Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137372e3130372e302e302f32302d3234203d3e203238363637.roa
File:                     3137372e3130372e302e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          EKiIERaHUkfypppsDeQpNbEvEZjIkaPNBi73dRNGVrY=
Subject key identifier:   BC:E9:40:0F:C6:46:D6:B9:8C:13:F1:73:70:76:30:58:CB:BE:52:09
Certificate issuer:       /CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
Certificate serial:       558C1F94C4A25184E185E2D50A8DD7A8836DA3D5
Authority key identifier: CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137372e3130372e302e302f32302d3234203d3e203238363637.roa
Signing time:             Thu 04 Apr 2024 16:06:08 +0000
ROA not before:           Thu 04 Apr 2024 16:01:08 +0000
ROA not after:            Thu 03 Apr 2025 16:06:08 +0000
asID:                     28667
IP address blocks:        177.107.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8c:1f:94:c4:a2:51:84:e1:85:e2:d5:0a:8d:d7:a8:83:6d:a3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
        Validity
            Not Before: Apr  4 16:01:08 2024 GMT
            Not After : Apr  3 16:06:08 2025 GMT
        Subject: CN=BCE9400FC646D6B98C13F17370763058CBBE5209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:07:5b:39:12:7e:3f:e8:cc:8c:a6:e8:57:
                    67:dc:c1:30:67:1d:91:3f:e6:72:9d:1f:60:bb:bc:
                    48:97:58:11:44:02:c4:3d:d9:31:b1:7e:12:be:ab:
                    8a:f6:0f:01:43:36:83:63:d4:37:f5:e0:01:58:27:
                    8d:d3:9a:00:20:ce:5c:17:e7:4a:e1:8f:15:bf:f5:
                    c9:f1:69:e8:be:5d:90:e0:14:7b:76:18:8e:d0:7f:
                    4a:6b:c4:2c:a4:6f:84:be:6b:5e:33:7c:5a:93:a9:
                    a8:8e:b3:e1:3b:e7:5f:62:c2:64:64:be:51:a5:71:
                    e1:74:cc:54:32:4b:f1:ac:8e:e4:ed:94:0d:55:5b:
                    7e:1c:74:4e:b0:43:4a:a6:92:24:ca:b7:96:bd:db:
                    37:36:af:47:75:a3:e4:1b:42:3a:ef:10:d5:76:4e:
                    d9:19:cd:fe:ae:e4:1e:e0:03:89:d8:67:ee:8c:41:
                    d2:4b:4d:c7:3f:3f:4c:a1:4a:c6:2f:81:6a:c2:87:
                    6c:b3:dc:52:99:09:9f:49:f8:bd:a7:43:64:53:d1:
                    38:df:e3:1f:36:8e:c5:7a:32:47:4e:9e:13:81:d8:
                    86:83:cc:be:cd:b2:42:19:67:f4:fc:fd:3b:4b:46:
                    03:13:ff:af:57:8f:6c:18:2a:d8:11:83:7b:55:b2:
                    4a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E9:40:0F:C6:46:D6:B9:8C:13:F1:73:70:76:30:58:CB:BE:52:09
            X509v3 Authority Key Identifier:
                keyid:CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137372e3130372e302e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:4a:98:33:81:bf:ed:08:5a:60:a3:60:dd:d7:43:a9:78:29:
         a8:8b:a3:76:10:c9:d5:0c:75:10:88:a0:40:d7:02:5a:d8:0a:
         58:4e:2f:07:bc:67:96:bd:91:98:82:2b:c1:a2:d5:87:4b:98:
         51:38:06:bb:ba:0f:34:57:83:23:87:9d:f6:3d:c1:74:d2:30:
         3d:68:87:21:a8:a1:67:57:4f:17:b6:76:87:a2:99:f0:f7:39:
         11:ab:dd:71:e4:f5:aa:3a:25:48:0e:db:4c:cf:97:cd:22:1e:
         53:d3:b5:d7:c7:20:0f:c5:fe:2c:2d:c8:3e:fb:32:31:ca:f7:
         6c:fe:d2:5b:66:48:8c:95:5b:6b:06:38:73:8a:ac:e8:33:b5:
         0b:55:75:b7:a0:41:49:80:52:0d:a3:44:18:e8:89:2a:7f:c0:
         9d:91:de:65:32:73:e8:e5:ed:b5:24:54:22:43:54:d0:89:b4:
         af:b4:73:d0:f0:82:3d:9d:42:d8:69:fe:10:f0:2c:09:79:d0:
         4f:1b:4d:7b:2e:25:ca:b4:ef:23:24:7d:d9:15:f0:4c:16:c1:
         30:aa:fa:d8:7d:ff:c0:fa:f1:00:d1:36:cb:82:d7:6d:bf:40:
         9d:36:f4:d6:8a:b2:62:54:66:dc:ec:c2:17:74:85:fe:3f:e8:
         70:e2:bb:4c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUVYwflMSiUYThheLVCo3XqINto9UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FFREMxOEFGNjYwRDU1QjVEM0FCOTI1QTEzNzFFNTRF
RURENzUxMDAeFw0yNDA0MDQxNjAxMDhaFw0yNTA0MDMxNjA2MDhaMDMxMTAvBgNV
BAMTKEJDRTk0MDBGQzY0NkQ2Qjk4QzEzRjE3MzcwNzYzMDU4Q0JCRTUyMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPwdbORJ+P+jMjKboV2fcwTBn
HZE/5nKdH2C7vEiXWBFEAsQ92TGxfhK+q4r2DwFDNoNj1Df14AFYJ43TmgAgzlwX
50rhjxW/9cnxaei+XZDgFHt2GI7Qf0prxCykb4S+a14zfFqTqaiOs+E7519iwmRk
vlGlceF0zFQyS/GsjuTtlA1VW34cdE6wQ0qmkiTKt5a92zc2r0d1o+QbQjrvENV2
TtkZzf6u5B7gA4nYZ+6MQdJLTcc/P0yhSsYvgWrCh2yz3FKZCZ9J+L2nQ2RT0Tjf
4x82jsV6MkdOnhOB2IaDzL7NskIZZ/T8/TtLRgMT/69Xj2wYKtgRg3tVskqHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUvOlAD8ZG1rmME/FzcHYwWMu+UgkwHwYDVR0j
BBgwFoAUyu3BivZg1VtdOrkloTceVO7ddRAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFGeXdxTEt0WmZFWUxVNmZtU3lRaVdjNFNXalU0UUU0UjRTSkJqUXhO
OGgvMS9DQUVEQzE4QUY2NjBENTVCNUQzQUI5MjVBMTM3MUU1NEVFREQ3NTEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRURDMThBRjY2MEQ1NUI1
RDNBQjkyNUExMzcxRTU0RUVERDc1MTAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RhRnl3cUxLdFpmRVlMVTZmbVN5UWlXYzRTV2pVNFFFNFI0U0pCalF4TjhoLzEv
MzEzNzM3MmUzMTMwMzcyZTMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM2
MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBLFrADANBgkqhkiG9w0BAQsFAAOCAQEAi0qYM4G/7Qha
YKNg3ddDqXgpqIujdhDJ1Qx1EIigQNcCWtgKWE4vB7xnlr2RmIIrwaLVh0uYUTgG
u7oPNFeDI4ed9j3BdNIwPWiHIaihZ1dPF7Z2h6KZ8Pc5EavdceT1qjolSA7bTM+X
zSIeU9O118cgD8X+LC3IPvsyMcr3bP7SW2ZIjJVbawY4c4qs6DO1C1V1t6BBSYBS
DaNEGOiJKn/AnZHeZTJz6OXttSRUIkNU0Im0r7Rz0PCCPZ1C2Gn+EPAsCXnQTxtN
ey4lyrTvIyR92RXwTBbBMKr62H3/wPrxANE2y4LXbb9AnTb01oqyYlRm3OzCF3SF
/j/ocOK7TA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org