Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3234382e302f32342d3234203d3e203532363630.roa
File:                     3137372e36362e3234382e302f32342d3234203d3e203532363630.roa (raw, json)
Hash identifier:          MCnLn+1fYxWCAm1buyDPpdCJZMF0pfsj/7OlsJCsbP0=
Subject key identifier:   65:8D:DA:47:49:DE:C8:B2:5C:A8:7D:EA:99:B3:19:55:13:01:80:8E
Certificate issuer:       /CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
Certificate serial:       4CE3DD69857360B57518306819464BD3DD654D66
Authority key identifier: DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3234382e302f32342d3234203d3e203532363630.roa
Signing time:             Fri 17 Mar 2023 12:47:37 +0000
ROA not before:           Fri 17 Mar 2023 12:42:37 +0000
ROA not after:            Fri 15 Mar 2024 12:47:37 +0000
asID:                     52660
IP address blocks:        177.66.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e3:dd:69:85:73:60:b5:75:18:30:68:19:46:4b:d3:dd:65:4d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
        Validity
            Not Before: Mar 17 12:42:37 2023 GMT
            Not After : Mar 15 12:47:37 2024 GMT
        Subject: CN=658DDA4749DEC8B25CA87DEA99B319551301808E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3d:ac:8b:90:23:74:00:9f:0d:c5:56:2e:d1:
                    f0:b2:ff:74:5a:d5:81:34:e5:0e:3a:64:02:20:ea:
                    94:bb:36:db:8b:05:84:7f:48:6f:46:2a:e6:1b:ce:
                    5a:08:b0:65:65:7a:d1:fd:f2:60:3c:db:df:bf:92:
                    09:ae:5e:4e:e0:28:44:62:3b:23:12:e4:24:ff:8c:
                    0b:a9:73:2d:c8:d6:a8:aa:16:36:29:69:48:4f:4c:
                    8a:60:42:08:13:f6:cc:79:22:e5:6f:50:e2:b0:84:
                    55:b9:48:46:4e:c0:9a:f9:91:48:1c:90:ae:d6:43:
                    1a:e4:ff:17:ca:30:b9:49:7e:93:26:50:c8:89:de:
                    d9:5c:20:fb:44:76:f2:68:ff:e7:b5:a1:f4:cf:e4:
                    1a:bd:a7:08:1b:2e:8f:d3:13:1b:89:3b:52:b4:13:
                    23:e5:c2:cc:a8:c5:07:2f:cf:6a:21:19:26:a1:90:
                    81:ee:17:6a:90:9a:9f:a4:61:0b:28:3e:e3:4b:4a:
                    d1:12:84:0e:eb:e1:87:e3:01:d9:f6:5a:42:18:5f:
                    23:47:1c:98:29:e4:73:c3:45:05:41:78:a0:ff:0c:
                    13:21:9e:85:12:d9:8c:04:ec:36:14:b0:41:be:db:
                    f2:da:54:99:ea:50:b9:bd:32:20:f4:2d:e9:42:ee:
                    b8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8D:DA:47:49:DE:C8:B2:5C:A8:7D:EA:99:B3:19:55:13:01:80:8E
            X509v3 Authority Key Identifier:
                keyid:DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3234382e302f32342d3234203d3e203532363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:92:ea:a2:5b:c4:e4:45:ea:01:d7:fd:31:77:00:2b:c1:ea:
         8f:e2:77:f4:1c:b9:dd:64:ec:d1:75:a5:b7:3f:9f:ff:17:12:
         ff:9b:53:1b:16:a5:2b:32:63:d3:51:7e:ca:8d:7f:64:83:83:
         57:7d:4e:ad:10:6d:ba:7f:33:04:79:ed:b8:c0:50:e4:59:5d:
         17:20:60:60:f4:d5:0e:92:8d:bc:21:10:37:23:8a:8a:82:8d:
         5a:27:ac:b7:d6:bd:e1:38:77:4c:9f:ef:1b:65:cc:a1:dd:e8:
         2f:ff:81:16:2f:5d:13:6e:85:66:54:17:1d:b9:93:46:b8:07:
         06:b4:ef:57:b9:c4:3e:da:d6:67:d0:5a:f5:60:93:fb:61:c6:
         a1:f5:4a:68:33:85:73:14:b2:25:9a:a5:e0:4e:7c:6d:b8:ce:
         90:c4:8e:d1:5a:ac:44:65:b1:ab:f9:20:65:1c:7a:ee:d0:7a:
         ff:25:86:5b:68:08:f3:f9:76:41:88:1b:39:6a:96:45:b1:c4:
         37:21:3a:b2:b2:98:67:e8:e5:64:47:10:1a:37:1f:52:d8:81:
         13:94:f6:b6:c3:cb:26:1f:ee:1f:4e:11:26:cd:83:22:4d:d1:
         dd:f6:5d:1e:bd:8a:55:f8:e9:30:8a:61:ce:f2:ae:ed:05:5f:
         2a:8f:c4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org