Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231362e302f32312d3332203d3e20323633353232.roa
File:                     3137372e3132362e3231362e302f32312d3332203d3e20323633353232.roa (raw, json)
Hash identifier:          BnHGakniUiruXJ189wjBacVRJLUxvTpsx7hFSC/w0tg=
Subject key identifier:   DF:0E:6A:83:AF:76:A6:0C:62:75:EA:DC:B5:D3:73:70:D2:D8:29:E6
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       7AA30DBA38C7BFD4C57591649536CA8C2DB343B1
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231362e302f32312d3332203d3e20323633353232.roa
Signing time:             Mon 16 Oct 2023 16:48:43 +0000
ROA not before:           Mon 16 Oct 2023 16:43:43 +0000
ROA not after:            Mon 14 Oct 2024 16:48:43 +0000
asID:                     263522
IP address blocks:        177.126.216.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a3:0d:ba:38:c7:bf:d4:c5:75:91:64:95:36:ca:8c:2d:b3:43:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Oct 16 16:43:43 2023 GMT
            Not After : Oct 14 16:48:43 2024 GMT
        Subject: CN=DF0E6A83AF76A60C6275EADCB5D37370D2D829E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9b:8b:ab:ac:da:a6:1e:1a:5f:4d:58:32:ce:
                    76:41:c4:ca:9e:33:42:22:af:bf:41:62:81:c2:f9:
                    37:2a:83:2a:e8:a8:25:17:39:f7:54:e7:93:53:d7:
                    80:a6:68:51:d4:d5:3d:67:6c:01:49:fb:6c:bc:b8:
                    19:d3:78:f1:23:a9:2c:0b:5a:d7:03:45:5c:a8:ea:
                    a4:17:d6:dd:64:01:09:ac:92:4a:e0:47:f9:b5:f1:
                    d3:d4:d7:db:96:0c:2a:92:4c:e8:1f:f8:5b:1e:d4:
                    ee:44:c2:0f:c2:76:b8:a7:65:94:0f:0d:08:e5:1b:
                    f6:e2:af:0a:65:e2:91:c0:fd:c5:47:24:25:5b:23:
                    c7:ba:4a:f7:f5:68:3f:44:48:07:15:94:c2:07:67:
                    e4:bc:16:2a:50:87:23:50:c2:60:6a:14:af:22:02:
                    35:38:87:1b:15:96:02:75:2e:99:72:72:2b:4b:f0:
                    0c:73:d9:90:57:c5:b4:81:55:99:34:42:d6:d1:22:
                    67:c8:29:24:22:e1:66:ae:5d:7a:d4:9f:16:d6:66:
                    ee:4e:45:92:93:ae:4e:80:1a:41:40:95:57:78:f2:
                    14:2f:e4:52:54:4d:28:04:4e:8c:75:a2:46:2f:c4:
                    59:ec:ad:1a:2d:d9:5c:00:a6:5a:4c:0f:37:dd:6d:
                    1b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0E:6A:83:AF:76:A6:0C:62:75:EA:DC:B5:D3:73:70:D2:D8:29:E6
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231362e302f32312d3332203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:da:7b:16:4c:ba:69:d7:29:9e:ac:69:ef:0d:b7:24:af:11:
         04:20:30:ce:04:bf:2e:22:e6:a7:13:88:ef:1f:7a:6c:82:9e:
         c3:66:a9:70:51:1c:5c:5b:f3:58:58:94:5b:c1:ea:fb:b9:21:
         07:54:8c:99:7e:df:59:d1:7e:cc:69:65:3c:24:c3:64:cd:82:
         a4:6b:48:3b:4c:8d:9b:21:c7:5d:cb:c6:76:b1:2c:64:89:d7:
         af:a5:fe:3b:0d:93:30:b4:99:97:d1:eb:94:7a:14:2c:65:83:
         4f:11:e3:76:c5:74:a8:bb:8a:ee:a1:f3:0a:88:7e:38:ea:14:
         8c:f3:ff:8c:fb:c9:dc:9a:58:b2:e2:cb:d3:67:cc:60:35:0c:
         b9:e8:0a:d4:50:75:ef:5f:9f:bd:0e:07:b2:a1:ee:06:4f:7a:
         df:1b:a2:e6:31:0e:b3:a1:82:3f:3a:e3:29:45:0c:09:43:df:
         79:7a:3f:63:9d:e0:12:ce:1a:37:46:e1:63:fc:0e:3f:c1:1c:
         98:6f:59:92:4d:e6:8f:d7:75:e6:ee:56:f2:d2:52:af:f2:1f:
         b4:a5:1d:55:e0:a4:70:f6:5f:fb:0e:43:e2:bf:5e:ec:cd:6c:
         32:86:8e:c7:c6:12:92:8d:12:66:41:1a:12:b9:d4:2b:4b:28:
         33:5c:e3:30
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeqMNujjHv9TFdZFklTbKjC2zQ7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ0MkUwMzZEQjNCRUYxQjUwN0NCREI2QTFBQjhBMzZC
OENGNzZFQzAeFw0yMzEwMTYxNjQzNDNaFw0yNDEwMTQxNjQ4NDNaMDMxMTAvBgNV
BAMTKERGMEU2QTgzQUY3NkE2MEM2Mjc1RUFEQ0I1RDM3MzcwRDJEODI5RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWm4urrNqmHhpfTVgyznZBxMqe
M0Iir79BYoHC+TcqgyroqCUXOfdU55NT14CmaFHU1T1nbAFJ+2y8uBnTePEjqSwL
WtcDRVyo6qQX1t1kAQmskkrgR/m18dPU19uWDCqSTOgf+Fse1O5Ewg/CdrinZZQP
DQjlG/birwpl4pHA/cVHJCVbI8e6Svf1aD9ESAcVlMIHZ+S8FipQhyNQwmBqFK8i
AjU4hxsVlgJ1LplycitL8Axz2ZBXxbSBVZk0QtbRImfIKSQi4WauXXrUnxbWZu5O
RZKTrk6AGkFAlVd48hQv5FJUTSgETox1okYvxFnsrRot2VwAplpMDzfdbRvVAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU3w5qg692pgxiderctdNzcNLYKeYwHwYDVR0j
BBgwFoAUbULgNts77xtQfL22oauKNrjPduwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR244Vk54aVlNUUpSOGZkcTZFVU1LWlJKdlFFdGJGWTRLV2lkdG5lZURR
SDYvMC82RDQyRTAzNkRCM0JFRjFCNTA3Q0JEQjZBMUFCOEEzNkI4Q0Y3NkVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZENDJFMDM2REIzQkVGMUI1
MDdDQkRCNkExQUI4QTM2QjhDRjc2RUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duOFZOeGlZTVFKUjhmZHE2RVVNS1pSSnZRRXRiRlk0S1dpZHRuZWVEUUg2LzAv
MzEzNzM3MmUzMTMyMzYyZTMyMzEzNjJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDMy
MzYzMzM1MzIzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEA7F+2DANBgkqhkiG9w0BAQsFAAOCAQEAm9p7
Fky6adcpnqxp7w23JK8RBCAwzgS/LiLmpxOI7x96bIKew2apcFEcXFvzWFiUW8Hq
+7khB1SMmX7fWdF+zGllPCTDZM2CpGtIO0yNmyHHXcvGdrEsZInXr6X+Ow2TMLSZ
l9HrlHoULGWDTxHjdsV0qLuK7qHzCoh+OOoUjPP/jPvJ3JpYsuLL02fMYDUMuegK
1FB171+fvQ4HsqHuBk963xui5jEOs6GCPzrjKUUMCUPfeXo/Y53gEs4aN0bhY/wO
P8EcmG9Zkk3mj9d15u5W8tJSr/IftKUdVeCkcPZf+w5D4r9e7M1sMoaOx8YSko0S
ZkEaErnUK0soM1zjMA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org