Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137302e38322e35362e302f32322d3234203d3e203238363637.roa
File:                     3137302e38322e35362e302f32322d3234203d3e203238363637.roa (raw, json)
Hash identifier:          dMTUqDGy8xvB8v34psh8GYsan6nR+UiD65UBRncCQNM=
Subject key identifier:   68:FD:54:65:A2:AB:C8:10:E1:25:1F:BE:B9:C8:9E:8F:07:04:00:4A
Certificate issuer:       /CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
Certificate serial:       1C4E469B8ED1A10EE8BD293FDC4BA6F3AF66224C
Authority key identifier: CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137302e38322e35362e302f32322d3234203d3e203238363637.roa
Signing time:             Thu 04 Apr 2024 16:06:03 +0000
ROA not before:           Thu 04 Apr 2024 16:01:03 +0000
ROA not after:            Thu 03 Apr 2025 16:06:03 +0000
asID:                     28667
IP address blocks:        170.82.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4e:46:9b:8e:d1:a1:0e:e8:bd:29:3f:dc:4b:a6:f3:af:66:22:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
        Validity
            Not Before: Apr  4 16:01:03 2024 GMT
            Not After : Apr  3 16:06:03 2025 GMT
        Subject: CN=68FD5465A2ABC810E1251FBEB9C89E8F0704004A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:61:a8:82:2e:c4:18:18:9d:f7:54:fe:3d:
                    45:1e:3a:b2:5c:1e:fb:04:41:8f:d0:f3:d5:87:3c:
                    ec:15:34:03:1b:24:9b:c4:8d:87:b4:72:9f:81:fc:
                    89:ff:6d:55:a6:c7:2c:b2:51:2a:3d:d2:ee:cd:f1:
                    6c:fc:42:ec:6b:dd:86:67:ab:ec:50:91:18:60:6a:
                    88:e2:54:1e:ad:27:ac:ac:32:1f:da:b0:e1:57:04:
                    3e:ad:2e:15:e8:25:83:7c:4a:94:0e:83:65:ce:73:
                    8b:3c:c2:84:97:ab:55:3b:fe:48:dd:2c:b8:54:e7:
                    12:9f:c5:cd:da:35:77:92:2a:ff:d7:71:50:ea:b8:
                    30:70:15:56:f1:b5:24:69:c1:ab:48:79:85:39:6d:
                    a8:f9:d2:b4:12:1b:81:07:2a:1a:f4:ef:d6:37:32:
                    f2:33:54:10:84:64:00:c2:15:03:2c:67:93:e6:21:
                    e9:07:e5:ac:e4:93:0d:7d:5b:f8:1d:de:e2:16:76:
                    14:25:e4:23:60:8d:b1:5b:78:bb:96:24:07:78:66:
                    0d:f6:10:2b:4a:b8:0c:8f:ca:c8:56:82:79:8b:0a:
                    0d:67:5e:da:67:dd:6a:2d:62:8e:90:35:6e:44:61:
                    45:9c:6b:6d:bc:c7:09:0e:60:95:63:2a:24:0d:9b:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:FD:54:65:A2:AB:C8:10:E1:25:1F:BE:B9:C8:9E:8F:07:04:00:4A
            X509v3 Authority Key Identifier:
                keyid:CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137302e38322e35362e302f32322d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:33:f5:a8:9f:79:02:92:4e:42:41:a6:88:a2:a9:58:94:7e:
         64:1a:f3:a8:23:45:73:c8:f9:9a:7f:0e:03:37:c1:4d:fe:53:
         82:83:b8:30:ce:f1:97:da:53:c2:7e:15:fc:c1:db:d2:ff:5f:
         94:f2:d0:ef:90:b8:bc:9f:18:e1:8a:80:4c:d3:71:0c:32:00:
         8f:57:19:7f:f5:8c:cc:12:69:f0:22:88:c2:0b:68:b2:fe:9f:
         24:09:d4:4f:92:96:a0:27:0a:14:4f:1c:9a:d4:22:dc:fc:7b:
         c9:02:c1:72:67:65:9b:3f:84:03:29:b2:df:0f:16:90:62:50:
         24:26:db:f8:16:cc:3d:dc:be:7c:e7:9a:2c:fc:6d:c1:b1:82:
         db:57:72:4e:02:e9:e9:3a:2e:0c:6a:2b:da:c7:a1:7f:14:0c:
         ea:17:15:96:17:54:89:ba:e4:41:2c:78:e4:a8:a4:d0:c2:83:
         88:c1:84:73:81:68:22:05:07:ff:24:95:2c:85:e2:06:d5:35:
         83:c4:ff:18:a2:d2:e3:32:46:e3:38:85:73:45:04:1f:76:a1:
         99:e8:24:9f:b0:7e:89:e3:b3:69:90:05:b8:27:da:d1:2a:f1:
         12:4e:ff:c9:a8:16:05:6b:36:54:fc:c0:14:f0:16:42:12:fe:
         48:f0:84:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org