Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3138362e3233362e39362e302f31392d3234203d3e203238363637.roa
File:                     3138362e3233362e39362e302f31392d3234203d3e203238363637.roa (raw, json)
Hash identifier:          fEKanpNpsaIZxBZYeOp4Lh8zeGTSYKmv5EAFszh6ZCg=
Subject key identifier:   78:D0:3F:48:6A:5E:94:E4:18:31:B8:3E:DD:1A:3F:52:32:AA:BD:45
Certificate issuer:       /CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
Certificate serial:       2DF2837BF50EF763A3F11E3FF329AF58067865D1
Authority key identifier: CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3138362e3233362e39362e302f31392d3234203d3e203238363637.roa
Signing time:             Thu 04 Apr 2024 16:06:03 +0000
ROA not before:           Thu 04 Apr 2024 16:01:03 +0000
ROA not after:            Thu 03 Apr 2025 16:06:03 +0000
asID:                     28667
IP address blocks:        186.236.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:f2:83:7b:f5:0e:f7:63:a3:f1:1e:3f:f3:29:af:58:06:78:65:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
        Validity
            Not Before: Apr  4 16:01:03 2024 GMT
            Not After : Apr  3 16:06:03 2025 GMT
        Subject: CN=78D03F486A5E94E41831B83EDD1A3F5232AABD45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:46:e6:98:87:9f:c3:0a:52:27:a5:6d:f7:be:
                    46:a6:6b:63:20:4b:aa:39:9d:d4:5c:4f:cb:3f:a9:
                    3d:df:b1:e6:4d:20:22:57:74:77:0b:fc:d0:19:65:
                    5e:cf:72:e0:3a:71:f1:77:a4:1f:65:94:a5:98:91:
                    26:eb:ce:a2:c8:84:b7:ec:21:bc:df:a8:99:d2:88:
                    33:ee:2d:6d:a4:4a:39:48:46:16:72:73:9f:99:b9:
                    55:00:11:c9:35:30:23:de:43:36:b8:69:6e:10:4f:
                    53:0f:ff:0c:ae:88:4f:3d:37:b8:85:45:e3:54:98:
                    06:23:14:c5:20:f4:46:35:36:97:ab:42:62:20:cb:
                    3b:b6:16:a1:21:75:32:9c:01:85:85:f5:c9:5c:96:
                    5e:03:b0:78:4d:e5:44:18:2e:40:13:03:60:6b:c3:
                    ed:3a:2c:9b:4b:77:6a:3a:17:fc:85:ad:5f:11:d9:
                    7a:74:cb:26:f7:b2:13:dd:79:88:54:67:36:8f:37:
                    c5:ff:6e:74:e8:fa:9f:76:94:90:e3:f6:91:c5:51:
                    05:4b:6c:3d:a4:47:ff:bd:10:ec:9a:73:00:28:48:
                    e6:1e:49:b9:c0:8e:57:40:46:01:45:b3:08:a0:37:
                    81:1c:81:bc:4b:b3:0a:7e:28:57:61:5c:b6:a3:a9:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D0:3F:48:6A:5E:94:E4:18:31:B8:3E:DD:1A:3F:52:32:AA:BD:45
            X509v3 Authority Key Identifier:
                keyid:CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3138362e3233362e39362e302f31392d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.236.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         08:66:9b:d4:e2:6f:a6:5b:e9:2d:76:80:69:79:21:15:fe:d8:
         09:29:20:c8:71:75:fc:11:53:5f:90:01:57:a3:05:f8:9c:d3:
         c1:3f:23:fb:ac:b9:13:48:ad:24:9e:c6:ae:55:d1:61:7f:64:
         86:9c:68:3b:ac:c5:bc:61:9b:21:76:3a:f3:e3:44:19:b5:b1:
         c4:7a:bd:a9:48:4c:88:75:58:a7:61:d5:6f:80:0a:b6:7f:3f:
         4f:f4:48:b8:5f:a1:8d:36:64:48:f2:4b:4c:14:fb:0b:67:f1:
         79:1b:9e:32:f6:de:d7:3a:d4:5a:02:b5:ee:80:90:25:0a:ee:
         f0:83:7d:f8:07:22:88:f6:15:9a:56:61:7c:78:87:9e:7f:85:
         57:34:b4:dd:d7:32:fb:e4:81:9d:16:c6:fc:2b:bb:87:28:db:
         c2:e0:a2:c7:95:39:dd:b7:73:4b:74:0d:de:c6:59:cc:3c:d6:
         05:17:32:75:83:0d:52:b6:e9:26:82:28:bd:ca:59:4a:b7:d4:
         a0:6e:67:e8:36:0f:f0:e8:7b:af:99:01:cf:65:5f:8f:7d:1e:
         20:86:6d:27:a6:52:da:2e:5c:9f:d1:cd:16:a4:35:4f:b9:67:
         e1:72:df:29:2b:40:f8:6a:ea:74:5e:c4:a1:0f:7e:64:dc:74:
         69:9c:8c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org