Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/AS262316.roa
File:                     AS262316.roa (raw, json)
Hash identifier:          U8pbE3yzonIhR0JvjLEizOIrwslg6HsNJB1RkC+QS/M=
Subject key identifier:   02:7C:DF:D2:9E:2C:E5:E2:18:F8:44:FD:C6:21:C9:5A:B6:4C:96:B3
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       42106EC19A011AC94DC56BE51DF0782AA623B70A
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/AS262316.roa
Signing time:             Fri 22 Sep 2023 16:40:44 +0000
ROA not before:           Fri 22 Sep 2023 16:35:44 +0000
ROA not after:            Fri 20 Sep 2024 16:40:44 +0000
asID:                     262316
IP address blocks:        131.221.200.0/22 maxlen: 22
                          131.221.200.0/23 maxlen: 23
                          131.221.200.0/24 maxlen: 24
                          131.221.201.0/24 maxlen: 24
                          131.221.202.0/23 maxlen: 23
                          131.221.202.0/24 maxlen: 24
                          131.221.203.0/24 maxlen: 24
                          138.117.192.0/22 maxlen: 22
                          138.117.192.0/23 maxlen: 23
                          138.117.194.0/23 maxlen: 23
                          138.117.194.0/24 maxlen: 24
                          138.117.195.0/24 maxlen: 24
                          167.250.152.0/22 maxlen: 22
                          167.250.152.0/23 maxlen: 23
                          167.250.152.0/24 maxlen: 24
                          167.250.153.0/24 maxlen: 24
                          167.250.154.0/23 maxlen: 23
                          167.250.154.0/24 maxlen: 24
                          167.250.155.0/24 maxlen: 24
                          177.74.64.0/20 maxlen: 20
                          177.74.64.0/22 maxlen: 22
                          177.74.64.0/23 maxlen: 23
                          177.74.64.0/24 maxlen: 24
                          177.74.65.0/24 maxlen: 24
                          177.74.66.0/23 maxlen: 23
                          177.74.66.0/24 maxlen: 24
                          177.74.67.0/24 maxlen: 24
                          177.74.68.0/22 maxlen: 22
                          177.74.68.0/23 maxlen: 23
                          177.74.68.0/24 maxlen: 24
                          177.74.69.0/24 maxlen: 24
                          177.74.70.0/23 maxlen: 23
                          177.74.70.0/24 maxlen: 24
                          177.74.71.0/24 maxlen: 24
                          177.74.72.0/22 maxlen: 22
                          177.74.72.0/23 maxlen: 23
                          177.74.72.0/24 maxlen: 24
                          177.74.73.0/24 maxlen: 24
                          177.74.74.0/23 maxlen: 23
                          177.74.74.0/24 maxlen: 24
                          177.74.75.0/24 maxlen: 24
                          177.74.76.0/23 maxlen: 23
                          177.74.76.0/24 maxlen: 24
                          177.74.77.0/24 maxlen: 24
                          177.74.78.0/24 maxlen: 24
                          177.74.79.0/24 maxlen: 24
                          177.124.48.0/22 maxlen: 22
                          177.124.48.0/23 maxlen: 23
                          177.124.48.0/24 maxlen: 24
                          177.124.49.0/24 maxlen: 24
                          177.124.50.0/23 maxlen: 23
                          177.124.50.0/24 maxlen: 24
                          177.124.51.0/24 maxlen: 24
