Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa
File:                     3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa (raw, json)
Hash identifier:          yKe0GgKDfBld1f3ojgyTpfH6P/ojajQBFOLjij8UF7w=
Subject key identifier:   F4:6E:0C:32:54:55:45:C8:E4:3D:68:59:F1:65:8C:66:94:D3:CA:C8
Certificate issuer:       /CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
Certificate serial:       4F223005E544A90F20568BA49C115EAE38CC96D7
Authority key identifier: CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa
Signing time:             Thu 04 Apr 2024 16:06:04 +0000
ROA not before:           Thu 04 Apr 2024 16:01:04 +0000
ROA not after:            Thu 03 Apr 2025 16:06:04 +0000
asID:                     28667
IP address blocks:        191.242.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:22:30:05:e5:44:a9:0f:20:56:8b:a4:9c:11:5e:ae:38:cc:96:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAEDC18AF660D55B5D3AB925A1371E54EEDD7510
        Validity
            Not Before: Apr  4 16:01:04 2024 GMT
            Not After : Apr  3 16:06:04 2025 GMT
        Subject: CN=F46E0C32545545C8E43D6859F1658C6694D3CAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:78:3f:b3:a5:4c:eb:58:31:c6:69:44:9d:
                    ba:a8:5e:27:df:ef:97:aa:5e:1d:8e:f7:c5:1d:4f:
                    7d:7b:66:95:54:2a:d4:4a:1e:df:ca:e3:b6:1d:9f:
                    66:a5:0e:d6:87:b1:7d:53:97:01:f9:a3:87:b6:28:
                    bb:01:c8:fa:80:ff:46:6b:22:46:c1:fd:13:e7:2c:
                    a4:b8:e0:e3:8c:05:46:88:d9:23:38:0d:f4:11:b9:
                    54:38:46:40:0c:f3:87:8b:2c:87:d9:a9:a5:48:42:
                    97:52:ed:44:db:db:1a:46:f7:76:e1:3b:1b:b0:53:
                    13:b4:c4:72:1a:99:cc:69:e4:2e:be:66:65:da:a5:
                    60:79:af:66:c7:5b:f9:99:73:e6:2b:78:1d:c6:74:
                    06:bb:71:0c:94:0d:86:3c:e1:d1:0c:cd:27:bc:8e:
                    2a:0f:92:96:cd:83:23:91:84:17:29:39:35:96:67:
                    5a:62:de:69:e1:92:57:5a:97:e5:61:de:9b:c8:74:
                    4a:ba:6e:62:d4:7d:a6:b6:81:86:8e:47:27:6b:ea:
                    ae:34:39:2b:7f:be:26:b4:fb:7f:57:e0:fd:f5:48:
                    a1:07:27:84:11:6a:fc:6e:5c:78:a9:d1:05:ac:ea:
                    71:37:42:88:83:4e:c0:82:c2:c7:15:14:f5:b4:ea:
                    c7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6E:0C:32:54:55:45:C8:E4:3D:68:59:F1:65:8C:66:94:D3:CA:C8
            X509v3 Authority Key Identifier:
                keyid:CA:ED:C1:8A:F6:60:D5:5B:5D:3A:B9:25:A1:37:1E:54:EE:DD:75:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAEDC18AF660D55B5D3AB925A1371E54EEDD7510.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/1/3139312e3234322e3132382e302f31392d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.242.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:de:9c:67:1f:75:7e:07:03:7c:fd:46:07:14:9c:59:79:
         19:22:e4:dc:93:c5:35:56:63:ba:97:49:35:05:fa:0f:a5:ee:
         35:85:6b:be:f7:87:03:18:aa:5a:f4:0d:e1:89:eb:91:e6:de:
         87:37:18:90:a7:fe:08:6b:18:f1:aa:d9:15:9f:74:35:12:41:
         19:9d:32:fd:e8:db:62:85:d6:9b:e9:55:b6:b3:80:9f:6d:99:
         5c:aa:d1:28:60:86:01:88:a9:ae:e6:29:05:79:7a:a1:ac:f2:
         0d:bc:e6:19:69:3d:6c:f4:dc:43:f3:f6:14:71:b7:13:10:30:
         69:4e:bc:4c:d1:e6:52:55:bb:c7:42:1a:65:5d:83:d8:5d:b2:
         c9:9b:63:85:40:5c:58:f6:67:bd:ac:d0:db:47:8e:5b:dc:c3:
         bd:64:86:a5:08:4a:98:c5:64:21:9e:a3:ac:95:ec:30:7b:0e:
         ff:66:e9:ab:57:5e:c8:ec:cb:42:41:23:ca:28:f6:51:b2:82:
         79:a8:84:35:d7:86:20:44:ee:92:8e:f7:8b:bd:02:c6:09:06:
         59:d0:03:44:7b:74:61:eb:06:3f:16:fe:12:22:e4:86:8f:c0:
         93:f4:46:c0:38:19:29:89:55:7f:82:9a:99:15:c4:19:cc:d9:
         86:c8:b1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org