Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3235302e302f32332d3233203d3e203532363630.roa
File:                     3137372e36362e3235302e302f32332d3233203d3e203532363630.roa (raw, json)
Hash identifier:          xbrhJiy9Nm651wbB8MDdIymA6o6ZxdvCPfTt/1L6cR4=
Subject key identifier:   66:DE:C0:D3:5A:33:D3:6B:E8:DA:0C:F2:06:79:05:CF:6C:27:9B:CE
Certificate issuer:       /CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
Certificate serial:       35BEAB864E6FB68A5CB5C831B13D15BCA6978103
Authority key identifier: DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3235302e302f32332d3233203d3e203532363630.roa
Signing time:             Tue 21 Mar 2023 19:35:34 +0000
ROA not before:           Tue 21 Mar 2023 19:30:34 +0000
ROA not after:            Tue 19 Mar 2024 19:35:34 +0000
asID:                     52660
IP address blocks:        177.66.250.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:be:ab:86:4e:6f:b6:8a:5c:b5:c8:31:b1:3d:15:bc:a6:97:81:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
        Validity
            Not Before: Mar 21 19:30:34 2023 GMT
            Not After : Mar 19 19:35:34 2024 GMT
        Subject: CN=66DEC0D35A33D36BE8DA0CF2067905CF6C279BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:06:cc:ba:12:84:fc:16:e2:b7:f7:36:20:08:
                    7c:5b:97:4f:5c:0b:55:71:4b:a0:0e:cd:b6:4a:41:
                    c6:ce:fa:66:df:d1:dd:de:ea:05:e5:92:f9:8e:cc:
                    89:95:16:54:bf:9f:05:24:e0:df:d3:e2:46:27:02:
                    c2:7c:b5:eb:49:fb:38:f0:34:30:67:34:1c:49:72:
                    9a:bf:e5:81:c3:3b:40:7d:03:2b:78:3a:3b:40:5a:
                    f7:61:40:8b:39:a2:9c:ec:e5:a6:1a:f5:06:7d:5f:
                    2e:8e:8c:96:b5:df:ea:5a:20:9d:e5:25:1f:9d:9d:
                    8c:b4:23:1c:ec:c8:f8:40:81:12:7c:d9:8e:1a:e1:
                    21:49:65:87:3e:d3:b2:91:9e:c4:bc:0c:b8:cb:fd:
                    f0:c4:d6:e3:83:c8:f5:1d:00:0e:b0:a9:c0:ba:26:
                    dc:48:d6:d1:01:8a:a9:cb:b0:f0:b1:7a:4d:17:1e:
                    f0:bb:c4:5d:e7:af:7a:44:df:5b:1a:a0:b0:81:fe:
                    df:0f:f7:4b:78:ab:d8:52:b2:f9:a4:7f:2d:24:69:
                    95:e5:cf:f7:bf:f3:82:1e:25:fd:27:c3:02:30:13:
                    70:90:6b:a3:30:bf:45:d4:4b:b1:1e:db:9d:a5:a8:
                    4a:62:66:9a:53:9a:4f:ee:44:75:f2:38:c5:9b:3a:
                    18:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DE:C0:D3:5A:33:D3:6B:E8:DA:0C:F2:06:79:05:CF:6C:27:9B:CE
            X509v3 Authority Key Identifier:
                keyid:DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3235302e302f32332d3233203d3e203532363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:85:3a:ca:3c:5c:09:0f:1d:96:ff:00:b4:59:93:06:53:59:
         d0:90:dd:d3:6f:11:65:67:b0:48:44:44:83:5e:1f:f1:af:54:
         1d:55:b5:75:30:a5:33:0b:83:a5:04:24:29:51:b0:68:06:47:
         d1:e8:71:5b:5f:fd:77:50:ad:f4:78:76:9b:00:f3:f9:3e:8c:
         57:51:68:42:1f:83:51:b8:70:47:2f:66:7c:6e:2a:e4:d0:a4:
         a8:02:ff:93:39:f4:ce:24:59:b9:6e:58:14:20:4e:51:3a:06:
         07:e2:08:98:53:d4:e2:e3:12:d0:d7:c3:93:27:9c:09:48:22:
         04:09:16:87:9e:32:b0:7d:7a:51:b4:78:4f:ca:23:af:3b:de:
         b5:b2:85:4a:34:f2:fc:32:71:b9:02:3a:bf:09:9b:14:50:20:
         4a:d1:2c:e6:57:57:bb:dd:11:db:00:41:1b:9d:5e:92:39:e9:
         53:e5:d3:90:bd:21:20:6d:d5:db:1d:2f:bb:1e:84:ad:4a:b6:
         92:f1:ba:9b:63:53:e5:40:0e:07:a0:a1:a2:93:9e:5e:90:6f:
         f1:82:99:38:2c:b3:6f:99:84:5c:f7:f2:c6:00:4d:e4:b3:5b:
         f6:3e:bb:ae:c1:ce:65:f4:bf:26:e2:e5:dd:79:3e:ed:9e:be:
         e4:bc:f3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org