Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3232302e302f32342d3234203d3e20323633353232.roa
File:                     3137372e3132362e3232302e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          8FYPJSP7XHAHBm2d7GN1LeFF86hG+4K5cjG6wZrB/k4=
Subject key identifier:   BA:F3:68:06:C1:31:03:8F:1A:BD:79:B6:28:B6:58:53:43:35:B8:8D
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       2FB911CDB8B2BECEC2EC301EEFC1A56BF9A7C46E
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3232302e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 28 Dec 2023 17:11:12 +0000
ROA not before:           Thu 28 Dec 2023 17:06:12 +0000
ROA not after:            Thu 26 Dec 2024 17:11:12 +0000
asID:                     263522
IP address blocks:        177.126.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b9:11:cd:b8:b2:be:ce:c2:ec:30:1e:ef:c1:a5:6b:f9:a7:c4:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Dec 28 17:06:12 2023 GMT
            Not After : Dec 26 17:11:12 2024 GMT
        Subject: CN=BAF36806C131038F1ABD79B628B658534335B88D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:ff:a8:76:b3:07:73:f1:fe:7c:29:49:75:
                    00:75:7c:be:0a:98:a8:c3:eb:d5:28:49:74:a4:ba:
                    44:6c:f1:c3:21:e7:30:c4:06:81:49:25:92:06:42:
                    61:b8:5b:0b:f1:86:28:7f:4c:e3:38:76:ea:ab:c2:
                    47:8f:85:29:33:57:47:fe:4a:1d:24:ed:26:92:cf:
                    27:e2:f0:16:34:df:74:dd:91:65:67:1c:23:c8:27:
                    54:ea:f6:08:fe:b5:17:8e:8f:d0:c8:d6:0a:a3:6f:
                    41:50:35:8b:41:03:70:7a:60:12:08:58:d2:a0:b8:
                    cf:38:20:ca:b0:ab:6d:fe:b2:57:13:4b:05:49:42:
                    e4:bf:41:b8:eb:32:0a:55:1d:b6:87:6e:67:2d:e8:
                    67:29:9d:70:59:fc:ff:95:7e:d1:32:c6:09:31:75:
                    af:b0:e4:5d:6b:4c:18:a9:dd:07:59:fd:7f:48:1a:
                    d8:cf:8a:07:c4:f4:b4:94:df:cf:90:25:ef:f9:18:
                    d1:c7:70:f7:dc:9c:98:78:ec:2b:bd:3c:af:0e:49:
                    f5:43:94:0f:df:d0:c9:4d:bc:b6:d2:48:18:45:d6:
                    98:ab:d8:7e:8b:59:f9:85:d3:bc:dc:f0:a4:ec:ea:
                    ce:ee:7c:1c:87:1d:f9:39:48:b8:52:26:e3:fd:3c:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F3:68:06:C1:31:03:8F:1A:BD:79:B6:28:B6:58:53:43:35:B8:8D
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3232302e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:07:82:03:60:5c:3a:73:70:c1:fd:77:3b:ef:40:ed:92:21:
         b8:d9:3b:eb:87:e1:74:9e:9f:89:9d:e5:31:cc:c7:65:ca:28:
         a3:25:cf:37:68:a8:30:40:31:1d:13:56:cc:e5:23:df:7d:eb:
         77:2a:58:95:60:bb:ee:14:3f:1a:9d:7b:1d:f0:cc:2b:41:6a:
         0f:54:2a:a6:6b:00:33:14:8d:3b:7e:b3:65:8d:d5:f2:ce:97:
         5f:71:b8:ef:da:1a:bb:7f:ec:f6:6c:12:61:86:84:4b:47:ae:
         ba:b0:0d:d6:59:4e:5f:82:fd:80:52:4e:a6:22:35:01:64:98:
         ce:35:8a:a3:0f:67:84:f0:5b:53:da:d1:49:00:db:d6:5f:41:
         f2:9c:cc:72:99:59:7a:a0:55:32:a0:e9:e8:35:73:83:44:db:
         95:70:fd:9d:db:ca:85:bb:88:b0:cf:99:28:5a:27:d7:43:68:
         73:4e:4c:f0:ed:ff:2c:5f:b8:af:d3:ce:3a:6e:05:87:62:18:
         90:30:2d:d8:62:d3:8d:89:ab:04:11:f8:77:fb:93:66:ed:b6:
         53:1f:34:14:31:d1:ce:1c:63:42:a5:d3:b1:10:47:63:68:17:
         06:1b:08:38:87:62:8d:78:7b:07:5b:a4:9d:1e:71:c2:b3:f8:
         16:08:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:10 2024 by rpki-client on console-fra.rpki-client.org