Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3134332e3230322e36382e302f32322d3234203d3e203238363637.roa
File:                     3134332e3230322e36382e302f32322d3234203d3e203238363637.roa (raw, json)
Hash identifier:          77HPlf5gtwiitsMY//l1QIeu1Tu19iGuwFstyEadSMQ=
Subject key identifier:   30:96:D8:00:4A:93:9C:74:39:D2:D5:6C:AD:E4:4E:BD:CF:8F:5B:EC
Certificate issuer:       /CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
Certificate serial:       3E99717BA49CF40B6681D1963F37F55609402B5C
Authority key identifier: CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3134332e3230322e36382e302f32322d3234203d3e203238363637.roa
Signing time:             Thu 04 Apr 2024 16:06:07 +0000
ROA not before:           Thu 04 Apr 2024 16:01:07 +0000
ROA not after:            Thu 03 Apr 2025 16:06:07 +0000
asID:                     28667
IP address blocks:        143.202.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:99:71:7b:a4:9c:f4:0b:66:81:d1:96:3f:37:f5:56:09:40:2b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
        Validity
            Not Before: Apr  4 16:01:07 2024 GMT
            Not After : Apr  3 16:06:07 2025 GMT
        Subject: CN=3096D8004A939C7439D2D56CADE44EBDCF8F5BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:0b:c1:40:19:9a:e1:48:a6:1c:9c:04:2d:
                    c3:3f:72:ba:a3:80:d6:5e:c1:34:35:e6:7a:eb:05:
                    bf:0e:7a:f3:b6:dc:f6:dd:e7:dc:98:d7:12:41:ec:
                    85:c5:30:14:d3:01:7a:a4:1b:95:ed:9b:27:77:ae:
                    e4:dc:63:f1:99:00:11:e5:10:f9:1e:2e:5d:97:4e:
                    6c:1a:de:5a:d9:c6:bb:1e:e7:d3:1e:3d:61:63:97:
                    9c:f6:35:46:35:3d:0c:a2:10:55:1e:a4:00:81:41:
                    6b:ee:5b:2c:6c:b3:fe:8d:e8:5f:7e:3a:78:15:2f:
                    38:0a:12:91:9e:95:e9:b6:25:44:f8:62:5e:df:ba:
                    4d:a4:fb:0c:c2:d5:14:25:1e:12:88:b1:2f:b6:6a:
                    a0:6b:de:ef:d8:09:13:43:8e:d1:70:0c:bb:d3:a4:
                    ee:fe:2b:0f:3c:50:64:f2:df:52:05:72:5e:fe:5d:
                    5e:0e:02:23:65:67:36:a0:4c:d9:46:e0:13:c6:64:
                    4a:33:51:9e:83:80:0a:ad:a9:f0:c2:d1:d6:ac:5b:
                    4d:87:ef:db:75:a1:6f:ed:04:13:d5:c6:a8:e2:7a:
                    d7:0f:34:ac:aa:d8:2a:66:05:c6:16:c7:94:b4:bc:
                    33:0b:95:c2:82:99:fd:5d:e7:ac:32:5f:38:97:c2:
                    d4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:96:D8:00:4A:93:9C:74:39:D2:D5:6C:AD:E4:4E:BD:CF:8F:5B:EC
            X509v3 Authority Key Identifier:
                keyid:CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3134332e3230322e36382e302f32322d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:c9:bd:9e:82:e5:22:f7:2b:8b:61:d1:9a:6d:70:f6:eb:e4:
         3c:0e:8d:e9:6d:17:3c:06:31:12:89:1d:80:08:b0:ee:ca:d5:
         7e:c2:76:37:90:37:10:63:fa:88:59:62:c7:6a:c2:f5:86:e6:
         61:0f:71:88:af:47:45:f4:8f:c3:18:34:3a:00:4f:cf:31:d1:
         dc:1d:52:46:1a:ee:ef:f7:f4:d4:28:d5:49:ad:1a:7c:70:99:
         94:7b:50:a0:23:49:91:6c:bc:c5:33:7c:ea:da:b2:2b:fb:c8:
         a3:b0:95:03:5a:27:ab:03:28:19:7b:6e:90:73:8d:b7:d7:3c:
         d0:ff:8e:9f:20:bc:42:29:53:07:89:71:2e:22:30:f3:fd:28:
         d4:25:68:c4:75:21:37:a2:b9:0a:7b:a5:5d:ba:3a:ae:59:05:
         46:ee:08:bb:a3:74:f7:e8:c9:59:ea:e1:e0:a8:61:26:ca:56:
         c3:c0:88:26:68:c9:f5:be:06:a5:fd:3a:e6:79:56:96:c9:de:
         b9:15:d4:7a:70:a1:df:48:e6:9b:e4:95:1f:0a:ff:9a:af:83:
         24:b4:0f:cd:be:9f:75:e2:d7:d9:73:a8:a8:3e:e8:d8:cc:78:
         b1:8b:c0:f5:fa:70:a2:5d:b0:d3:ad:10:4b:bc:36:78:89:1b:
         f2:fb:5a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org