Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa
File:                     3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa (raw, json)
Hash identifier:          D9qp5vbBg9w9jINRc9822lgGRo45hQhyNw7oiQZrDWI=
Subject key identifier:   FF:42:BD:DD:B6:E8:A5:DE:E7:6E:EA:60:4B:EB:C2:3A:30:C7:88:15
Certificate issuer:       /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial:       3D17B88292192A4C65D18CCDDA52925E722BF8F0
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa
Signing time:             Tue 23 Jul 2024 11:51:19 +0000
ROA not before:           Tue 23 Jul 2024 11:46:19 +0000
ROA not after:            Tue 22 Jul 2025 11:51:19 +0000
asID:                     28667
IP address blocks:        177.184.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:17:b8:82:92:19:2a:4c:65:d1:8c:cd:da:52:92:5e:72:2b:f8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
        Validity
            Not Before: Jul 23 11:46:19 2024 GMT
            Not After : Jul 22 11:51:19 2025 GMT
        Subject: CN=FF42BDDDB6E8A5DEE76EEA604BEBC23A30C78815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c7:8d:20:e5:fd:f3:13:1f:71:2d:1a:38:1d:
                    1f:37:5b:2d:17:1c:05:48:89:ad:d9:0f:f3:77:e8:
                    6d:7c:12:86:dc:2e:74:18:5b:d0:3f:33:09:99:a1:
                    de:bc:f5:43:0a:44:f9:91:e7:53:68:c1:f8:4c:0f:
                    e7:1e:b3:17:e1:24:fc:d7:6a:10:41:cc:ae:85:a5:
                    c9:b9:d8:17:bb:b3:07:ea:69:b3:c9:6d:08:6a:25:
                    87:c5:59:27:73:c4:59:7a:bd:00:90:f1:4f:92:19:
                    a9:59:26:21:36:ef:4d:1f:cc:d1:55:ab:56:d0:de:
                    45:42:2d:6e:79:48:b0:65:b4:a0:0b:93:ff:19:8d:
                    20:ec:e9:1e:70:0f:0f:4e:77:f0:26:2a:62:14:16:
                    f3:e2:b6:42:68:a1:20:8b:ee:e9:77:d7:17:21:02:
                    eb:48:88:64:12:f3:87:a0:4c:68:5d:66:1c:06:4d:
                    f3:e4:c2:e1:6c:7f:03:25:3f:a3:fb:c0:72:6f:3a:
                    da:2e:ee:d3:f5:3d:19:e3:ef:71:13:64:94:d7:3d:
                    61:af:70:43:51:6a:a0:27:b7:e9:b9:41:07:83:ef:
                    1b:a4:e2:90:7d:9f:38:ca:e3:7e:66:3b:ac:eb:aa:
                    f8:ae:1c:19:64:51:69:50:46:07:0a:a5:1b:7a:99:
                    0a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:42:BD:DD:B6:E8:A5:DE:E7:6E:EA:60:4B:EB:C2:3A:30:C7:88:15
            X509v3 Authority Key Identifier:
                keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3137372e3138342e3234302e302f32312d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         15:0f:2e:24:0b:52:93:d5:14:c7:99:72:06:26:31:a9:5e:ff:
         a9:2f:1e:ce:49:21:00:3c:ad:38:d7:50:da:f0:00:99:1b:e5:
         43:22:0f:ad:92:25:8c:c2:7a:2f:d4:59:ce:1f:42:1a:06:7b:
         6a:81:34:33:a8:14:6a:05:d4:a1:13:b9:a3:5a:86:0b:28:46:
         1f:ea:e8:8b:62:60:25:7b:5b:0c:b4:6f:6e:a9:ff:8f:98:bc:
         af:91:be:0d:78:77:8d:d4:fd:08:7e:57:12:46:2a:b8:72:81:
         8f:36:1b:ea:5c:50:2e:a3:dc:a0:c3:42:f3:1f:04:f5:55:68:
         95:88:14:de:ef:8b:ab:11:d0:e2:19:99:57:f9:10:69:d6:3e:
         3b:2b:21:19:2b:ca:a8:74:2c:b1:8e:18:85:0a:ef:e7:12:0d:
         c0:6d:aa:c7:59:8a:56:14:41:61:81:39:1e:2a:69:7d:c7:85:
         67:fd:b2:e4:2a:b8:a5:af:1e:c1:cc:fd:9d:fe:f1:72:8b:0f:
         1d:9f:f6:e2:b0:6c:a3:95:9f:2c:e4:2d:ff:f3:58:06:c0:df:
         68:6b:8b:1a:d5:21:7c:70:2c:e6:b2:48:90:d6:21:cc:be:91:
         6a:c3:c5:8f:e0:2e:d2:1e:09:5e:7a:c2:8b:4c:0f:7e:0b:d8:
         76:6f:62:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 15:30:59 2024 by rpki-client on console-fra.rpki-client.org