Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137372e37312e302e302f32302d3234203d3e203238363637.roa
File:                     3137372e37312e302e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          csKzyCPSpJJKDs8CPJoX4gatDLOEgKbvsqxDX0R2Xlc=
Subject key identifier:   C9:7E:62:C2:2E:32:41:57:38:22:53:B7:80:A7:36:EF:06:50:B3:96
Certificate issuer:       /CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
Certificate serial:       30E65F167FC5E55ACE262DD21A6DCB2F8332F52B
Authority key identifier: CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137372e37312e302e302f32302d3234203d3e203238363637.roa
Signing time:             Thu 04 Apr 2024 16:06:04 +0000
ROA not before:           Thu 04 Apr 2024 16:01:04 +0000
ROA not after:            Thu 03 Apr 2025 16:06:04 +0000
asID:                     28667
IP address blocks:        177.71.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e6:5f:16:7f:c5:e5:5a:ce:26:2d:d2:1a:6d:cb:2f:83:32:f5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
        Validity
            Not Before: Apr  4 16:01:04 2024 GMT
            Not After : Apr  3 16:06:04 2025 GMT
        Subject: CN=C97E62C22E324157382253B780A736EF0650B396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:75:d0:e1:66:ed:bd:f3:09:81:40:6b:2f:
                    d6:4c:15:b3:20:17:fa:1c:9e:21:5d:ce:a8:e0:41:
                    62:64:44:71:16:76:bd:28:65:10:d3:d8:a9:16:8a:
                    33:31:fb:1a:84:ae:b3:b9:0d:55:11:8c:c8:f8:33:
                    81:16:c4:c4:82:c8:e7:38:4f:9a:af:e5:b8:b8:12:
                    15:02:99:d8:6e:9a:ec:2b:c1:36:fb:e6:f7:8d:ad:
                    e5:98:69:71:e6:1e:ea:ad:03:2d:60:ba:31:4a:60:
                    1b:69:55:f8:78:6b:db:4b:7f:a6:97:9a:93:87:a2:
                    47:2d:d3:75:bc:c7:98:f3:44:cf:8b:3a:34:f7:cc:
                    44:62:78:e6:28:e2:e6:1c:65:a2:ef:66:ca:e1:18:
                    d0:e8:84:76:53:a4:00:36:df:c9:fd:38:15:92:32:
                    de:3b:b5:44:7b:52:92:01:4e:84:aa:dd:25:a7:e5:
                    8f:6e:45:c7:b1:d1:db:d3:fb:a5:29:b6:8d:26:bd:
                    fb:6c:0d:e1:f4:57:84:78:2c:ae:b2:61:32:89:3a:
                    e7:17:04:ab:ce:29:e9:4f:61:dc:fc:60:99:cb:1d:
                    ef:d6:14:87:2c:4a:92:7e:d6:37:ec:b2:37:a4:ef:
                    fe:fc:ba:31:f0:ab:f5:61:49:60:fe:6b:01:60:a8:
                    42:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7E:62:C2:2E:32:41:57:38:22:53:B7:80:A7:36:EF:06:50:B3:96
            X509v3 Authority Key Identifier:
                keyid:CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137372e37312e302e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:0d:0a:3d:12:0b:f0:f6:9f:ed:2f:4d:0e:53:ad:49:31:a9:
