Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3137372e37312e302e302f32302d3234203d3e203238363637.roa
File:                     3137372e37312e302e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier:          X++fL3ri5scEGjXOjcoF2wrqtZXXsP24HdQ1DF+Z60A=
Subject key identifier:   B3:13:8B:7E:E6:28:A5:0F:FA:DB:89:BB:93:95:A2:15:35:44:65:8D
Certificate issuer:       /CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
Certificate serial:       1966D10118D622B722DADD653D60006A0F328A77
Authority key identifier: 45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3137372e37312e302e302f32302d3234203d3e203238363637.roa
Signing time:             Tue 23 Jul 2024 11:51:18 +0000
ROA not before:           Tue 23 Jul 2024 11:46:18 +0000
ROA not after:            Tue 22 Jul 2025 11:51:18 +0000
asID:                     28667
IP address blocks:        177.71.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:66:d1:01:18:d6:22:b7:22:da:dd:65:3d:60:00:6a:0f:32:8a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457216B168A96FD69389B1C7E1A15FBAD1E2184F
        Validity
            Not Before: Jul 23 11:46:18 2024 GMT
            Not After : Jul 22 11:51:18 2025 GMT
        Subject: CN=B3138B7EE628A50FFADB89BB9395A2153544658D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f2:77:56:f9:57:6c:5d:99:8e:e7:e4:33:6f:
                    f6:60:40:bb:cd:de:4d:e3:c4:a7:2f:c8:40:44:9a:
                    b8:28:71:0f:64:62:d6:9e:4b:64:74:1f:5c:0e:03:
                    9f:53:ae:47:e8:a3:d7:8e:76:e8:51:6b:67:00:aa:
                    f3:c9:69:0c:b5:99:a0:31:dc:bf:2c:56:80:f6:79:
                    74:1b:2d:8b:ac:01:05:2d:5e:d2:9a:54:c1:3f:78:
                    9b:4f:c0:d8:cc:80:8e:99:44:11:9b:95:96:37:07:
                    65:d8:c0:cb:fc:0a:2c:aa:c2:ba:fd:7c:2a:38:c0:
                    dd:a7:32:ab:a3:46:e9:38:1d:f4:d1:8b:c0:4f:6d:
                    98:12:10:96:e7:b0:4a:64:c6:68:ac:d1:d8:da:3f:
                    72:1a:43:7f:2c:f0:0b:c8:a5:42:23:15:25:d6:9d:
                    e2:62:0f:61:53:65:7e:45:10:3e:b4:85:48:02:0e:
                    6f:d7:1c:32:cd:3c:b1:6b:99:4d:be:26:e3:35:31:
                    3b:86:64:44:73:71:7b:42:22:9b:e6:90:71:e3:d0:
                    78:2a:2b:5a:c3:90:ba:d7:c0:a3:0c:54:56:fd:6c:
                    82:69:d8:c9:28:b7:56:66:e7:b3:2d:7b:84:7c:ee:
                    5a:d8:fb:85:b4:81:f8:d2:04:42:c7:bf:77:2f:bd:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:13:8B:7E:E6:28:A5:0F:FA:DB:89:BB:93:95:A2:15:35:44:65:8D
            X509v3 Authority Key Identifier:
                keyid:45:72:16:B1:68:A9:6F:D6:93:89:B1:C7:E1:A1:5F:BA:D1:E2:18:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/457216B168A96FD69389B1C7E1A15FBAD1E2184F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/457216B168A96FD69389B1C7E1A15FBAD1E2184F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/2/3137372e37312e302e302f32302d3234203d3e203238363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:46:5e:ba:50:46:d8:18:32:08:e2:9a:6c:a7:33:d3:82:9c:
         70:09:5b:96:20:02:63:4a:10:81:e4:7a:33:3f:51:d3:ba:c5:
         46:ae:67:1b:ba:0e:b3:a1:ca:a5:fb:64:eb:25:e6:bd:dc:74:
         86:df:53:97:ce:8e:04:17:7e:f9:e4:73:a5:c2:8c:fa:38:d0:
         0f:a8:08:c4:6f:99:b2:a5:54:d1:ff:df:4e:6f:79:c0:db:54:
         76:55:56:10:a6:15:13:9d:07:93:4f:50:a1:3e:2c:6f:79:b6:
         cf:db:a9:f7:61:61:4e:7d:59:40:f5:02:1e:34:24:ed:f4:61:
         8a:08:05:b6:56:c3:ee:d0:ad:56:09:eb:7f:a6:7b:ea:93:ae:
         e0:fd:95:86:e7:31:58:de:63:5a:21:f8:d9:f6:1d:cf:13:77:
         19:c2:50:fd:e2:c3:b7:cc:46:0a:30:99:1d:59:d4:3c:29:0c:
         67:67:2b:18:48:f3:b8:8c:71:b2:0c:bd:2d:97:47:ec:44:6d:
         86:44:b8:a4:14:37:75:1b:46:04:ef:db:16:d0:5b:c0:ac:e7:
         76:0c:8c:5c:c4:9b:b5:98:be:9c:4e:ed:bd:2d:60:37:e1:7c:
         25:e2:6a:ae:85:56:67:02:59:7a:b1:fb:0f:46:c7:0f:a4:4b:
         85:78:18:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:31 2024 by rpki-client on console-ams.rpki-client.org