Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231382e302f32332d3233203d3e20323633353232.roa
File:                     3137372e3132362e3231382e302f32332d3233203d3e20323633353232.roa (raw, json)
Hash identifier:          X3EI9LZS1d3/HnNWVEEPT95wtlUYUgaUBvLA5LkwKjs=
Subject key identifier:   84:B7:EB:10:95:C5:59:ED:E2:DE:5C:CF:1E:29:62:F4:1C:FE:BD:52
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       5784E53DA6C83F994A4CC1688327724F097F4CFD
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231382e302f32332d3233203d3e20323633353232.roa
Signing time:             Wed 25 Oct 2023 01:01:10 +0000
ROA not before:           Wed 25 Oct 2023 00:56:10 +0000
ROA not after:            Wed 23 Oct 2024 01:01:10 +0000
asID:                     263522
IP address blocks:        177.126.218.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:84:e5:3d:a6:c8:3f:99:4a:4c:c1:68:83:27:72:4f:09:7f:4c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Oct 25 00:56:10 2023 GMT
            Not After : Oct 23 01:01:10 2024 GMT
        Subject: CN=84B7EB1095C559EDE2DE5CCF1E2962F41CFEBD52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3b:8f:f7:44:d4:61:a2:57:e2:8a:17:b9:6c:
                    8c:a5:93:0a:d9:4e:03:4a:80:1b:ca:82:18:cf:0d:
                    a3:f7:c5:3f:92:b0:34:00:36:3f:ca:42:c5:21:1e:
                    52:f9:22:67:f7:39:4a:8b:d5:70:51:3f:d9:a0:40:
                    d0:bd:fb:08:a3:15:e8:ac:fa:17:af:f7:52:26:4f:
                    05:a0:eb:87:82:ff:ea:3e:61:26:b1:9c:5f:bd:60:
                    66:2a:00:4c:97:cf:1b:48:c0:03:b4:16:d0:1a:90:
                    e7:50:6d:47:f6:60:d6:64:17:b6:5f:d5:e3:c2:c2:
                    ae:3e:79:3b:e6:40:f3:8e:b8:79:22:e4:25:40:79:
                    a1:fb:80:26:0d:5a:f2:84:9b:c2:f6:7a:82:25:40:
                    54:28:f3:ef:4d:04:0b:8f:2b:b7:01:a8:5c:0a:b8:
                    cc:11:92:79:48:16:3b:09:85:cb:fb:39:94:38:23:
                    64:83:8c:29:74:27:b1:ca:e7:b8:df:32:c3:f2:47:
                    2e:49:1d:cc:29:75:3b:6b:6c:92:19:73:bd:42:e0:
                    10:71:ce:dc:9d:03:1f:d9:dc:75:d4:52:80:e5:dd:
                    12:f3:85:81:ff:6e:6f:8a:af:dd:0e:18:5f:fc:be:
                    9d:40:73:60:9b:33:1a:5a:8e:98:e9:84:fe:b9:a2:
                    4d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B7:EB:10:95:C5:59:ED:E2:DE:5C:CF:1E:29:62:F4:1C:FE:BD:52
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231382e302f32332d3233203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:30:54:c1:f3:fa:1b:f6:fc:94:f7:35:a3:b7:70:34:be:d7:
         57:5c:94:98:db:36:b9:15:91:22:0c:97:f1:f7:c2:e2:9c:85:
         ae:fe:ac:f6:78:5d:44:a5:0d:dc:54:21:9c:cd:62:6f:81:e1:
         8e:3d:e0:b2:6a:05:50:ca:04:ca:ba:30:5f:d1:1e:f4:61:c3:
         88:9e:90:d4:f9:db:3f:cb:38:11:eb:76:0f:d6:e2:84:d0:5f:
         f6:2f:f2:45:ac:7f:69:e3:06:9b:f0:94:3a:5f:8d:9a:96:3d:
         69:98:88:7c:7e:5c:42:23:6d:36:16:0a:aa:17:ff:f6:1c:d3:
         c9:50:79:3c:f4:f1:1e:85:fd:d6:a4:f5:05:23:f3:a9:f1:cb:
         12:87:5d:c8:58:2e:9c:4c:99:84:66:fb:8b:e0:4f:de:b9:17:
         7b:1d:43:c8:46:0b:52:a9:cc:16:82:21:9b:a2:78:10:af:93:
         8c:74:77:c7:5d:b5:6d:3f:8a:7c:86:d6:e6:70:0f:de:7f:c2:
         d3:27:ae:9e:22:d0:8e:91:73:db:cf:54:22:ba:86:11:e1:86:
         1a:d2:6e:c3:ef:24:d9:44:70:40:d8:05:1d:11:69:64:ec:86:
         c6:cd:86:d0:42:f2:d9:b5:fd:4b:7a:2b:84:0a:b9:4f:71:54:
         98:30:60:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org