Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3138372e31392e38302e302f32302d3234203d3e203238363637.roa
File:                     3138372e31392e38302e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          2itGTbzaMZcBXyhMCh7kLUI9j6goQHB/pIV5t/itGjo=
Subject key identifier:   19:6C:B7:2A:A7:BB:AB:20:86:03:36:7D:6D:1B:54:89:11:13:82:01
Certificate issuer:       /CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
Certificate serial:       35B90BD7232EB2C02ACEE2AF388C8F43CCCB2B5F
Authority key identifier: CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3138372e31392e38302e302f32302d3234203d3e203238363637.roa
Signing time:             Thu 04 Apr 2024 16:06:06 +0000
ROA not before:           Thu 04 Apr 2024 16:01:06 +0000
ROA not after:            Thu 03 Apr 2025 16:06:06 +0000
asID:                     28667
IP address blocks:        187.19.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b9:0b:d7:23:2e:b2:c0:2a:ce:e2:af:38:8c:8f:43:cc:cb:2b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
        Validity
            Not Before: Apr  4 16:01:06 2024 GMT
            Not After : Apr  3 16:06:06 2025 GMT
        Subject: CN=196CB72AA7BBAB208603367D6D1B548911138201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7c:d5:ba:af:cb:97:1e:20:4f:c6:54:66:24:
                    0d:21:90:46:b8:ac:2f:dd:5c:16:2e:96:d0:75:c2:
                    cd:da:9e:91:d8:eb:eb:9c:72:3c:88:d8:59:79:28:
                    21:be:6c:36:38:cd:ce:d5:12:4d:ef:f3:35:73:df:
                    6f:88:44:71:21:b1:a3:60:00:64:57:1e:62:41:da:
                    2f:5c:ff:84:f1:e0:5a:6f:50:0d:8f:07:af:47:72:
                    60:2e:66:e1:25:17:9d:39:8e:cf:3c:d9:fc:98:af:
                    49:12:19:b4:12:c1:99:e7:62:53:e6:b8:f5:21:97:
                    ee:43:b5:3c:5d:16:04:6e:53:62:75:ac:ba:90:ff:
                    83:28:15:fa:da:60:85:36:ef:28:2b:23:19:f9:d7:
                    79:e3:83:a2:11:26:29:80:78:a9:35:69:f0:ef:4b:
                    1b:a9:c1:4d:ed:b5:5c:b6:1e:c6:43:c6:66:c0:2f:
                    16:2d:a5:df:ed:44:26:10:1d:19:30:68:0b:bd:31:
                    c1:33:c3:1a:95:c8:9e:0c:3f:45:d3:f3:a3:9b:bc:
                    05:de:1d:36:44:12:43:35:3c:db:92:8e:17:a2:07:
                    9c:9f:8a:7f:70:8a:d4:06:2a:90:5e:bd:1e:49:ec:
                    17:1c:0a:6c:04:ed:d1:85:93:00:d4:bc:33:ec:06:
                    fc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6C:B7:2A:A7:BB:AB:20:86:03:36:7D:6D:1B:54:89:11:13:82:01
            X509v3 Authority Key Identifier:
                keyid:CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3138372e31392e38302e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.19.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:02:26:3d:c6:a1:9b:89:76:7c:02:cc:4e:dc:6f:ee:1b:12:
         92:a3:ec:12:2a:09:ff:50:25:77:31:1e:be:7b:be:4f:26:51:
         e7:9b:d3:cc:60:3c:22:8f:0e:6b:5c:90:e7:a7:20:c4:ff:dd:
         9b:6a:0a:36:f8:38:64:5c:94:bd:2a:1d:1a:cb:b0:ae:da:aa:
         41:e4:2a:41:56:56:b7:2d:64:5e:69:3e:51:46:7e:c5:08:68:
         53:19:2f:0e:b4:a7:b7:65:79:3b:20:e7:b1:1e:6d:5b:84:a8:
         24:ee:10:b1:14:85:f6:41:e1:1a:32:74:5b:0c:86:a7:e3:d2:
         a2:b9:12:ac:23:8c:e6:ed:f9:e0:75:66:06:2d:ff:85:c3:d0:
         fe:f3:3e:b9:43:21:ec:be:26:86:44:fe:2a:eb:0d:77:99:b4:
         1b:d4:3f:b6:2a:0f:b1:3f:2b:8f:a5:13:d9:3a:f0:ff:d2:1d:
         25:82:5c:38:a8:29:7b:1c:56:dc:bd:26:4b:82:8d:38:12:be:
         1e:d8:16:9a:fe:ad:51:cc:2a:c7:54:1d:45:b7:e4:8e:fe:73:
         50:c5:56:96:db:3e:5a:28:47:74:0d:a9:ac:7d:9e:e1:ac:32:
         31:38:45:ab:18:25:fb:f2:f5:6f:10:f4:b6:bb:01:f7:67:44:
         ae:0c:31:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org