Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa
File:                     3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa (raw, json)
Hash identifier:          PLCk5u+feg5suZv8diy1FmUR9EEsE8VTQKfEwYmlI24=
Subject key identifier:   84:5E:7C:C2:E1:73:C8:A9:AB:31:B0:5B:E9:51:E6:0A:1E:35:3A:2C
Certificate issuer:       /CN=6DA9FDC60EBC4E0B191BAE1CF55C3776E8209FDC
Certificate serial:       6AF2AD812C4DB3FBEBA74C279BB21B4D4A01413E
Authority key identifier: 6D:A9:FD:C6:0E:BC:4E:0B:19:1B:AE:1C:F5:5C:37:76:E8:20:9F:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DA9FDC60EBC4E0B191BAE1CF55C3776E8209FDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa
Signing time:             Mon 11 Dec 2023 18:58:03 +0000
ROA not before:           Mon 11 Dec 2023 18:53:03 +0000
ROA not after:            Mon 09 Dec 2024 18:58:03 +0000
asID:                     262742
IP address blocks:        177.104.32.0/19 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f2:ad:81:2c:4d:b3:fb:eb:a7:4c:27:9b:b2:1b:4d:4a:01:41:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA9FDC60EBC4E0B191BAE1CF55C3776E8209FDC
        Validity
            Not Before: Dec 11 18:53:03 2023 GMT
            Not After : Dec  9 18:58:03 2024 GMT
        Subject: CN=845E7CC2E173C8A9AB31B05BE951E60A1E353A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9c:3e:8c:1b:34:e7:16:0c:ef:57:26:7c:6b:
                    13:fb:f9:f0:91:13:46:fc:c6:13:14:c6:6b:07:9a:
                    04:cc:f6:cf:2c:c8:fb:88:7d:80:1c:20:fd:ac:26:
                    a9:e0:69:9d:7e:38:29:8d:b2:ca:3b:7a:2b:81:fa:
                    6e:bc:66:9c:d4:37:fd:87:0e:50:23:cf:f8:65:54:
                    7a:50:ff:de:0c:dd:a0:b3:7d:a1:2b:c3:d6:10:7d:
                    4b:96:09:c8:c7:0f:1d:ce:90:e1:6f:02:68:b5:1f:
                    15:e7:84:32:ae:15:9e:33:c7:61:e0:f5:de:34:92:
                    5f:5d:d9:ef:f0:58:6e:07:68:73:b2:51:f8:8a:11:
                    8f:af:8a:57:b7:39:92:57:f4:dc:3e:3e:20:62:d9:
                    1f:c1:f3:45:59:e0:9c:33:38:2e:8c:3f:1b:04:99:
                    e4:11:cb:9c:dd:7a:08:3d:fe:27:b1:c4:2c:b1:ee:
                    73:e0:20:92:eb:4c:0d:3c:fb:ae:07:a8:00:38:c7:
                    f3:b9:c9:9f:bf:19:68:19:95:9a:a3:ea:a7:fe:cf:
                    91:0a:b5:15:55:98:5a:3f:81:34:a2:7f:5d:2a:ac:
                    18:5d:90:b6:55:01:2f:a8:68:20:be:f8:6b:bb:bd:
                    7f:c6:2a:a2:dc:98:d2:e2:76:cd:af:43:42:7c:4c:
                    c1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5E:7C:C2:E1:73:C8:A9:AB:31:B0:5B:E9:51:E6:0A:1E:35:3A:2C
            X509v3 Authority Key Identifier:
                keyid:6D:A9:FD:C6:0E:BC:4E:0B:19:1B:AE:1C:F5:5C:37:76:E8:20:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/6DA9FDC60EBC4E0B191BAE1CF55C3776E8209FDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DA9FDC60EBC4E0B191BAE1CF55C3776E8209FDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GUHdKbzGVs6fnErnT35R972XtC63biXMJQ2rh6qB9Dh/0/3137372e3130342e33322e302f31392d3233203d3e20323632373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3d:9e:d2:ab:60:4f:6f:06:9b:f2:24:4e:de:7b:23:47:3f:86:
         01:e6:8e:b3:51:0f:c9:e3:21:9c:29:eb:d6:25:ec:3b:b2:ad:
         9b:b1:0d:36:42:2b:bf:64:fa:62:2e:a9:58:0a:49:5e:be:e3:
         57:a5:19:86:97:b1:6c:15:31:73:d5:87:c1:48:99:74:65:5d:
         9d:dd:e8:00:43:70:21:01:d9:59:54:7f:c7:97:64:cb:ab:c3:
         f5:00:cd:f4:91:f6:0a:80:fd:e6:ec:a0:01:3e:c2:06:6c:75:
         33:21:b1:fc:a1:2d:b3:13:23:8b:bf:a7:37:86:df:a3:80:f9:
         9b:05:b9:1c:45:1b:ef:b4:a0:27:53:97:de:61:3e:c8:6a:7e:
         61:b3:07:59:ce:ea:07:27:3e:6f:71:c4:c6:10:62:30:aa:bc:
         5b:1b:3e:e3:09:3b:2c:2b:2d:1c:58:b7:64:a3:f9:3d:b8:06:
         f5:b4:09:01:0e:cb:54:f6:d4:82:9d:79:a6:90:53:88:1d:0d:
         4e:b9:36:fb:72:75:d4:4c:88:57:59:0c:7a:6c:2f:76:2b:63:
         51:43:f0:b5:40:76:88:23:49:aa:87:e7:2d:2a:1a:21:1a:5b:
         0a:80:e6:bb:51:c0:2f:9f:42:aa:76:49:37:b9:1a:45:b7:06:
         92:c8:a8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org