         fc:48:8d:05:c2:72:47:c5:86:e6:fc:03:a2:87:85:d8:76:e2:
         73:9f:f6:51:8b:90:63:15:3b:6a:a4:f6:2b:15:f4:2c:3f:0e:
         cd:82:4c:49:be:9a:ea:84:ee:8d:1c:45:02:25:1f:52:15:ad:
         3e:fb:33:cf:3c:7b:66:1e:be:60:37:ba:dd:3a:66:3b:1d:cf:
         12:04:78:c0:4b:0a:23:eb:63:a6:3e:cd:e0:28:dc:c7:e6:c9:
         62:10:a6:7c:5d:c0:1f:16:db:3d:0b:96:cc:c5:b4:56:90:dc:
         7f:71:93:9a:c5:37:47:3f:1c:81:c8:1a:37:d4:e5:26:7c:bb:
         67:bb:42:89:32:04:a1:f0:18:63:73:fb:27:a1:c9:83:1b:62:
         f7:52:c7:1d:75:c9:8b:79:8a:82:40:71:58:90:55:94:c0:a7:
         ee:19:94:7f:c1:8c:e7:99:88:1e:e1:9c:a8:c6:7f:d8:3b:4d:
         f3:1f:f6:28:af:26:f3:79:68:11:f6:bf:37:18:07:3c:ff:96:
         5e:ec:1e:a7:6a:92:4f:91:b5:0a:20:a3:2a:17:19:cd:80:d8:
         fe:55:b7:06:7f:a9:b2:1b:64:18:1e:ff:24:cb:5c:80:8d:ff:
         20:fd:a2:7e
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUMOZfFn/F5VrOJi3SGm3LL4My9SswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FFREMxOEFGNjYwRDU1QjVEM0FCOTI1QTEzNzFFNTRF
RURENzUxMDAeFw0yNDA0MDQxNjAxMDRaFw0yNTA0MDMxNjA2MDRaMDMxMTAvBgNV
BAMTKEM5N0U2MkMyMkUzMjQxNTczODIyNTNCNzgwQTczNkVGMDY1MEIzOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0enXQ4WbtvfMJgUBrL9ZMFbMg
F/ocniFdzqjgQWJkRHEWdr0oZRDT2KkWijMx+xqErrO5DVURjMj4M4EWxMSCyOc4
T5qv5bi4EhUCmdhumuwrwTb75veNreWYaXHmHuqtAy1gujFKYBtpVfh4a9tLf6aX
mpOHokct03W8x5jzRM+LOjT3zERieOYo4uYcZaLvZsrhGNDohHZTpAA238n9OBWS
Mt47tUR7UpIBToSq3SWn5Y9uRcex0dvT+6Upto0mvftsDeH0V4R4LK6yYTKJOucX
BKvOKelPYdz8YJnLHe/WFIcsSpJ+1jfssjek7/78ujHwq/VhSWD+awFgqEKpAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUyX5iwi4yQVc4IlO3gKc27wZQs5YwHwYDVR0j
BBgwFoAUyu3BivZg1VtdOrkloTceVO7ddRAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGFGeXdxTEt0WmZFWUxVNmZtU3lRaVdjNFNXalU0UUU0UjRTSkJqUXhO
OGgvMS9DQUVEQzE4QUY2NjBENTVCNUQzQUI5MjVBMTM3MUU1NEVFREQ3NTEwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NBRURDMThBRjY2MEQ1NUI1
RDNBQjkyNUExMzcxRTU0RUVERDc1MTAuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RhRnl3cUxLdFpmRVlMVTZmbVN5UWlXYzRTV2pVNFFFNFI0U0pCalF4TjhoLzEv
MzEzNzM3MmUzNzMxMmUzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzgzNjM2
Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBASxRwAwDQYJKoZIhvcNAQELBQADggEBABgNCj0SC/D2n+0v
TQ5TrUkxqfxIjQXCckfFhub8A6KHhdh24nOf9lGLkGMVO2qk9isV9Cw/Ds2CTEm+
muqE7o0cRQIlH1IVrT77M888e2YevmA3ut06ZjsdzxIEeMBLCiPrY6Y+zeAo3Mfm
yWIQpnxdwB8W2z0LlszFtFaQ3H9xk5rFN0c/HIHIGjfU5SZ8u2e7QokyBKHwGGNz
+yehyYMbYvdSxx11yYt5ioJAcViQVZTAp+4ZlH/BjOeZiB7hnKjGf9g7TfMf9iiv
JvN5aBH2vzcYBzz/ll7sHqdqkk+RtQogoyoXGc2A2P5VtwZ/qbIbZBge/yTLXICN
/yD9on4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org