Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/AS262691.roa
File:                     AS262691.roa (raw, json)
Hash identifier:          8lLER4GlLDiR6nvY7CAzPtVnC1Eq3iFnPvTwM3vIndU=
Subject key identifier:   A0:74:30:EC:E7:9B:78:4E:4A:41:C8:A4:05:16:0F:3E:CE:EC:6E:DB
Certificate issuer:       /CN=3B765B701A47BF72E77B8642ADC280A3017185B9
Certificate serial:       7CD07EFACEED59CF6411FAED00EDC05EFAEC5ECC
Authority key identifier: 3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/AS262691.roa
Signing time:             Thu 25 Jan 2024 19:47:53 +0000
ROA not before:           Thu 25 Jan 2024 19:42:53 +0000
ROA not after:            Thu 23 Jan 2025 19:47:53 +0000
asID:                     262691
IP address blocks:        131.108.200.0/22 maxlen: 22
                          131.108.200.0/23 maxlen: 23
                          131.108.202.0/23 maxlen: 23
                          177.72.20.0/22 maxlen: 22
                          177.72.20.0/23 maxlen: 23
                          177.72.22.0/23 maxlen: 23
                          177.87.204.0/22 maxlen: 22
                          177.87.204.0/23 maxlen: 23
                          177.87.206.0/23 maxlen: 23
                          179.108.192.0/19 maxlen: 19
                          179.108.192.0/20 maxlen: 20
                          179.108.192.0/21 maxlen: 21
                          179.108.192.0/22 maxlen: 22
                          179.108.192.0/23 maxlen: 23
                          179.108.192.0/24 maxlen: 24
                          179.108.194.0/23 maxlen: 23
                          179.108.196.0/22 maxlen: 22
                          179.108.196.0/23 maxlen: 23
                          179.108.198.0/23 maxlen: 23
                          179.108.200.0/21 maxlen: 21
                          179.108.200.0/22 maxlen: 22
                          179.108.200.0/23 maxlen: 23
                          179.108.201.0/24 maxlen: 24
                          179.108.202.0/23 maxlen: 23
                          179.108.202.0/24 maxlen: 24
                          179.108.203.0/24 maxlen: 24
                          179.108.204.0/22 maxlen: 22
                          179.108.204.0/23 maxlen: 23
                          179.108.204.0/24 maxlen: 24
                          179.108.205.0/24 maxlen: 24
                          179.108.206.0/23 maxlen: 23
                          179.108.206.0/24 maxlen: 24
                          179.108.207.0/24 maxlen: 24
                          179.108.208.0/20 maxlen: 20
                          179.108.208.0/21 maxlen: 21
                          179.108.208.0/22 maxlen: 22
                          179.108.208.0/23 maxlen: 23
                          179.108.210.0/23 maxlen: 23
                          179.108.212.0/22 maxlen: 22
                          179.108.212.0/23 maxlen: 23
                          179.108.214.0/23 maxlen: 23
                          179.108.216.0/21 maxlen: 21
                          179.108.216.0/22 maxlen: 22
                          179.108.216.0/23 maxlen: 23
                          179.108.218.0/23 maxlen: 23
                          179.108.220.0/22 maxlen: 22
                          179.108.220.0/23 maxlen: 23
                          179.108.222.0/23 maxlen: 23
                          179.108.224.0/20 maxlen: 20
                          179.108.224.0/21 maxlen: 21
                          179.108.224.0/22 maxlen: 22
                          179.108.224.0/23 maxlen: 23
                          179.108.226.0/23 maxlen: 23
                          179.108.228.0/22 maxlen: 22
                          179.108.228.0/23 maxlen: 23
                          179.108.230.0/23 maxlen: 23
                          179.108.232.0/21 maxlen: 21
                          179.108.232.0/22 maxlen: 22
                          179.108.232.0/23 maxlen: 23
                          179.108.234.0/23 maxlen: 23
                          179.108.236.0/22 maxlen: 22
                          179.108.236.0/23 maxlen: 23
                          179.108.238.0/23 maxlen: 23
                          186.194.208.0/20 maxlen: 20
                          186.194.208.0/21 maxlen: 21
                          186.194.208.0/22 maxlen: 22
                          186.194.208.0/23 maxlen: 23
                          186.194.210.0/23 maxlen: 23
                          186.194.212.0/22 maxlen: 22
                          186.194.212.0/23 maxlen: 23
                          186.194.214.0/23 maxlen: 23
                          186.194.216.0/21 maxlen: 21
                          186.194.216.0/22 maxlen: 22
