Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3235322e302f32342d3234203d3e203532363630.roa
File:                     3137372e36362e3235322e302f32342d3234203d3e203532363630.roa (raw, json)
Hash identifier:          7Vim9uGTeS8d+qXHYp6PFimZMPjWgR4ZmT6Z8wwTYoA=
Subject key identifier:   3F:D6:E0:F3:26:62:8B:4F:DF:23:79:FD:38:FF:54:C7:78:51:A6:E3
Certificate issuer:       /CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
Certificate serial:       7F67C2B3B357F1DD2C454578E914BADE7273D02E
Authority key identifier: DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3235322e302f32342d3234203d3e203532363630.roa
Signing time:             Fri 17 Mar 2023 12:49:29 +0000
ROA not before:           Fri 17 Mar 2023 12:44:29 +0000
ROA not after:            Fri 15 Mar 2024 12:49:29 +0000
asID:                     52660
IP address blocks:        177.66.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:67:c2:b3:b3:57:f1:dd:2c:45:45:78:e9:14:ba:de:72:73:d0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
        Validity
            Not Before: Mar 17 12:44:29 2023 GMT
            Not After : Mar 15 12:49:29 2024 GMT
        Subject: CN=3FD6E0F326628B4FDF2379FD38FF54C77851A6E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:60:27:62:b7:84:10:2a:52:d9:7a:70:18:
                    c1:a6:66:99:20:40:a3:38:bc:a2:de:d0:af:f0:13:
                    9e:59:29:e7:9d:d5:0a:ea:20:75:e6:c4:c9:13:fd:
                    95:67:72:d0:a7:d5:de:80:72:53:1d:72:e1:87:64:
                    03:cc:d2:2c:ee:5e:3e:1d:82:d8:40:9b:e2:94:c9:
                    d3:5a:fe:ac:ac:a5:56:63:96:a4:73:18:aa:a8:2b:
                    af:55:40:bd:96:33:29:a4:39:3b:c4:41:f4:6d:f1:
                    11:3a:07:78:e9:fc:b7:4a:c4:b1:00:c1:c3:4c:05:
                    ac:e6:03:12:01:58:a6:87:62:3a:ea:e4:18:62:2c:
                    93:8f:89:c6:5d:0e:da:54:e1:38:bd:ff:53:e5:53:
                    34:61:a9:0b:e4:af:4e:c6:d1:8d:fa:a2:3e:2a:c5:
                    f4:72:fb:bc:38:58:e4:44:73:13:95:c3:98:65:9d:
                    69:88:18:7a:c1:b4:d3:50:50:72:52:4d:51:99:8c:
                    4f:43:65:ab:a7:d3:6e:f5:fc:4f:4a:c1:b9:4d:10:
                    0c:f0:47:df:3e:fc:be:de:1a:c0:c0:93:b3:18:bd:
                    77:43:5e:2c:a9:12:fa:4c:04:31:17:3a:8f:a2:f8:
                    c2:a1:6a:bc:cf:c2:40:bf:2b:21:11:88:38:f0:5e:
                    53:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D6:E0:F3:26:62:8B:4F:DF:23:79:FD:38:FF:54:C7:78:51:A6:E3
            X509v3 Authority Key Identifier:
                keyid:DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3235322e302f32342d3234203d3e203532363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:00:a4:6c:3d:fe:73:aa:10:11:8b:ec:65:69:eb:c9:4c:7b:
         78:5d:81:f7:85:72:7c:d2:55:72:85:5c:22:8d:ca:9a:f7:ed:
         ad:43:4b:ad:b5:d0:48:34:ee:9e:f9:c0:a6:6d:cf:ec:48:50:
         bb:d7:8d:aa:b3:9b:11:ca:e2:3e:00:07:65:6b:6a:eb:a1:0b:
         51:df:35:77:89:01:7b:28:83:36:e8:73:86:06:6a:50:2a:bd:
         91:f7:9e:6d:f8:fd:50:14:00:41:d7:45:05:43:dc:cb:31:f3:
         9c:b6:d3:a7:82:93:76:05:a6:b0:28:47:a1:10:37:24:7e:1d:
         93:5c:7f:a0:8d:b1:26:96:b1:48:b8:83:c1:ac:a6:83:8f:bd:
         b1:f1:bb:a4:7a:29:8e:8f:7e:23:1f:f3:5e:2b:8e:d6:58:fc:
         e0:87:8b:93:54:f8:9f:fb:77:6a:cb:a9:5c:50:d0:8f:3d:69:
         46:b0:ff:be:d0:90:7c:48:fd:8c:64:3e:b6:4d:a4:32:77:c0:
         23:2d:78:f3:41:f0:dc:50:91:bf:80:7f:5b:a7:c6:e8:56:43:
         c4:2b:35:3b:52:f7:5f:56:a7:87:46:7a:b7:cc:d3:48:50:16:
         d2:17:25:ac:e3:8c:ce:59:8c:a8:64:6d:27:3f:e5:39:de:c0:
         6c:92:9d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org