Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137372e382e3230382e302f32312d3234203d3e203238363637.roa
File:                     3137372e382e3230382e302f32312d3234203d3e203238363637.roa (raw, json)
Hash identifier:          sTvBJz+2KTjgoB+jpCf4zFvXUZKDLTe2VXcDodabXKc=
Subject key identifier:   83:4E:6F:4E:86:B0:58:0C:F1:E2:5F:E9:09:DE:FB:02:DB:EA:F9:F2
Certificate issuer:       /CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
Certificate serial:       09EF48DDF70508D3CA137DD9BEA23D784CD9699F
Authority key identifier: CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137372e382e3230382e302f32312d3234203d3e203238363637.roa
Signing time:             Thu 04 Apr 2024 16:06:02 +0000
ROA not before:           Thu 04 Apr 2024 16:01:02 +0000
ROA not after:            Thu 03 Apr 2025 16:06:02 +0000
asID:                     28667
IP address blocks:        177.8.208.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ef:48:dd:f7:05:08:d3:ca:13:7d:d9:be:a2:3d:78:4c:d9:69:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
        Validity
            Not Before: Apr  4 16:01:02 2024 GMT
            Not After : Apr  3 16:06:02 2025 GMT
        Subject: CN=834E6F4E86B0580CF1E25FE909DEFB02DBEAF9F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:61:a8:90:cf:59:0f:10:1a:ae:e5:35:85:0a:
                    ba:3b:be:73:15:7a:ea:75:be:ab:a8:49:94:80:af:
                    3e:ea:2e:b3:36:ab:8e:6b:2b:5a:f4:cb:2c:d8:86:
                    39:38:ec:16:e2:80:46:05:bb:ff:7c:46:66:1c:a6:
                    d6:78:e8:28:2e:dd:9c:8e:ed:69:92:92:11:81:ec:
                    7d:35:9e:75:a0:f5:67:c8:3b:9d:70:ab:2d:16:f4:
                    52:cf:09:74:82:c8:44:bf:96:ac:01:91:4e:00:89:
                    9a:60:80:ea:11:e9:85:21:17:51:6f:bf:57:4b:75:
                    8d:8c:95:96:b9:dc:a4:90:44:05:5b:34:9e:3e:ce:
                    cd:b3:67:91:e5:92:eb:cc:41:f5:fc:7d:49:01:90:
                    2e:42:72:86:63:90:fd:35:ba:40:3b:f6:46:d1:6c:
                    c1:a4:03:ee:0e:b8:90:99:fe:4b:a0:7b:a5:ac:13:
                    fb:77:a1:ff:8e:ed:2b:3e:4f:2a:6f:a2:b6:75:8d:
                    1e:6d:a5:c6:b1:f5:fa:d7:b9:9a:ee:8c:cc:10:e6:
                    f6:bf:8f:0a:81:10:dc:07:13:42:60:bc:53:c3:60:
                    fc:c5:1c:78:9a:2b:5d:ba:03:4a:ad:b3:fa:03:2e:
                    89:aa:f6:c9:eb:2c:13:33:5a:97:c7:e9:a5:f1:4f:
                    6e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4E:6F:4E:86:B0:58:0C:F1:E2:5F:E9:09:DE:FB:02:DB:EA:F9:F2
            X509v3 Authority Key Identifier:
                keyid:CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3137372e382e3230382e302f32312d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ba:1e:c2:12:c2:de:b5:ec:06:34:b4:30:16:55:70:82:78:88:
         21:fd:68:db:72:37:90:bb:a1:c5:bd:3a:a4:25:bd:04:35:68:
         da:1e:69:c9:96:ad:32:78:98:4e:34:25:6a:2a:bf:8f:c3:da:
         b7:8d:59:45:eb:33:4a:3a:1f:6a:65:81:87:5b:f2:98:e6:e5:
         3e:07:b7:ce:8f:9f:14:22:57:e2:64:9d:5a:6c:0b:b4:3e:d2:
         65:fb:2e:93:fd:0f:e9:81:80:a5:57:9e:d3:1a:c9:18:5b:c0:
         16:31:c3:75:4e:9f:da:2e:ea:4c:09:da:ff:a1:b2:4c:31:83:
         70:ec:2d:09:71:fb:d2:5a:64:10:90:15:6f:11:99:e1:c9:4d:
         de:db:a5:9d:a6:80:e0:b9:3f:50:a8:c8:f4:aa:a1:2e:92:a5:
         31:1f:1e:01:68:d3:04:b0:81:e1:44:bd:f4:ff:9c:94:eb:bb:
         e5:1f:42:b8:31:b0:44:79:d9:26:1f:ce:84:51:44:7f:17:fd:
         9e:ff:27:37:0c:7a:56:30:0b:f8:f2:8d:c0:30:e3:b4:a1:13:
         8f:67:10:b9:09:d6:c8:75:56:07:1f:78:01:b3:91:c7:27:8a:
         c6:2e:7e:d6:df:e5:a1:9f:49:ea:ba:28:68:bb:9e:60:95:da:
         6f:e4:ef:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org