Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3232322e302f32342d3234203d3e20323633353232.roa
File:                     3137372e3132362e3232322e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          0w8SmkFRxtQ9lAsY2PjBTCUScwDf4+tpjSfV4csLYiM=
Subject key identifier:   65:64:9A:D5:92:AB:C1:94:41:EE:B9:FC:AD:49:78:88:8C:09:50:78
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       409BF6B1559221D418CECC844DB410448941E0FC
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3232322e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 28 Dec 2023 17:11:34 +0000
ROA not before:           Thu 28 Dec 2023 17:06:34 +0000
ROA not after:            Thu 26 Dec 2024 17:11:34 +0000
asID:                     263522
IP address blocks:        177.126.222.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:9b:f6:b1:55:92:21:d4:18:ce:cc:84:4d:b4:10:44:89:41:e0:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Dec 28 17:06:34 2023 GMT
            Not After : Dec 26 17:11:34 2024 GMT
        Subject: CN=65649AD592ABC19441EEB9FCAD4978888C095078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:5b:0a:ca:c1:0f:ff:f9:a0:19:66:2e:ca:d1:
                    82:34:21:7f:72:83:46:2f:ae:48:53:44:2a:f5:da:
                    84:c2:74:99:7a:ff:f1:7b:a4:40:06:55:c5:c8:21:
                    49:21:d1:6c:46:c5:a5:67:79:94:16:07:16:52:57:
                    ee:4a:95:b5:78:71:89:86:16:9e:8f:ef:cb:8c:90:
                    15:4c:cc:e0:00:c4:c5:7e:3d:88:ac:5c:6a:46:8c:
                    5a:64:1a:4f:9d:de:22:9f:84:36:74:12:9b:de:a7:
                    75:16:75:89:75:42:80:27:14:0e:87:4b:76:0a:1b:
                    d0:ed:2c:63:42:f5:cb:df:21:dd:aa:4d:24:5f:5c:
                    1e:03:c6:fc:14:5e:de:5a:e1:f5:81:32:27:3f:40:
                    ea:ca:0c:c0:9c:b4:1c:b9:0f:b5:c6:6a:38:f0:79:
                    d4:7b:95:8b:52:f5:95:9a:58:d5:59:3b:2e:e6:ea:
                    e0:c9:bd:57:ad:4b:8a:3b:74:4d:c8:ad:fb:66:39:
                    c2:7a:81:d9:aa:5a:9f:09:23:96:e4:f1:f0:f4:20:
                    c0:88:4e:a2:b5:ff:46:05:42:0e:35:97:60:3d:ce:
                    ed:c5:1c:b4:7a:c4:4a:4a:ed:a7:f5:80:90:31:c2:
                    3e:eb:88:fa:4f:77:bc:70:17:10:5c:ed:52:9d:d8:
                    ec:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:64:9A:D5:92:AB:C1:94:41:EE:B9:FC:AD:49:78:88:8C:09:50:78
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3232322e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:be:28:68:af:4c:01:e8:21:d9:63:f3:19:73:01:3d:a4:02:
         d5:06:5a:77:b4:e5:ac:b1:13:52:88:57:09:3a:1d:c8:9a:ef:
         64:1d:95:40:8e:79:8b:d1:c5:cb:d0:67:b9:31:db:fd:99:bf:
         3f:51:c5:89:d5:27:07:f1:98:9d:d0:9e:5a:44:e9:b8:cd:84:
         6a:d8:5d:c0:9e:b5:76:bf:3a:aa:4f:b7:90:af:d5:56:42:e4:
         68:cc:29:8f:ae:c6:d9:d2:12:eb:93:74:47:82:85:80:72:cc:
         f4:dc:8a:e8:c5:f8:23:83:38:f3:4c:ab:0f:ff:60:0b:f2:5c:
         0f:f9:d5:42:32:7f:65:3e:4f:c4:cb:f0:cb:9a:3b:d2:50:5c:
         63:72:59:95:2d:ab:26:b4:b1:ea:be:86:68:cc:0b:9f:3a:e5:
         3c:f3:7b:09:67:f6:0f:6d:51:17:06:6d:d7:27:23:89:75:96:
         cf:2a:2e:56:6d:b2:b5:f2:55:6f:96:47:62:83:88:e7:65:12:
         35:83:44:40:ef:58:7e:b3:08:51:6f:d7:89:9b:5f:e3:49:ec:
         ea:9d:07:20:b4:14:5e:e6:6d:d3:e3:a3:3d:04:64:ce:8f:f2:
         d4:a4:3e:43:57:43:da:25:3a:7b:e1:99:d0:f0:9c:d4:9b:8b:
         b5:4d:fa:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org