                          2804:7c0::/32 maxlen: 32
                          2804:7c0::/48 maxlen: 48
                          2804:7c0:1000::/36 maxlen: 36
                          2804:7c0:1000::/44 maxlen: 44
                          2804:7c0:1010::/44 maxlen: 44
                          2804:7c0:1020::/48 maxlen: 48
                          2804:7c0:1030::/48 maxlen: 48
                          2804:7c0:10a0::/48 maxlen: 48
                          2804:7c0:10b0::/48 maxlen: 48
                          2804:7c0:10d1::/48 maxlen: 48
                          2804:7c0:10d2::/48 maxlen: 48
                          2804:7c0:10d3::/48 maxlen: 48
                          2804:7c0:2000::/36 maxlen: 36
                          2804:7c0:2000::/44 maxlen: 44
                          2804:7c0:2010::/44 maxlen: 44
                          2804:7c0:20a1::/48 maxlen: 48
                          2804:7c0:20b1::/48 maxlen: 48
                          2804:7c0:20d1::/48 maxlen: 48
                          2804:7c0:20d3::/48 maxlen: 48
                          2804:7c0:20d4::/48 maxlen: 48
                          2804:7c0:20d6::/48 maxlen: 48
                          2804:7c0:20d7::/48 maxlen: 48
                          2804:7c0:3000::/36 maxlen: 36
                          2804:7c0:3000::/44 maxlen: 44
                          2804:7c0:3010::/44 maxlen: 44
                          2804:7c0:3020::/48 maxlen: 48
                          2804:7c0:3030::/48 maxlen: 48
                          2804:7c0:30a1::/48 maxlen: 48
                          2804:7c0:30b1::/48 maxlen: 48
                          2804:7c0:30d1::/48 maxlen: 48
                          2804:7c0:30d2::/48 maxlen: 48
                          2804:7c0:30d3::/48 maxlen: 48
                          2804:7c0:4000::/36 maxlen: 36
                          2804:7c0:4000::/44 maxlen: 44
                          2804:7c0:4010::/44 maxlen: 44
                          2804:7c0:4040::/48 maxlen: 48
                          2804:7c0:4050::/48 maxlen: 48
                          2804:7c0:40a1::/48 maxlen: 48
                          2804:7c0:40b1::/48 maxlen: 48
                          2804:7c0:40d1::/48 maxlen: 48
                          2804:7c0:40d2::/48 maxlen: 48
                          2804:7c0:40d3::/48 maxlen: 48
                          2804:7c0:9000::/36 maxlen: 36
                          2804:7c0:9010::/44 maxlen: 44
                          2804:7c0:9020::/48 maxlen: 48
                          2804:7c0:9030::/48 maxlen: 48
                          2804:7c0:90a1::/48 maxlen: 48
                          2804:7c0:90b1::/48 maxlen: 48
                          2804:7c0:90d1::/48 maxlen: 48
                          2804:7c0:90d2::/48 maxlen: 48
                          2804:7c0:90d3::/48 maxlen: 48
                          2804:7c0:a000::/36 maxlen: 36
                          2804:7c0:b000::/36 maxlen: 36
                          2804:7c0:b010::/44 maxlen: 44
                          2804:7c0:b0a1::/48 maxlen: 48
                          2804:7c0:b0b1::/48 maxlen: 48
                          2804:7c0:b0d1::/48 maxlen: 48
                          2804:7c0:b0d3::/48 maxlen: 48
                          2804:7c0:b0d4::/48 maxlen: 48
                          2804:7c0:b0d5::/48 maxlen: 48
                          2804:7c0:b0d6::/48 maxlen: 48
                          2804:7c0:c000::/36 maxlen: 36