                          186.194.216.0/23 maxlen: 23
                          186.194.218.0/23 maxlen: 23
                          186.194.220.0/22 maxlen: 22
                          186.194.220.0/23 maxlen: 23
                          186.194.222.0/23 maxlen: 23
                          187.94.192.0/20 maxlen: 20
                          187.94.192.0/21 maxlen: 21
                          187.94.192.0/22 maxlen: 22
                          187.94.192.0/23 maxlen: 23
                          187.94.192.0/24 maxlen: 24
                          187.94.194.0/23 maxlen: 23
                          187.94.196.0/22 maxlen: 22
                          187.94.196.0/23 maxlen: 23
                          187.94.198.0/23 maxlen: 23
                          187.94.200.0/21 maxlen: 21
                          187.94.200.0/22 maxlen: 22
                          187.94.200.0/23 maxlen: 23
                          187.94.202.0/23 maxlen: 23
                          187.94.203.0/24 maxlen: 24
                          187.94.204.0/22 maxlen: 22
                          187.94.204.0/23 maxlen: 23
                          187.94.206.0/23 maxlen: 23
                          2804:1cd8::/32 maxlen: 32
                          2804:1cd8:c000::/36 maxlen: 36
                          2804:1cd8:d000::/36 maxlen: 36
                          2804:1cd8:e000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d0:7e:fa:ce:ed:59:cf:64:11:fa:ed:00:ed:c0:5e:fa:ec:5e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B765B701A47BF72E77B8642ADC280A3017185B9
        Validity
            Not Before: Jan 25 19:42:53 2024 GMT
            Not After : Jan 23 19:47:53 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:0b:cd:4c:51:b4:7d:07:08:27:ba:9e:bc:
                    b1:e4:bf:d9:4b:7b:00:b9:e1:08:fe:bd:76:4c:d7:
                    b1:a6:ab:ac:46:2d:ff:c7:fb:d8:01:f2:b6:81:9a:
                    d3:fe:92:84:94:0d:ce:29:9d:41:af:9b:0d:d8:c0:
                    3d:cc:ac:ec:28:e4:93:bb:01:52:f0:00:6f:d9:e2:
                    4a:e8:91:a0:a5:b8:fb:39:34:73:a9:2a:a7:06:6b:
                    8c:77:c4:96:a8:08:34:61:9e:ad:98:2d:19:9b:0f:
                    e6:70:fe:15:11:ef:0c:43:8f:b7:09:5e:48:c3:08:
                    b9:ec:c0:bf:5c:a5:96:d3:d5:aa:69:1a:f5:ae:ec:
                    46:e4:62:dd:7b:a5:5b:29:70:00:c3:09:df:2f:10:
                    30:d6:23:d6:de:53:a4:43:ed:8e:0b:ba:70:c5:a6:
                    66:e0:a8:25:8d:93:28:a2:1e:1a:1a:93:d2:65:c9:
                    10:e8:0a:96:13:95:f3:2e:d5:a6:e6:89:16:ea:d7:
                    96:5f:97:eb:ed:59:4f:ce:d2:bd:f9:9f:15:86:47:
                    d7:d6:c4:13:a1:b7:90:9b:8c:f4:31:fa:6a:38:71:
                    3f:82:67:ca:82:f4:8c:7e:9e:b4:ee:33:ef:e8:08:
                    22:14:dd:d6:aa:75:fe:47:45:43:f8:de:25:77:ce:
                    c6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:74:30:EC:E7:9B:78:4E:4A:41:C8:A4:05:16:0F:3E:CE:EC:6E:DB
            X509v3 Authority Key Identifier:
                keyid:3B:76:5B:70:1A:47:BF:72:E7:7B:86:42:AD:C2:80:A3:01:71:85:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/3B765B701A47BF72E77B8642ADC280A3017185B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3B765B701A47BF72E77B8642ADC280A3017185B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iwdA4bz4vXHgkgfCh9Jj5ZMbdbNMiTXrn9gPNNtV4vB/0/AS262691.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.200.0/22
                  177.72.20.0/22
                  177.87.204.0/22
                  179.108.192.0-179.108.239.255
                  186.194.208.0/20
                  187.94.192.0/20
                IPv6:
                  2804:1cd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:20:65:05:2a:4a:9d:93:eb:35:b1:4f:49:38:85:b2:10:55:
         87:e8:2f:ab:92:0a:05:07:ae:7c:1a:a7:a0:9d:0f:eb:0b:01:
         72:b1:fa:18:14:20:e9:69:22:da:fb:d2:be:7e:cf:1f:ec:4c:
         f1:31:a9:a6:3e:e0:59:71:07:37:4f:24:17:fd:81:79:7d:9b:
         7e:02:c8:6b:4f:95:6b:cd:17:4c:b3:12:de:f3:66:c9:47:02:
         84:d4:cc:ae:be:c8:ab:b1:dd:9f:3a:64:34:4f:4c:56:13:dc:
         95:4f:af:21:fb:64:d8:6c:83:ba:2c:03:4e:50:bd:a9:b0:50:
         e8:25:e3:ff:cd:6d:96:a6:1b:6e:54:60:db:3f:fd:27:d5:c2:
         dd:c8:6f:d7:68:11:d5:c5:f3:07:ad:45:3d:23:7d:09:b4:96:
         c3:bc:b3:2d:f8:26:fc:b1:06:a2:30:4d:d9:69:3e:2d:16:2d:
         16:ee:30:d6:57:8e:5f:1c:c2:d9:2c:fb:b1:3f:83:f6:83:4a:
         5c:d0:0c:03:69:76:17:ce:51:c5:8d:14:89:06:95:ca:19:c1:
         82:45:99:d5:c9:c7:26:be:bd:79:2e:e0:8f:d1:66:27:f6:26:
         4a:35:fe:66:61:77:1c:6c:0a:13:3d:2c:43:a7:64:8b:3d:4a:
         42:d1:94:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org