Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa
File:                     3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa (raw, json)
Hash identifier:          oTQ9XsUeTgryZRhzKT7HElA5OBo7LWZ6QfgMKJd9S8s=
Subject key identifier:   59:8C:8F:1D:A6:29:56:C8:85:57:3A:BD:B4:3C:6E:CF:0A:D3:70:22
Certificate issuer:       /CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
Certificate serial:       73398B171E63A7848243BBC7FF8D1599FA142E5C
Authority key identifier: CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa
Signing time:             Thu 04 Apr 2024 16:06:06 +0000
ROA not before:           Thu 04 Apr 2024 16:01:06 +0000
ROA not after:            Thu 03 Apr 2025 16:06:06 +0000
asID:                     28667
IP address blocks:        177.184.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:39:8b:17:1e:63:a7:84:82:43:bb:c7:ff:8d:15:99:fa:14:2e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
        Validity
            Not Before: Apr  4 16:01:06 2024 GMT
            Not After : Apr  3 16:06:06 2025 GMT
        Subject: CN=598C8F1DA62956C885573ABDB43C6ECF0AD37022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d9:fd:cb:71:b7:97:17:2e:1a:d5:af:c0:87:
                    91:ce:b2:2a:b3:5a:21:62:ff:bc:15:d8:51:d0:07:
                    04:60:0b:83:c0:26:02:6d:e9:a2:5a:27:b6:02:43:
                    8f:a9:2d:04:3a:a4:30:d8:40:a1:c3:dc:69:c5:ab:
                    ab:df:91:ea:0e:8a:1a:1c:ca:67:49:f5:ba:54:60:
                    d7:12:80:22:23:c0:04:e9:85:54:cc:86:0a:21:97:
                    ca:aa:6c:7a:d1:1e:6b:30:e3:c7:28:b3:a9:5c:29:
                    01:be:79:ff:d4:e2:9f:8d:8d:75:7b:fb:ee:9a:20:
                    3f:b6:91:94:49:6a:b8:4a:d7:31:9d:70:d0:64:13:
                    65:55:c4:a7:72:b2:77:a1:a5:53:5f:fc:38:21:8e:
                    32:58:cf:41:ac:c2:18:4a:42:16:bc:42:a7:87:20:
                    60:41:a1:6d:e6:03:86:d6:c2:ca:e0:66:bb:2a:a5:
                    3c:3d:68:a7:6d:54:c1:75:d0:dc:19:35:7f:c5:cf:
                    6e:56:06:f5:47:c3:7d:62:53:3c:6d:7f:6f:30:88:
                    03:86:fa:d6:66:a5:69:b9:5f:a6:dc:71:4f:bc:27:
                    f7:a3:ab:61:6d:4a:c7:64:3b:16:df:d4:6f:9a:e5:
                    24:2d:cd:99:69:ac:8b:a8:4e:99:b8:a6:f9:0d:22:
                    92:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8C:8F:1D:A6:29:56:C8:85:57:3A:BD:B4:3C:6E:CF:0A:D3:70:22
            X509v3 Authority Key Identifier:
                keyid:CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         39:47:74:1e:50:d2:3e:73:05:46:a2:88:4c:24:1b:c2:e5:78:
         d5:c0:12:2a:98:32:6f:82:08:1c:a4:0a:0e:99:7a:7d:1b:15:
         63:75:5a:7d:9d:c3:08:1e:41:72:e8:72:26:90:48:36:3b:28:
         6b:c3:21:df:d6:c8:08:17:77:2d:0c:b7:8f:c5:60:d6:f0:04:
         1b:e4:70:ca:96:2b:21:b7:80:03:43:be:f0:44:ee:34:10:b0:
         f4:9d:7c:67:a4:8e:0f:74:04:89:92:29:c2:a3:a4:ad:c2:c0:
         3f:f7:aa:52:cb:2e:5f:e5:52:9e:ca:27:1d:46:13:70:34:ab:
         4e:5d:f3:5a:dd:05:aa:0a:91:59:6d:99:4e:0f:2a:27:39:d2:
         6c:3f:d5:64:22:78:fe:e8:93:51:fe:89:1d:a9:cb:df:75:d3:
         53:cd:08:ba:34:57:47:d2:5e:91:00:de:e1:ed:93:0a:79:18:
         f5:ba:26:28:9c:b2:1f:1e:6d:99:42:7c:65:8d:2a:d8:d7:9d:
         37:a4:49:f7:63:ec:30:3e:ab:5d:5c:e3:7d:21:b7:f1:49:83:
         41:ee:5c:81:ca:21:2b:c4:52:c4:5c:27:db:d7:a5:10:ce:13:
         63:8f:57:c8:38:bf:0b:73:17:25:0d:af:06:b3:c7:a0:f7:d3:
         2a:04:ec:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org