Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa
File:                     3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa (raw, json)
Hash identifier:          ko2qNZOSsV0OnPhLltPAQsgNZoiJ0xZRY+fK5onsook=
Subject key identifier:   BB:B4:97:3B:7F:10:37:B0:48:30:30:46:69:3E:26:82:9C:49:05:9C
Certificate issuer:       /CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
Certificate serial:       164F2214C458A78FEEA731BB752F0F8D59169566
Authority key identifier: CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa
Signing time:             Thu 04 Apr 2024 16:06:03 +0000
ROA not before:           Thu 04 Apr 2024 16:01:03 +0000
ROA not after:            Thu 03 Apr 2025 16:06:03 +0000
asID:                     28667
IP address blocks:        187.121.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4f:22:14:c4:58:a7:8f:ee:a7:31:bb:75:2f:0f:8d:59:16:95:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
        Validity
            Not Before: Apr  4 16:01:03 2024 GMT
            Not After : Apr  3 16:06:03 2025 GMT
        Subject: CN=BBB4973B7F1037B048303046693E26829C49059C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2b:ad:66:e1:5a:b2:ea:ee:f6:5c:42:e0:6b:
                    dc:e1:10:39:a5:ef:f5:d8:9a:8a:0a:6d:ec:0b:cb:
                    fc:3f:33:61:6e:1d:2c:da:81:c2:e8:80:44:62:87:
                    b0:07:3b:51:da:ef:91:d9:16:4f:b8:f7:6f:25:2b:
                    35:f9:c6:09:71:d9:17:c9:d5:77:92:75:89:db:2d:
                    60:26:23:71:a5:c3:0d:35:97:54:7d:7c:8c:77:4b:
                    a9:d0:4b:a7:18:20:11:b7:0b:cd:68:cd:69:57:c6:
                    17:d8:04:c5:28:7d:e1:81:a3:01:32:2e:65:cb:52:
                    be:27:dd:9e:87:22:b2:13:f0:56:f3:b8:ab:e8:8e:
                    56:1d:c9:87:f0:3d:7d:eb:ac:bd:3a:46:8d:93:81:
                    09:cc:05:80:68:4e:d3:2a:10:a4:d4:dd:86:55:64:
                    0d:7e:f6:3f:c6:ac:a1:6b:a0:2d:93:64:3d:4d:72:
                    7e:a9:7f:80:93:41:c2:0c:3c:b2:b9:69:de:f1:3f:
                    0c:0b:af:f9:4b:85:5e:75:3f:a6:df:fd:ca:e9:fe:
                    d9:f9:16:e2:93:de:07:bd:bb:3a:3e:1e:05:7e:32:
                    f8:fb:f1:0c:f1:91:29:ac:2d:ab:51:03:26:a6:b8:
                    7a:75:ec:76:c5:4b:2e:40:f7:9f:63:d9:5d:4e:c1:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B4:97:3B:7F:10:37:B0:48:30:30:46:69:3E:26:82:9C:49:05:9C
            X509v3 Authority Key Identifier:
                keyid:CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3138372e3132312e3139322e302f31392d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.121.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         02:18:12:1f:72:18:4f:6f:b7:c9:6d:32:23:5e:8e:98:2f:7d:
         95:e6:42:6d:cf:28:2b:87:ef:ea:ee:44:a1:91:8a:aa:ed:17:
         ef:6e:b0:2a:0f:4c:1c:f1:88:57:9d:df:14:90:fd:22:63:01:
         6d:ef:af:f6:98:39:8b:56:32:b6:c6:52:f1:c2:f3:21:43:e2:
         3b:af:f5:b4:87:11:cd:c8:4d:73:5e:be:10:0a:0d:3b:d7:ef:
         7a:6e:d5:0d:92:66:9d:47:90:06:a6:74:1c:34:22:f1:d5:ee:
         f2:71:7e:8c:97:17:28:01:bc:a0:c5:c2:f2:6f:8a:b3:1c:c0:
         bb:30:34:7a:0b:2f:21:53:d0:5a:e1:6a:d0:57:d5:a5:bd:ff:
         a0:c2:d4:ef:29:11:e5:0d:e0:94:6c:bb:ae:75:10:0b:6c:99:
         a5:37:bb:0d:f2:bc:34:29:c0:88:24:df:95:43:34:4d:62:fd:
         9c:9d:f2:65:10:1b:e4:69:5e:74:dd:d1:28:a9:81:15:0f:e9:
         87:de:e2:ed:c4:fc:31:50:89:12:18:24:12:b4:9f:f3:01:65:
         54:2d:b6:92:52:29:c9:80:3c:49:8c:1d:4f:dd:a9:07:90:42:
         48:7c:1e:30:ac:7d:37:7c:06:92:e9:95:7d:37:de:f7:9c:6d:
         01:c7:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org