Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa
File:                     3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          7CkazhlaCGzDyH7kZkkd8dFqDU7DdsLLwYcxfwY+c6U=
Subject key identifier:   E2:9D:E4:09:32:DD:2A:C6:9E:2B:B2:F6:0F:EC:85:25:EE:41:77:E2
Certificate issuer:       /CN=E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9
Certificate serial:       404BB6FAEF756C01F8C30CD6A77CDEA3697460AF
Authority key identifier: E8:D0:AB:35:90:AF:D5:70:B1:D7:BE:8C:A6:1A:93:9D:37:E0:06:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa
Signing time:             Sun 19 Nov 2023 06:39:47 +0000
ROA not before:           Sun 19 Nov 2023 06:34:47 +0000
ROA not after:            Sun 17 Nov 2024 06:39:47 +0000
asID:                     263584
IP address blocks:        177.129.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:4b:b6:fa:ef:75:6c:01:f8:c3:0c:d6:a7:7c:de:a3:69:74:60:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9
        Validity
            Not Before: Nov 19 06:34:47 2023 GMT
            Not After : Nov 17 06:39:47 2024 GMT
        Subject: CN=E29DE40932DD2AC69E2BB2F60FEC8525EE4177E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:ac:2a:28:26:60:fb:58:20:36:28:34:57:
                    fe:69:bb:2f:84:22:06:e9:bc:5f:b1:28:ae:ee:f1:
                    31:1b:3c:5d:26:00:ed:7f:52:f1:d3:e0:fc:de:c1:
                    0f:6b:44:47:dc:1b:27:fa:0b:97:21:06:e8:f4:9d:
                    a3:e6:ad:00:91:7f:b3:f5:70:70:34:fe:ee:31:05:
                    a9:43:cc:de:a7:0b:43:b3:ce:bf:09:63:9a:fb:79:
                    5e:ef:9f:47:c1:67:eb:eb:ce:cb:38:ae:22:27:c9:
                    1a:3d:c1:3e:e0:5c:02:53:07:44:59:b4:a0:b0:0a:
                    9f:19:44:4c:03:a7:16:b8:2f:ab:9f:cd:1f:b8:10:
                    79:52:b6:6a:f7:15:71:07:fb:2c:85:3e:71:f3:e5:
                    c3:20:e5:85:4c:f7:d6:18:17:0e:dd:11:1f:27:44:
                    e5:12:a3:d6:90:4d:40:fe:ae:e8:10:f4:56:f5:26:
                    59:af:6d:dc:64:55:35:79:77:98:c4:b5:d1:07:3d:
                    b7:fa:f8:e1:05:dc:ce:5c:e2:f3:28:38:ce:e6:2a:
                    6e:70:65:43:17:ef:b7:3b:40:5c:44:79:f2:9e:1e:
                    65:87:8e:2a:6c:e1:48:ff:39:e8:f7:e4:d3:d6:2c:
                    f1:8b:d2:67:6a:e7:75:32:cb:48:e0:56:f1:1e:d2:
                    27:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9D:E4:09:32:DD:2A:C6:9E:2B:B2:F6:0F:EC:85:25:EE:41:77:E2
            X509v3 Authority Key Identifier:
                keyid:E8:D0:AB:35:90:AF:D5:70:B1:D7:BE:8C:A6:1A:93:9D:37:E0:06:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8D0AB3590AFD570B1D7BE8CA61A939D37E006F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133372e302f32342d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:8c:a3:ce:30:be:cf:19:37:3d:d8:83:6b:15:c9:44:9b:ec:
         1f:13:39:1f:1a:78:1d:c3:96:f8:ff:16:2f:db:21:22:26:af:
         6e:07:76:fb:d3:e7:cb:9e:d7:00:b3:97:a9:b2:8a:f3:ab:64:
         e1:11:1a:34:3d:22:42:b2:7d:52:be:9c:eb:61:cd:5b:14:2b:
         12:de:32:0b:96:7e:df:d1:fe:79:32:52:21:c2:b1:1d:1c:9c:
         d3:f9:bf:4a:78:87:09:6b:1c:93:2b:3c:b3:43:c5:b7:6a:35:
         32:cf:29:05:ec:5e:06:f0:b0:8a:0a:d8:f9:91:05:4d:a1:71:
         b0:7c:d1:7b:98:e5:5a:88:7c:28:9e:6b:bf:16:13:7c:b0:37:
         3c:8c:0f:f5:18:3e:63:4d:11:77:25:d3:df:c8:cc:31:a2:38:
         a8:27:cb:67:f5:d0:fa:7c:16:79:c3:2f:a1:d8:dd:42:ac:bc:
         90:2f:bd:0f:3a:8d:19:84:d6:c4:50:2c:5d:c4:83:f4:69:b0:
         26:95:cd:43:e5:a6:59:e4:4b:3a:76:4c:1f:42:bd:a5:07:19:
         81:9b:59:4d:dd:e7:e5:ab:c8:0a:1c:01:01:0e:bf:76:14:24:
         b0:9c:d9:b6:9a:fb:88:fc:5c:ca:f7:2c:46:2d:b7:99:f7:19:
         3c:92:4e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org