Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3235342e302f32342d3234203d3e203532363630.roa
File:                     3137372e36362e3235342e302f32342d3234203d3e203532363630.roa (raw, json)
Hash identifier:          XN/sl+b65gesYueYiGy7n3Wgj5zsxBrHlcpew4WqICI=
Subject key identifier:   4D:70:E9:88:F1:07:1E:17:A7:04:75:14:BE:9D:3C:6E:5C:7F:76:10
Certificate issuer:       /CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
Certificate serial:       17C35F27F9DA93AA94B62FF6C5B117F8394165F0
Authority key identifier: DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3235342e302f32342d3234203d3e203532363630.roa
Signing time:             Fri 17 Mar 2023 12:48:53 +0000
ROA not before:           Fri 17 Mar 2023 12:43:53 +0000
ROA not after:            Fri 15 Mar 2024 12:48:53 +0000
asID:                     52660
IP address blocks:        177.66.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c3:5f:27:f9:da:93:aa:94:b6:2f:f6:c5:b1:17:f8:39:41:65:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
        Validity
            Not Before: Mar 17 12:43:53 2023 GMT
            Not After : Mar 15 12:48:53 2024 GMT
        Subject: CN=4D70E988F1071E17A7047514BE9D3C6E5C7F7610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:11:b2:0b:7e:de:f2:40:d1:41:e0:b6:ca:
                    2a:30:8c:f6:05:6d:4e:6d:2b:e5:3a:1e:26:75:9b:
                    3e:04:6e:42:7d:08:5a:cd:f3:3c:5a:cd:fc:37:fe:
                    e7:23:71:22:95:15:dd:f6:9d:e3:d2:21:c7:73:59:
                    96:e0:01:a8:a4:91:58:ab:a0:51:b2:da:65:80:92:
                    fc:2f:37:a0:98:85:d6:c8:c1:c6:92:e6:44:b0:26:
                    d6:18:e6:5c:ba:e7:e0:36:af:57:7b:e0:72:88:08:
                    3d:f9:22:94:5c:40:10:5e:df:c7:83:63:17:bc:d4:
                    db:f5:03:fd:22:dc:b1:43:d9:1c:c3:52:6e:e8:93:
                    49:2b:44:0e:a4:f7:22:51:e1:a5:98:a4:5f:c1:40:
                    f1:a6:54:07:73:78:6e:88:d1:70:64:ec:31:3d:33:
                    30:50:58:89:23:03:02:a5:7a:3e:96:57:2a:98:d2:
                    47:20:c6:5d:2d:cf:57:c6:0d:53:85:c7:9d:e8:0b:
                    9f:d1:cd:e4:8a:55:75:13:6e:9b:76:cf:a7:26:40:
                    0f:be:02:0b:6e:b8:3e:74:1a:db:15:60:20:32:74:
                    9f:93:67:7c:af:d1:50:33:d3:fa:2a:11:87:c6:75:
                    81:96:56:39:0e:85:8c:6e:21:49:d2:87:cd:6a:85:
                    ee:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:70:E9:88:F1:07:1E:17:A7:04:75:14:BE:9D:3C:6E:5C:7F:76:10
            X509v3 Authority Key Identifier:
                keyid:DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3235342e302f32342d3234203d3e203532363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:4f:7a:3c:f0:8d:df:d2:5e:e9:3a:de:be:2c:49:8a:46:e3:
         e0:b7:ac:aa:a5:dc:81:12:9e:aa:66:b4:77:32:08:32:11:4b:
         66:5b:82:60:16:8e:f0:08:dd:ce:db:41:6a:e2:fc:66:fe:46:
         eb:00:01:f1:54:15:eb:db:e4:e2:c3:57:2a:4a:87:be:21:b9:
         f7:3a:b0:d2:25:33:d4:0a:a3:a1:da:b0:d2:6c:05:b7:f3:a4:
         08:17:6f:37:0e:98:c7:c3:24:b8:75:a6:d3:5a:9c:5b:ba:59:
         a8:87:0d:a0:9b:e2:fe:51:25:02:8b:21:a0:31:e4:ee:39:3c:
         0b:15:83:32:df:57:b4:04:d2:68:6c:06:32:a6:63:97:dc:17:
         32:2c:2f:d7:22:76:16:a4:ee:bf:7d:5c:a8:70:24:cf:bc:fc:
         92:c2:d1:08:08:a3:f9:b3:50:73:64:da:d4:94:8e:28:c0:8e:
         e9:35:9d:cf:16:b1:85:48:b3:ec:ad:98:eb:d3:4e:a8:f3:dd:
         12:29:5f:4d:4b:8d:41:2f:50:d6:e5:fc:0a:86:c3:58:1f:52:
         0d:87:7c:5a:89:1d:83:a4:56:c8:06:e4:d5:1c:50:72:e0:c8:
         57:2a:96:14:ff:ab:27:21:14:08:8e:20:3b:7f:ed:42:da:4a:
         6a:c7:e7:f4
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUF8NfJ/nak6qUti/2xbEX+DlBZfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENDOEU5MTczRjQwOTBERkVFOURDMkRDMjJEREUyM0I4
REUyM0FDQzAeFw0yMzAzMTcxMjQzNTNaFw0yNDAzMTUxMjQ4NTNaMDMxMTAvBgNV
BAMTKDRENzBFOTg4RjEwNzFFMTdBNzA0NzUxNEJFOUQzQzZFNUM3Rjc2MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfRGyC37e8kDRQeC2yiowjPYF
bU5tK+U6HiZ1mz4EbkJ9CFrN8zxazfw3/ucjcSKVFd32nePSIcdzWZbgAaikkVir
oFGy2mWAkvwvN6CYhdbIwcaS5kSwJtYY5ly65+A2r1d74HKICD35IpRcQBBe38eD
Yxe81Nv1A/0i3LFD2RzDUm7ok0krRA6k9yJR4aWYpF/BQPGmVAdzeG6I0XBk7DE9
MzBQWIkjAwKlej6WVyqY0kcgxl0tz1fGDVOFx53oC5/RzeSKVXUTbpt2z6cmQA++
AgtuuD50GtsVYCAydJ+TZ3yv0VAz0/oqEYfGdYGWVjkOhYxuIUnSh81qhe4BAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTXDpiPEHHhenBHUUvp08blx/dhAwHwYDVR0j
BBgwFoAU3MjpFz9AkN/uncLcIt3iO43iOswwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzlFV3VjdWJyM3Q0RVFDZVU1MmZMRjRmcXBuN0NvRW1lajhwSm9DQVNR
MXEvMC9EQ0M4RTkxNzNGNDA5MERGRUU5REMyREMyMkRERTIzQjhERTIzQUNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RDQzhFOTE3M0Y0MDkwREZF
RTlEQzJEQzIyRERFMjNCOERFMjNBQ0MuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M5RVd1Y3VicjN0NEVRQ2VVNTJmTEY0ZnFwbjdDb0VtZWo4cEpvQ0FTUTFxLzAv
MzEzNzM3MmUzNjM2MmUzMjM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzYzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsUL+MA0GCSqGSIb3DQEBCwUAA4IBAQAvT3o88I3f
0l7pOt6+LEmKRuPgt6yqpdyBEp6qZrR3MggyEUtmW4JgFo7wCN3O20Fq4vxm/kbr
AAHxVBXr2+Tiw1cqSoe+Ibn3OrDSJTPUCqOh2rDSbAW386QIF283DpjHwyS4dabT
Wpxbulmohw2gm+L+USUCiyGgMeTuOTwLFYMy31e0BNJobAYypmOX3BcyLC/XInYW
pO6/fVyocCTPvPySwtEICKP5s1BzZNrUlI4owI7pNZ3PFrGFSLPsrZjr006o890S
KV9NS41BL1DW5fwKhsNYH1INh3xaiR2DpFbIBuTVHFBy4MhXKpYU/6snIRQIjiA7
f+1C2kpqx+f0
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org