Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3235302e302f32342d3234203d3e203532363630.roa
File:                     3137372e36362e3235302e302f32342d3234203d3e203532363630.roa (raw, json)
Hash identifier:          GEj4PGXWz6/1WlXbGv6LK6QGOPnLW26Z2NlJA9ACnJY=
Subject key identifier:   EF:AD:28:D6:98:25:B5:F6:C0:56:2F:3B:42:04:D7:0F:52:72:A0:C3
Certificate issuer:       /CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
Certificate serial:       536EC9AB2B639971AA834E950BA5651B36EA19E3
Authority key identifier: DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3235302e302f32342d3234203d3e203532363630.roa
Signing time:             Fri 17 Mar 2023 12:48:01 +0000
ROA not before:           Fri 17 Mar 2023 12:43:01 +0000
ROA not after:            Fri 15 Mar 2024 12:48:01 +0000
asID:                     52660
IP address blocks:        177.66.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6e:c9:ab:2b:63:99:71:aa:83:4e:95:0b:a5:65:1b:36:ea:19:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC
        Validity
            Not Before: Mar 17 12:43:01 2023 GMT
            Not After : Mar 15 12:48:01 2024 GMT
        Subject: CN=EFAD28D69825B5F6C0562F3B4204D70F5272A0C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bc:0e:1a:88:35:64:d4:9f:e4:42:c6:80:0e:
                    7b:c7:72:1a:c1:e6:b9:b2:32:8d:ec:81:bc:2d:76:
                    46:98:c2:0a:11:8f:1f:3e:b7:2c:1c:bc:56:65:2b:
                    f7:fb:1d:08:ae:92:42:74:db:36:c6:67:9f:09:2b:
                    f2:f9:3f:ed:24:3b:b2:d7:b8:79:f8:cf:f8:24:3b:
                    7a:71:85:93:b0:e6:7d:8b:22:2d:5e:f3:50:5f:fc:
                    97:ad:0a:4c:19:d8:d0:d8:e2:bc:45:f0:12:52:9a:
                    e8:6f:77:f8:dc:89:bb:ad:d5:6a:10:56:a3:5f:5e:
                    30:f2:4b:c2:cf:fa:81:88:b0:d3:81:45:5d:a7:76:
                    f2:59:40:01:66:f2:f1:3e:96:e4:c1:16:23:8b:bc:
                    37:49:f6:67:2a:53:67:b2:41:90:0f:3e:99:5b:73:
                    c2:1e:3b:9b:4b:aa:02:b6:08:8f:3b:0e:07:f2:df:
                    1c:02:b6:ac:da:0a:7d:e4:b7:b8:76:79:e6:77:73:
                    6f:e5:d6:77:dd:06:69:11:90:89:b2:9d:f1:c3:29:
                    72:96:5e:ab:24:af:02:2b:48:5c:d1:71:20:4f:6c:
                    ea:e8:05:99:40:26:8b:f1:9d:70:66:41:53:af:43:
                    b4:fc:be:33:64:f1:a2:7a:63:8f:ce:b9:2b:50:9b:
                    e9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AD:28:D6:98:25:B5:F6:C0:56:2F:3B:42:04:D7:0F:52:72:A0:C3
            X509v3 Authority Key Identifier:
                keyid:DC:C8:E9:17:3F:40:90:DF:EE:9D:C2:DC:22:DD:E2:3B:8D:E2:3A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCC8E9173F4090DFEE9DC2DC22DDE23B8DE23ACC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/3137372e36362e3235302e302f32342d3234203d3e203532363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:53:a4:78:23:78:82:69:5d:b7:3d:ac:eb:6c:ec:b3:6a:a3:
         3a:30:b7:44:60:57:ab:46:95:44:9e:e9:e5:d3:ad:15:99:7e:
         30:23:95:81:40:c3:35:0f:d4:0e:c8:95:4a:a4:87:68:30:5b:
         fe:e1:ab:6d:5b:c2:6d:d0:d7:4f:77:fd:6d:8f:7b:b6:a1:91:
         62:84:68:d0:fc:eb:5a:75:33:83:48:ab:4e:82:db:4f:d3:49:
         01:df:f3:70:77:fd:a8:24:92:58:6a:d9:8a:e6:9c:50:0e:07:
         c4:da:45:18:32:b2:e5:b4:a3:f1:8f:be:68:dd:ab:d7:fd:0a:
         6f:d5:e9:74:25:4b:4e:61:2f:bd:bb:c2:a8:32:1b:38:e6:89:
         b3:50:b4:37:e0:e6:7f:c4:34:eb:55:4e:89:c4:df:6b:64:c7:
         4a:2c:3f:90:a8:23:f1:35:7d:98:a4:7f:d8:32:ef:64:a1:86:
         76:e4:51:7e:1b:25:fa:f3:9d:5a:83:fe:ca:ea:69:24:ba:cf:
         b9:67:a0:3a:7c:e0:92:c5:64:c0:b0:f2:ab:9e:e2:35:17:36:
         9e:76:b6:59:bd:1f:95:e4:63:54:1a:a7:2f:7f:4a:65:6e:16:
         9d:64:e3:32:9d:e5:1f:da:37:55:81:6c:aa:05:5b:de:3d:73:
         4c:ac:21:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:34 2023 by rpki-client on console.sobornost.net