Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e32312e3139322e302f32302d3234203d3e203238363637.roa
File:                     3137372e32312e3139322e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          hHDl1hiMT0xprdGQUCz3X6GnTsLYb+B1FNOsebZDeHs=
Subject key identifier:   F0:E0:DB:0E:DF:B8:59:A3:AD:C9:14:5E:17:EF:38:2F:86:E2:E3:A7
Certificate issuer:       /CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Certificate serial:       2C32C3F95CFC703350764882AD76A47CC6BC1031
Authority key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e32312e3139322e302f32302d3234203d3e203238363637.roa
Signing time:             Fri 03 May 2024 20:09:30 +0000
ROA not before:           Fri 03 May 2024 20:04:30 +0000
ROA not after:            Fri 02 May 2025 20:09:30 +0000
asID:                     28667
IP address blocks:        177.21.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:32:c3:f9:5c:fc:70:33:50:76:48:82:ad:76:a4:7c:c6:bc:10:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
        Validity
            Not Before: May  3 20:04:30 2024 GMT
            Not After : May  2 20:09:30 2025 GMT
        Subject: CN=F0E0DB0EDFB859A3ADC9145E17EF382F86E2E3A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:28:97:49:bc:3f:b0:c9:eb:75:0e:8d:45:60:
                    77:0f:ad:80:21:1c:70:43:ed:db:85:88:cc:9c:c5:
                    5b:4c:13:e8:12:63:53:07:8c:4b:3b:a5:bc:2d:89:
                    00:49:ff:73:0c:c4:da:b7:65:4e:5c:bc:dc:d4:59:
                    5a:1a:87:8e:68:f8:36:28:0f:2e:75:a6:07:fc:7f:
                    78:78:62:c0:e5:7e:ee:27:11:b1:a0:6d:2b:83:e3:
                    30:ac:02:d6:73:7e:17:cb:4c:6e:77:1f:b3:5e:24:
                    bd:24:de:79:67:d3:90:f2:cd:36:e1:c4:d5:6e:28:
                    2c:b6:17:8f:d1:4a:5e:8f:4d:b4:7a:75:78:a9:8a:
                    6d:e0:6c:4b:a4:8b:3b:0d:b2:ce:7f:9f:97:fe:7a:
                    ef:6d:56:97:38:72:f7:62:68:3b:dd:8c:ca:ec:8d:
                    cb:84:d9:52:e8:68:b2:40:c8:88:c9:70:dd:63:80:
                    0f:11:8e:4a:ff:d2:30:ff:2b:cc:b2:3c:f5:13:90:
                    1a:01:03:f6:2e:79:c4:5c:e7:82:d0:ac:34:fe:c4:
                    09:02:28:f9:09:3a:fb:d7:87:da:bf:50:e4:f0:4c:
                    de:a1:0d:da:54:51:94:40:b2:5a:87:52:c5:c5:7b:
                    67:9a:1d:8b:2e:f6:1f:fd:95:61:fa:57:7e:60:0b:
                    09:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E0:DB:0E:DF:B8:59:A3:AD:C9:14:5E:17:EF:38:2F:86:E2:E3:A7
            X509v3 Authority Key Identifier:
                keyid:9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e32312e3139322e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:ab:a7:f2:1c:93:e8:b2:92:ca:5f:7f:1d:56:bf:37:a2:8e:
         97:5d:da:6b:a7:7e:59:ac:13:c7:e5:2a:8b:db:d9:e8:91:2a:
         c8:af:be:ad:5a:81:c9:1f:7a:d8:23:ea:9b:b7:85:25:67:66:
         7d:97:dc:af:ec:cd:3f:50:43:61:5f:07:d2:e4:5a:da:65:93:
         0b:2b:88:61:2b:1b:17:d1:b2:f5:31:1a:8b:4e:ed:74:df:45:
         0d:f6:13:ef:b8:24:d3:3d:71:e9:a8:ea:f8:5a:8a:71:e2:17:
         82:08:ed:79:55:30:fe:8d:38:61:99:1d:85:6b:90:da:8c:5e:
         ab:94:c7:d9:b2:f8:3c:17:a5:52:58:d2:71:89:ee:f1:ea:4f:
         24:97:c7:17:88:69:35:ec:c1:d3:99:2d:ac:78:31:3c:e1:3b:
         e0:1d:65:1d:2e:cc:fe:0a:37:f2:5a:b0:41:55:c9:89:f7:00:
         a7:6c:68:c5:5e:1a:6a:27:ae:96:b3:a5:60:6b:04:01:67:aa:
         54:61:fa:f4:4b:87:f0:90:af:b2:ff:31:2a:ac:13:08:33:ea:
         73:15:39:99:55:21:b7:09:01:86:d4:5f:6a:60:00:86:54:d0:
         78:ca:5e:d0:a5:1e:a9:f6:b0:1d:92:2a:22:94:6e:68:07:ea:
         74:06:07:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org