32:d7:14:e9:3d:ad:65:
                    ed:79:13:eb:20:d1:5b:f1:b3:aa:52:62:82:16:2f:
                    d8:8c:59:9a:f7:71:80:e8:e4:d7:12:70:69:67:d4:
                    01:cf:30:32:01:9e:24:ba:6f:e0:c2:11:17:d3:03:
                    ab:4d:1e:13:e2:45:85:03:50:a9:58:d2:c4:b4:f8:
                    3b:8c:3d:ae:79:c0:d0:4f:1c:7b:c6:a2:7e:7e:71:
                    c3:ae:ab:23:71:5d:f3:bb:40:84:e3:45:30:39:e9:
                    a1:1a:a7:7b:73:10:c9:2c:4d:c6:e1:80:16:ec:b1:
                    d8:25:35:62:65:80:c0:9b:e2:22:eb:ab:07:0c:71:
                    58:9a:48:bb:42:62:eb:49:a3:7d:7e:93:ee:4f:9d:
                    45:0e:b8:54:c9:93:81:5e:e1:46:f3:22:fc:73:c8:
                    68:2f:2c:18:df:bb:23:ab:df:7d:9d:c8:d8:f9:ff:
                    dd:f9:f9:be:5a:dc:cf:e5:c6:d3:15:d5:28:2e:b7:
                    00:50:a6:da:5e:29:6b:32:75:91:eb:b4:8c:0d:c4:
                    90:ef:a2:f5:37:f0:69:11:4a:5d:ea:c3:d7:f1:d1:
                    70:09:7a:3a:ef:51:1f:85:e8:65:2f:5e:8e:fc:7e:
                    b0:c3:75:f8:34:bd:a5:d2:ba:a9:f9:67:2d:15:5e:
                    e0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F3:7B:1A:20:CD:23:E9:FE:E4:46:16:0D:25:CE:D9:8A:03:45:66
            X509v3 Authority Key Identifier:
                keyid:DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3234382e302f32332d3233203d3e203532363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:04:2a:d9:1d:7f:3a:5e:05:74:80:6b:bc:40:a4:aa:65:c2:
         9d:ee:fc:b9:26:2b:cf:c3:bf:e5:65:38:8d:86:5a:2b:2b:7e:
         0c:ed:95:36:fd:e6:a1:58:fa:e8:23:55:3e:74:14:ff:82:2b:
         53:37:9e:84:93:04:f3:bd:73:3f:ad:4c:da:09:6e:e6:21:ff:
         1d:5b:51:eb:96:c8:37:80:a3:60:94:51:61:17:18:74:06:41:
         31:ab:a1:7a:c1:e0:d0:23:fc:ba:ba:ac:13:13:52:7f:fa:08:
         93:c5:29:a3:8c:ea:ba:a9:dd:a1:cc:c6:e2:b4:96:68:2f:49:
         11:df:42:4a:d2:2a:44:62:63:dd:17:d1:57:60:a2:01:17:bc:
         56:c1:86:dd:64:43:94:e2:c8:59:99:b0:20:24:3e:09:a0:39:
         66:a0:ff:20:94:f8:59:ba:fa:78:db:d0:6f:4c:aa:50:b7:09:
         bc:41:98:d9:5a:31:a3:32:31:8a:40:ea:75:67:44:76:be:02:
         c8:e1:25:7f:87:66:8a:51:10:1d:cc:1e:33:47:72:26:49:09:
         55:51:b1:ed:c4:83:b8:7c:b7:ae:04:76:f4:27:61:e9:44:a6:
         c2:3d:5c:7e:2b:a0:37:de:53:08:63:02:f8:b5:8b:a0:5c:38:
         8b:76:6d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org