Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231362e302f32342d3234203d3e20323633353232.roa
File:                     3137372e3132362e3231362e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          syUmEo0Djkjyc2R/AUicjNsr1to6Mqq9S0+gCiciWA8=
Subject key identifier:   6C:DE:77:8F:22:8E:CC:73:03:0C:EF:E2:73:60:70:CE:81:11:63:24
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       0BDC7A659E75C90949937D25C320D977BB6F086E
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231362e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 28 Dec 2023 17:09:32 +0000
ROA not before:           Thu 28 Dec 2023 17:04:32 +0000
ROA not after:            Thu 26 Dec 2024 17:09:32 +0000
asID:                     263522
IP address blocks:        177.126.216.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:dc:7a:65:9e:75:c9:09:49:93:7d:25:c3:20:d9:77:bb:6f:08:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Dec 28 17:04:32 2023 GMT
            Not After : Dec 26 17:09:32 2024 GMT
        Subject: CN=6CDE778F228ECC73030CEFE2736070CE81116324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1c:08:eb:1e:63:c4:62:2f:df:56:a4:75:83:
                    e1:ec:3b:ff:fd:94:e1:85:bf:90:77:e2:19:ce:5a:
                    be:7f:7f:7b:e2:45:a9:66:a5:13:38:2d:7f:3a:c0:
                    0f:4a:21:37:01:03:c6:70:78:c4:84:3f:57:91:c2:
                    cf:42:d4:f8:97:8d:92:3c:26:e2:4d:9e:9e:80:7d:
                    8f:a1:5e:6a:03:2e:d2:65:cb:5f:c0:0a:85:37:33:
                    d3:c5:45:b7:16:79:e2:2e:7a:10:90:22:c4:d1:09:
                    ec:7c:0d:d3:2a:d0:c4:14:55:a6:4d:78:fc:8c:e3:
                    54:0e:07:65:a4:99:f9:50:68:59:c0:48:7c:dd:13:
                    70:82:34:45:87:e8:ad:ad:b2:24:9f:8c:0c:44:06:
                    3b:a3:f0:b3:6e:a3:e8:e5:24:a1:65:ad:1f:df:58:
                    43:5d:63:21:06:1d:81:27:79:8f:1d:66:86:d4:f6:
                    cc:af:d9:71:28:57:0a:72:4a:95:ad:40:79:79:14:
                    97:40:c6:49:57:e9:42:31:52:eb:50:83:ac:64:e4:
                    2a:92:3d:8f:fc:5a:c8:fc:e5:d5:36:5e:e0:63:90:
                    f7:08:ee:ff:83:76:d7:04:8b:13:1f:c0:a9:b4:76:
                    b5:87:5d:5b:fa:04:cd:6b:75:b6:9d:e2:fa:48:7b:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DE:77:8F:22:8E:CC:73:03:0C:EF:E2:73:60:70:CE:81:11:63:24
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231362e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:b6:a0:ea:d3:e0:78:cf:c9:16:25:c5:e2:cd:25:0d:48:f3:
         fa:67:dd:f9:b5:69:fc:6b:c8:f5:0f:94:00:5f:40:cb:5a:16:
         3e:72:24:9c:89:42:55:24:b1:6b:eb:17:66:66:d3:47:91:36:
         bf:20:a2:3f:08:91:34:80:94:27:9e:e9:9e:2b:2e:1d:91:9c:
         c9:1a:31:27:5c:bf:7e:ed:d2:ef:be:f4:e9:f8:50:fa:05:ab:
         54:7d:f8:20:01:ce:77:12:d6:aa:ca:e5:42:d8:42:a7:3e:59:
         86:74:7f:64:2d:a7:9c:fa:e8:00:ce:8e:8d:d8:47:2d:75:ae:
         88:cf:74:cd:17:12:ae:9e:b1:22:46:54:e2:79:4f:27:a4:2d:
         56:18:45:f0:30:5b:6e:04:99:06:6a:30:65:f5:48:0c:fb:33:
         49:c4:69:db:0b:32:68:d2:3a:7d:7d:1e:ca:38:d3:54:b2:a0:
         84:56:cd:3c:2b:90:f3:13:d2:6e:ad:59:23:07:e9:47:89:72:
         11:ba:0f:21:65:68:c8:1f:dd:e2:eb:74:ea:6c:f5:9d:b8:3b:
         d1:89:8b:fa:5a:70:cb:90:4a:ae:cc:b3:93:89:71:e8:3b:8e:
         c1:8e:12:69:3d:93:2a:84:36:83:4c:40:ad:01:ff:4f:1a:f2:
         b9:bd:7f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org