Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231362e302f32322d3232203d3e20323633353232.roa
File:                     3137372e3132362e3231362e302f32322d3232203d3e20323633353232.roa (raw, json)
Hash identifier:          0ricgBrmpf5WnPE2JgfjFEBm0Kk6tq4r+EgsCIrYfFM=
Subject key identifier:   B7:FC:5B:8D:BE:BA:D0:59:DF:6C:9A:30:25:09:1A:CE:39:F5:2C:68
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       2DD72AFD13DB21B74D43DF380D910F78D50648F6
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231362e302f32322d3232203d3e20323633353232.roa
Signing time:             Wed 25 Oct 2023 01:01:05 +0000
ROA not before:           Wed 25 Oct 2023 00:56:05 +0000
ROA not after:            Wed 23 Oct 2024 01:01:05 +0000
asID:                     263522
IP address blocks:        177.126.216.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d7:2a:fd:13:db:21:b7:4d:43:df:38:0d:91:0f:78:d5:06:48:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Oct 25 00:56:05 2023 GMT
            Not After : Oct 23 01:01:05 2024 GMT
        Subject: CN=B7FC5B8DBEBAD059DF6C9A3025091ACE39F52C68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9d:85:33:6c:97:e9:cd:f3:69:ed:b0:97:58:
                    63:c2:08:46:3b:05:98:b3:7d:ce:72:76:9d:04:97:
                    4b:e9:0d:70:5b:57:d0:94:c5:03:2b:53:0e:b1:4e:
                    27:d9:40:d4:cf:d7:14:6c:39:b2:a8:57:3d:3b:fc:
                    10:11:d2:20:e9:ba:89:69:fb:45:c8:b2:21:71:3b:
                    d6:c5:fe:2c:41:70:93:cb:df:39:b4:c3:2f:4c:ec:
                    85:95:d2:55:2e:12:17:3f:db:92:d1:12:34:0d:63:
                    3d:56:36:0a:24:47:da:ce:47:74:9c:97:8e:ca:fa:
                    b8:73:39:c5:eb:31:06:b4:c4:d6:9b:01:88:10:83:
                    ec:97:a3:3b:ff:0d:ca:b8:9b:3f:8d:e2:c6:39:37:
                    98:1d:e9:37:7f:9b:23:a8:2e:41:4a:20:22:0a:28:
                    cd:df:71:c9:5e:bc:22:82:71:45:6c:d5:ff:56:24:
                    11:06:b3:43:9e:2e:23:09:5e:d7:8e:08:c0:99:42:
                    dd:65:4b:47:74:64:80:5b:40:d8:6a:0b:fb:5f:0f:
                    36:88:03:29:c8:2a:d6:ba:69:6f:b0:a8:d5:94:f8:
                    ad:ed:77:9d:9d:31:11:cc:31:5b:02:1d:90:c2:aa:
                    d7:39:37:09:e4:eb:74:51:1c:12:1d:e5:18:3b:75:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:FC:5B:8D:BE:BA:D0:59:DF:6C:9A:30:25:09:1A:CE:39:F5:2C:68
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231362e302f32322d3232203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:08:92:9e:33:47:0d:ed:cc:f8:0a:ff:0a:c9:9d:88:aa:25:
         73:11:8e:5e:ff:4b:1a:ed:1a:18:c0:41:3e:86:64:1a:dc:be:
         63:43:d0:36:98:c3:ff:e4:88:b8:8f:dd:6c:00:33:e1:43:b1:
         34:0f:fc:c8:d5:50:0e:99:34:b4:9a:3b:fd:0f:d3:b1:fc:bc:
         8f:7a:e2:c0:35:67:a5:8e:4c:78:c3:5e:6b:a8:39:60:14:18:
         f2:3f:2f:1b:9c:2c:b7:ad:f4:bb:57:42:15:1e:d6:5d:e2:ba:
         c7:b7:eb:eb:97:5d:84:67:92:d1:fe:1b:ef:62:98:a0:46:44:
         d1:96:9e:84:44:0b:08:88:91:bf:3a:b5:0d:ee:c8:7d:df:6c:
         d9:6a:38:e8:bb:bb:ed:d3:31:94:69:fa:a3:88:79:2e:32:0b:
         c5:43:bc:cf:9b:1c:4b:23:e0:3c:51:93:f6:b9:cd:fd:39:74:
         d7:3c:93:4e:41:d3:05:cd:75:2a:f4:10:c4:2f:20:19:71:8a:
         30:2b:61:78:e1:b4:50:7c:29:24:eb:1d:f0:c7:ca:13:c2:21:
         99:f4:d0:88:b3:76:6e:11:80:f7:9b:ba:be:48:24:03:f4:24:
         60:1b:24:5f:6c:35:de:95:e8:0f:73:6f:38:ff:91:45:ac:f6:
         6b:0d:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:14 2025 by rpki-client