                          2804:7c0:c000::/44 maxlen: 44
                          2804:7c0:c010::/44 maxlen: 44
                          2804:7c0:c0a1::/48 maxlen: 48
                          2804:7c0:c0b1::/48 maxlen: 48
                          2804:7c0:c0d1::/48 maxlen: 48
                          2804:7c0:c0d3::/48 maxlen: 48
                          2804:7c0:c0d4::/48 maxlen: 48
                          2804:7c0:c0d5::/48 maxlen: 48
                          2804:7c0:c0d6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:10:6e:c1:9a:01:1a:c9:4d:c5:6b:e5:1d:f0:78:2a:a6:23:b7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Sep 22 16:35:44 2023 GMT
            Not After : Sep 20 16:40:44 2024 GMT
        Subject: CN=027CDFD29E2CE5E218F844FDC621C95AB64C96B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:82:21:e1:86:81:31:cf:a4:8b:8f:a6:3d:
                    e7:50:ca:32:74:59:67:f9:dd:60:21:b5:22:cd:fc:
                    e5:2e:d9:25:d6:6c:fa:c9:4f:61:64:62:ba:5d:3e:
                    48:fb:27:cb:8f:d1:46:60:6d:12:7b:65:cd:43:e5:
                    7a:95:db:9c:74:28:52:82:5a:15:68:c4:04:49:57:
                    04:1b:d4:78:7c:d1:a1:36:ce:42:2a:77:29:71:fe:
                    3d:44:ce:9a:4d:1e:9d:31:e5:79:86:cc:fc:d0:a6:
                    fb:8c:45:7e:67:ad:fe:3a:8e:e3:04:1c:6f:a0:54:
                    67:8f:60:a4:8c:ed:9f:f9:20:dd:14:f6:81:e1:42:
                    9e:9f:af:19:f1:4c:7a:2f:8d:f3:e0:12:ea:d8:43:
                    af:52:d9:f6:58:49:93:6a:02:cc:e1:a8:e0:10:5b:
                    b9:87:09:a7:69:e9:65:4d:c5:ae:bb:2e:55:d9:ef:
                    a1:18:9f:5f:59:a5:a8:53:c2:71:c4:01:e2:9c:70:
                    19:11:e8:ff:14:96:ac:dc:54:04:f6:30:37:60:d2:
                    7c:81:6b:b1:af:2d:25:a5:ed:df:65:e5:28:85:0a:
                    47:2a:ec:a5:90:6f:26:0d:86:14:f4:98:7c:a1:0f:
                    bc:88:15:bc:50:64:a6:b0:64:2c:30:e0:47:2b:84:
                    b5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7C:DF:D2:9E:2C:E5:E2:18:F8:44:FD:C6:21:C9:5A:B6:4C:96:B3
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/AS262316.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.200.0/22
                  138.117.192.0/22
                  167.250.152.0/22
                  177.74.64.0/20
                  177.124.48.0/22
                IPv6:
                  2804:7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:33:7f:dc:d3:ba:7a:b4:06:01:b2:5b:11:99:59:43:75:41:
         28:8a:a0:3d:f4:47:e4:69:fa:a6:e9:62:17:98:26:da:9f:46:
         09:27:34:e9:e1:c4:55:b6:be:9a:3d:5e:b9:10:fa:da:28:e9:
         44:74:49:5d:a1:a6:49:a8:bc:bc:9d:dd:e4:99:66:6b:69:41:
         22:67:a4:2b:e4:10:85:c7:ac:f0:b2:b3:bc:98:12:3f:d8:75:
         13:90:52:bb:26:ac:6f:7c:f7:78:9b:31:a7:04:96:8c:a8:e3:
         0b:03:cf:9b:34:2c:3f:a8:f0:b5:5e:3d:b1:32:f0:1f:1a:48:
         2c:25:cc:f1:9c:fc:bb:0e:91:c1:66:60:bf:45:3d:c3:a7:7e:
         dd:92:8f:50:07:5c:02:7f:06:6c:a4:80:be:59:d6:28:fc:f8:
         f9:ef:24:15:bb:29:c7:82:bd:70:55:b0:e5:f0:8a:e9:1f:e1:
         33:be:a8:30:0b:92:0d:8c:0f:af:00:51:54:bb:05:40:19:bf:
         17:b7:8d:e1:b1:35:25:f5:31:ea:99:77:dc:c5:7c:36:ed:1a:
         4e:b9:d4:c4:78:f9:8a:a3:22:fa:33:17:f5:17:14:0b:36:bd:
         1f:72:19:d0:77:92:ba:b4:bf:da:97:61:2c:18:d9:54:b7:cf:
         31:ed:6b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:08 2024 by rpki-client on console-ams.rpki-client.org