Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231382e302f32342d3234203d3e20323633353232.roa
File:                     3137372e3132362e3231382e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          /+PKJbFxzgHzaxb6t0KLsoPywj/rWIzOOSguHq0+RfQ=
Subject key identifier:   BC:00:98:92:9A:0E:EB:4F:73:B1:AC:1F:CF:E1:E4:9F:21:28:C6:7A
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       054107E18FFFC420CF313C98D70A6B57393360F5
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231382e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 28 Dec 2023 17:10:35 +0000
ROA not before:           Thu 28 Dec 2023 17:05:35 +0000
ROA not after:            Thu 26 Dec 2024 17:10:35 +0000
asID:                     263522
IP address blocks:        177.126.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:41:07:e1:8f:ff:c4:20:cf:31:3c:98:d7:0a:6b:57:39:33:60:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Dec 28 17:05:35 2023 GMT
            Not After : Dec 26 17:10:35 2024 GMT
        Subject: CN=BC0098929A0EEB4F73B1AC1FCFE1E49F2128C67A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:f7:a4:17:6a:90:b9:f4:71:72:48:18:e8:
                    41:96:7a:b8:75:8e:44:3d:fc:dd:3b:f6:47:9e:1d:
                    de:87:c9:7b:7f:d6:ba:0a:ae:4d:3d:a1:fa:1c:12:
                    da:19:f6:f9:c1:54:55:a8:57:59:44:be:57:b7:cc:
                    54:95:a7:67:4f:0c:60:6e:fd:d4:d7:f3:fa:96:19:
                    c1:63:18:c2:7e:5d:1c:08:be:0b:95:80:d9:e0:dd:
                    1e:39:62:35:ac:87:08:88:fe:d1:40:ff:bd:84:b7:
                    ec:e7:8a:f4:9e:46:21:40:da:03:88:75:03:e1:e0:
                    a5:0f:bc:2e:dd:93:c2:54:92:b3:91:4d:1a:6c:56:
                    da:14:96:28:13:e1:05:a3:f0:d7:6b:c5:4f:fe:2f:
                    6d:1b:43:93:eb:fc:18:d3:de:51:83:54:73:69:b4:
                    d6:38:4e:de:1d:91:36:3d:80:bb:d6:5a:8e:2d:b9:
                    2d:7a:5a:6a:55:cb:68:50:10:6d:41:f8:40:8c:97:
                    c6:c8:25:75:0a:31:a3:06:bf:ec:7d:5b:23:fa:91:
                    39:75:76:13:a5:0e:4c:61:a0:2e:cc:a8:ea:12:d1:
                    35:9d:89:2f:87:38:10:27:3f:ed:ff:84:92:18:71:
                    62:fa:2f:e5:85:c2:5a:a7:20:e8:16:57:f4:b4:65:
                    04:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:00:98:92:9A:0E:EB:4F:73:B1:AC:1F:CF:E1:E4:9F:21:28:C6:7A
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231382e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:53:1d:93:f5:42:fb:1e:66:b0:cd:c8:fe:34:a6:f7:78:8c:
         cb:08:9d:f4:41:97:4b:36:f2:9e:e3:ef:50:d3:75:af:a8:f7:
         10:54:60:fa:eb:67:40:35:19:59:c3:b2:fb:e2:30:ba:be:ff:
         c4:ba:f2:4f:65:1a:bf:32:b8:79:38:b4:53:54:00:2e:73:51:
         83:ef:be:4a:0a:c9:dc:24:8e:5a:15:6c:a7:38:76:37:65:26:
         c3:1c:aa:c9:93:21:ec:aa:0a:48:35:aa:39:fb:41:2b:4d:96:
         32:5d:31:e4:7f:2a:b3:a2:7d:ad:8b:6c:3d:e9:4c:a9:86:90:
         12:40:44:05:2b:12:47:d1:e0:0c:8f:85:50:26:c4:49:4c:54:
         26:3a:69:b8:73:15:04:ee:d8:3b:36:aa:ef:7f:d9:f0:51:87:
         bd:f0:f7:12:d2:6d:15:7b:7c:bc:8c:2e:9e:b0:6f:84:2e:0a:
         1f:02:f7:07:4e:87:30:c9:33:1d:61:32:f8:7a:49:76:85:26:
         49:4e:ad:d2:09:89:1d:94:f4:c6:22:c7:3e:3c:47:59:4e:e4:
         db:74:8e:44:c3:5e:da:21:d5:b0:43:3b:9b:8f:30:4e:98:7c:
         e4:e8:1e:e4:bf:07:3d:8f:82:7f:bd:48:19:5c:10:0e:dd:b7:
         33:06:17:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org