Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231372e302f32342d3234203d3e20323633353232.roa
File:                     3137372e3132362e3231372e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          Z5qjBHUQJ4IH3uZxGrGCkzpUevIDLdbyqSSR1a5JaXA=
Subject key identifier:   9C:E5:32:16:D1:08:8A:31:67:FE:CE:48:6C:C9:7D:96:28:50:D3:56
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       1B00DC3E0F27C314173EC4560A14FD601F249E30
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231372e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 28 Dec 2023 17:10:23 +0000
ROA not before:           Thu 28 Dec 2023 17:05:23 +0000
ROA not after:            Thu 26 Dec 2024 17:10:23 +0000
asID:                     263522
IP address blocks:        177.126.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:00:dc:3e:0f:27:c3:14:17:3e:c4:56:0a:14:fd:60:1f:24:9e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Dec 28 17:05:23 2023 GMT
            Not After : Dec 26 17:10:23 2024 GMT
        Subject: CN=9CE53216D1088A3167FECE486CC97D962850D356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:db:f3:05:8b:ba:a0:2f:c1:51:80:9c:0a:c0:
                    c7:d3:68:ea:3f:a1:c4:44:53:3b:8a:71:42:76:78:
                    c1:06:37:a7:dc:ee:56:f1:08:f8:08:7c:6d:cb:47:
                    91:5b:26:35:af:58:57:1c:6f:a2:67:84:44:46:b1:
                    42:0c:93:af:bd:10:eb:05:a1:a5:80:02:30:45:b5:
                    bc:07:9c:ac:41:d9:6e:10:96:b8:c7:b4:d4:44:1d:
                    88:99:e9:e9:be:46:91:d8:68:47:3e:e0:81:89:63:
                    31:57:5b:a7:a3:28:bb:40:8d:22:06:fb:d4:61:62:
                    4c:d8:44:ee:ec:32:d0:5a:35:b7:2e:e4:af:d1:40:
                    56:a5:3e:f4:f6:21:3e:bb:39:65:49:b1:e5:94:29:
                    69:ef:7e:d8:4d:c8:2c:2f:6a:fe:87:aa:a7:0d:db:
                    8a:d1:8a:f3:6c:8e:17:88:42:c3:b0:aa:af:f1:aa:
                    98:d9:00:9c:3b:33:9a:ba:32:b1:6e:99:41:3a:e2:
                    2a:74:41:d4:13:78:f6:d2:45:0b:30:a8:4b:db:b1:
                    0c:58:5b:fe:36:b9:ad:4b:4c:36:7a:a5:18:9a:d3:
                    ad:7c:79:1d:9d:77:24:07:66:f6:70:61:37:ee:c6:
                    4b:7c:ea:83:d8:6d:c7:27:77:7e:4e:45:f1:dc:d3:
                    36:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E5:32:16:D1:08:8A:31:67:FE:CE:48:6C:C9:7D:96:28:50:D3:56
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231372e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:99:c3:1b:fb:45:58:8a:7b:6a:9f:8a:b3:c0:a4:1e:a8:c2:
         5b:d3:37:4f:61:96:88:a1:02:d6:a0:bb:a3:ca:64:5a:7e:4a:
         83:c4:bb:1b:c4:e1:2c:93:7b:ba:5d:11:e8:a3:e2:29:a6:19:
         19:1a:15:df:0a:64:89:65:46:bf:37:4a:bf:b9:1c:8d:5d:6a:
         50:77:aa:f5:ec:ee:8a:e9:d3:4f:91:e9:06:e5:e0:98:04:08:
         dd:6b:0b:36:8d:ac:99:c4:eb:9d:0c:12:22:27:6d:4a:45:79:
         fb:f3:2c:ff:dd:6d:85:76:30:be:3d:5e:d1:d1:64:ad:30:47:
         8e:2b:20:2f:94:b6:04:e1:70:6b:96:7e:51:46:25:7a:d1:ba:
         37:47:73:7c:a1:99:65:3b:2d:89:68:01:0b:ee:97:57:73:f7:
         f5:32:b6:9a:d2:d1:67:7d:ee:33:c5:8b:10:33:26:1b:20:2d:
         e5:5c:7a:fb:a7:a5:0d:c8:0a:c6:31:53:08:5e:43:2b:f4:43:
         88:83:2a:4c:e1:00:4a:07:f9:17:6f:5d:e2:69:19:29:c5:bb:
         d8:b8:cc:6b:8e:d5:67:ea:50:ff:ce:27:49:25:03:8b:46:60:
         b3:e3:d3:5e:73:e7:7e:3d:86:ff:89:d9:96:e6:1f:36:ce:d9:
         72:7f:5e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org