Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/3137372e3130342e3230382e302f32302d3230203d3e20323632363338.roa
File:                     3137372e3130342e3230382e302f32302d3230203d3e20323632363338.roa (raw, json)
Hash identifier:          BuIO8B6SVo6ZS2QkmAp3gP/gF/0DO2vMr+tlNkufe9Q=
Subject key identifier:   1E:0E:55:AD:77:5C:3A:63:D4:7E:D0:23:BC:96:54:5B:B3:67:C2:53
Certificate issuer:       /CN=16EEF2CD6AC6817D041ABFC8372B616BC31878AE
Certificate serial:       34D33F7A3EBD3642465011DD99468C0769EF9DAF
Authority key identifier: 16:EE:F2:CD:6A:C6:81:7D:04:1A:BF:C8:37:2B:61:6B:C3:18:78:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16EEF2CD6AC6817D041ABFC8372B616BC31878AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/3137372e3130342e3230382e302f32302d3230203d3e20323632363338.roa
Signing time:             Wed 07 Sep 2022 13:00:00 +0000
ROA not before:           Wed 07 Sep 2022 12:55:00 +0000
ROA not after:            Wed 06 Sep 2023 13:00:00 +0000
asID:                     262638
IP address blocks:        177.104.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d3:3f:7a:3e:bd:36:42:46:50:11:dd:99:46:8c:07:69:ef:9d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16EEF2CD6AC6817D041ABFC8372B616BC31878AE
        Validity
            Not Before: Sep  7 12:55:00 2022 GMT
            Not After : Sep  6 13:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a6:ea:b4:c8:86:2e:1e:44:d2:b9:75:6a:7a:
                    0e:46:b6:f8:c3:50:7d:2b:92:56:d7:9b:ea:37:fa:
                    c7:57:42:bc:45:4d:f5:5e:1b:4b:44:62:3b:c8:2a:
                    54:b9:53:30:15:c0:9c:e2:90:b1:d9:87:12:db:23:
                    f2:8e:c6:e0:eb:02:71:1b:64:87:9c:70:2b:05:12:
                    84:4c:e0:89:dc:1b:71:a5:bb:ed:39:9e:44:20:20:
                    fc:b9:97:2d:84:2a:6c:03:b0:c7:e3:d7:ac:0a:43:
                    10:16:3d:5f:c0:d6:85:b1:be:ec:c3:c0:28:cd:0d:
                    22:e8:e0:b0:96:5f:8f:1e:bc:9e:78:ef:cf:d5:c5:
                    d8:08:51:10:d7:9a:c4:3d:4d:99:f7:d8:16:c4:3e:
                    e5:e2:5b:73:e8:7a:7a:33:d1:94:52:84:5f:00:58:
                    98:f5:36:2e:a9:59:96:48:91:28:8e:b8:41:d8:28:
                    b3:be:2d:d0:91:5e:d8:4c:23:00:2f:87:2a:e2:ea:
                    ff:04:2d:5d:d2:ce:f4:34:aa:42:95:90:72:09:95:
                    50:39:61:42:ad:7e:01:8f:7b:3a:de:0f:38:0b:62:
                    86:40:0f:d2:c5:98:25:c7:27:3b:92:e2:50:e5:7c:
                    53:56:29:4a:50:76:fb:d7:05:62:05:94:9e:9c:86:
                    cc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:0E:55:AD:77:5C:3A:63:D4:7E:D0:23:BC:96:54:5B:B3:67:C2:53
            X509v3 Authority Key Identifier:
                keyid:16:EE:F2:CD:6A:C6:81:7D:04:1A:BF:C8:37:2B:61:6B:C3:18:78:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/16EEF2CD6AC6817D041ABFC8372B616BC31878AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/16EEF2CD6AC6817D041ABFC8372B616BC31878AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVNdjPpUN9szUebhrT7fWH7yDN9BxY9wAaxjejy6gTx4/0/3137372e3130342e3230382e302f32302d3230203d3e20323632363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.104.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:34:64:62:fe:be:da:e3:3b:3e:6a:a0:57:dc:60:70:40:8f:
         0f:9e:5f:9f:38:ea:7d:d6:ae:48:a2:fd:e7:08:97:63:66:78:
         07:ef:10:7a:68:42:9b:79:0d:c3:7c:68:3a:a3:14:dd:03:23:
         f6:1d:0d:21:08:94:e3:c0:6c:7c:28:d1:72:4f:bf:74:cb:69:
         fb:d6:cc:a6:72:41:e4:9f:24:0f:71:3a:29:fe:0c:7d:1b:93:
         b2:9d:fb:7c:f4:4a:58:2d:cf:54:96:6d:ad:11:b3:d4:ea:ce:
         e4:13:a3:8a:f9:21:bb:11:c0:92:73:6d:2d:e1:a2:cc:1f:68:
         84:87:d0:58:53:8b:b3:35:28:f1:11:b5:44:02:76:db:c5:67:
         a6:52:dd:43:58:67:1c:76:10:3d:b5:20:60:fc:25:7e:41:14:
         47:5a:f2:2c:23:f3:ba:5b:47:13:cf:e6:9e:0a:00:bc:20:99:
         05:10:80:2a:50:54:8b:d0:2f:e3:39:75:3d:6a:71:d8:6d:c1:
         ae:48:8c:40:ab:01:51:d7:03:47:ba:28:55:28:8b:78:cf:62:
         56:d4:ca:46:d0:54:4f:03:76:00:ad:87:2e:a9:b4:58:36:38:
         ff:ca:27:f2:7a:f9:a4:d6:eb:dd:91:62:9a:48:bc:10:03:58:
         9f:df:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:53 2024 by rpki-client on console-fra.rpki-client.org