Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137372e32312e3139322e302f32302d3234203d3e203238363637.roa
File:                     3137372e32312e3139322e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          38nRmJ/6IknlKeY8ChFMyoLhAq8mHCmAYEomqmjWP54=
Subject key identifier:   2F:3E:2B:9A:E5:4B:86:45:5A:05:60:48:CB:FD:87:9B:74:CB:EF:B5
Certificate issuer:       /CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
Certificate serial:       6EBD853BD6B1D56A26F58BA14BA9BE609ABF301F
Authority key identifier: CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137372e32312e3139322e302f32302d3234203d3e203238363637.roa
Signing time:             Thu 04 Apr 2024 16:06:05 +0000
ROA not before:           Thu 04 Apr 2024 16:01:05 +0000
ROA not after:            Thu 03 Apr 2025 16:06:05 +0000
asID:                     28667
IP address blocks:        177.21.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:bd:85:3b:d6:b1:d5:6a:26:f5:8b:a1:4b:a9:be:60:9a:bf:30:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
        Validity
            Not Before: Apr  4 16:01:05 2024 GMT
            Not After : Apr  3 16:06:05 2025 GMT
        Subject: CN=2F3E2B9AE54B86455A056048CBFD879B74CBEFB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:c8:c3:e2:c3:f4:af:47:cd:e0:a9:c3:92:
                    9e:64:5e:84:9a:38:0b:63:3e:fb:f5:98:c5:07:2e:
                    24:00:0d:4a:6a:03:7d:ce:a1:5d:43:32:6b:80:63:
                    a4:22:26:55:f1:3e:6a:bf:7a:e0:4c:68:6b:fb:b1:
                    43:c7:de:2c:fb:4e:41:52:f9:db:07:19:2e:8f:bb:
                    5a:7d:38:fa:42:97:18:e7:06:05:66:2c:ec:d4:f2:
                    79:5a:42:0b:59:77:23:77:f3:bd:7d:f8:9f:cd:b0:
                    92:53:d5:7f:e4:8c:ca:93:00:fc:d1:2a:3c:04:bb:
                    a5:3a:53:8a:1d:a4:a4:c0:a0:2d:dd:e8:68:51:ba:
                    65:23:24:30:db:5e:12:7c:50:a6:61:b6:71:11:de:
                    d0:80:b0:74:7a:17:16:5a:25:db:a4:47:26:ce:da:
                    dc:c8:4d:48:0c:ba:bc:01:41:c1:35:cd:9a:19:23:
                    fc:e3:18:de:4b:fe:d7:67:00:11:cf:6e:35:11:a3:
                    41:3a:9d:20:39:39:cd:bc:d0:9c:63:f4:64:18:53:
                    0a:ea:2c:c6:1f:cc:9b:9e:9d:d7:5f:a1:14:a2:d9:
                    e6:fb:b0:b3:c6:69:ad:2f:75:8d:47:dd:74:ce:41:
                    d3:95:99:4b:8b:9e:f2:2b:32:0c:ae:81:73:87:e6:
                    10:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:3E:2B:9A:E5:4B:86:45:5A:05:60:48:CB:FD:87:9B:74:CB:EF:B5
            X509v3 Authority Key Identifier:
                keyid:CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137372e32312e3139322e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.21.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:91:0c:58:f7:f5:86:6c:b7:ce:61:fe:ce:15:9c:75:9a:eb:
         a8:ba:7f:56:4f:cc:a6:a2:f5:ad:07:30:cc:2a:87:b7:a7:f6:
         f0:57:1e:ba:52:50:5f:60:a9:60:23:0e:41:8e:7f:43:69:df:
         4e:c6:0a:1c:28:65:8f:e4:44:74:ca:e2:92:84:0a:8e:14:2c:
         2a:72:04:c2:9e:8f:6a:a3:68:aa:5b:0a:08:26:0a:c5:d3:9b:
         25:b5:32:4e:30:ae:60:8d:39:15:b7:9f:b8:3a:78:eb:ce:6e:
         7a:27:38:46:51:bc:63:a8:7a:54:3c:2e:53:a6:d2:df:a4:da:
         06:0a:b7:b6:3e:ca:6c:b7:47:0d:4f:31:d0:3f:23:ef:fd:cf:
         45:de:04:e6:de:0d:a0:45:36:ac:e0:00:ed:46:79:f0:50:13:
         71:32:6e:85:ce:6d:21:13:af:2c:ef:dd:a8:1e:3a:bf:0c:de:
         f6:ea:91:4d:1e:a5:03:af:90:35:fe:0a:8b:56:45:91:cf:07:
         8c:30:f5:6c:33:98:26:c3:7d:85:3c:7c:02:bc:ba:34:f6:97:
         aa:9b:ae:43:ab:af:96:88:c3:db:22:8e:1b:e3:6e:31:5b:94:
         3e:05:82:e6:0d:53:11:fd:ca:36:28:f1:58:08:87:74:27:67:
         ce:21:dc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org