Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231392e302f32342d3234203d3e20323633353232.roa
File:                     3137372e3132362e3231392e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          A601oMHiEAUUuUS/4ItTXx0zbLSNuQaEEDhWOj+LG0A=
Subject key identifier:   33:1F:3A:81:CF:BA:7D:83:B5:2C:82:D9:60:4B:6E:D3:63:6E:BE:7F
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       62551B3D2DD228CFFE6BD0A105857BE7D5C3AF6D
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231392e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 28 Dec 2023 17:10:56 +0000
ROA not before:           Thu 28 Dec 2023 17:05:56 +0000
ROA not after:            Thu 26 Dec 2024 17:10:56 +0000
asID:                     263522
IP address blocks:        177.126.219.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:55:1b:3d:2d:d2:28:cf:fe:6b:d0:a1:05:85:7b:e7:d5:c3:af:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Dec 28 17:05:56 2023 GMT
            Not After : Dec 26 17:10:56 2024 GMT
        Subject: CN=331F3A81CFBA7D83B52C82D9604B6ED3636EBE7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c7:5b:ed:77:6a:d9:01:23:37:92:9a:10:bf:
                    04:60:19:d3:b4:14:7b:78:bb:f0:c7:45:06:9c:06:
                    1d:30:fd:0e:7c:3c:3f:c6:8b:e8:e3:b0:c6:22:5b:
                    24:9e:32:2a:8c:65:3b:15:f9:e9:84:99:87:5b:06:
                    ff:f8:58:cf:c4:0a:20:cf:b0:d5:bc:05:c0:3d:41:
                    a9:f6:b6:2d:4a:61:99:61:85:d0:3d:76:d1:8b:64:
                    11:04:21:b8:d4:71:3a:f9:32:df:3d:67:2e:71:ed:
                    b2:e3:e6:59:db:5f:14:6e:ce:45:56:f0:b7:06:ef:
                    1b:25:eb:36:57:98:d8:38:a3:65:fa:32:09:be:19:
                    a3:60:78:1d:76:e9:f4:72:5f:48:d9:0e:02:4a:83:
                    99:1e:80:40:db:82:c5:82:98:53:d4:bf:72:eb:ac:
                    f4:39:b4:99:4c:a7:9e:27:87:54:58:6c:ad:d2:0f:
                    d6:0d:b1:35:84:47:af:b3:c4:59:aa:3e:ec:ce:85:
                    b3:9e:55:19:df:d6:cd:11:b0:6a:29:8e:82:11:1f:
                    97:c1:a6:53:a4:9e:30:4b:bb:62:70:89:8a:51:a2:
                    36:48:4b:6e:cc:62:2c:4f:1b:d1:6a:f9:c4:17:5d:
                    f8:d1:6d:e6:3a:3d:ee:c9:93:fc:8d:44:f0:b0:f7:
                    e3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1F:3A:81:CF:BA:7D:83:B5:2C:82:D9:60:4B:6E:D3:63:6E:BE:7F
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3231392e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:9d:96:0f:85:a9:1d:62:b0:8f:dc:e7:dd:e6:ad:df:58:76:
         f0:c7:31:13:c6:49:ae:62:67:ea:eb:c8:62:22:4c:21:a0:63:
         75:2a:9c:15:62:0c:97:de:e4:e1:c5:59:35:59:62:ce:ad:d1:
         d2:68:0e:09:54:fb:b0:cd:d0:d7:b4:3b:04:e0:76:9c:9d:5c:
         47:1a:73:f2:43:9b:98:45:af:52:d2:33:a5:68:60:a3:df:0a:
         1d:83:55:d8:b6:a0:bd:f4:dc:ed:28:a3:04:6d:22:64:e0:e5:
         37:93:97:a3:83:53:95:c2:bf:61:8c:2f:6d:bc:c1:85:97:b3:
         07:96:f1:cf:9f:85:9e:fa:c8:54:6c:0f:ed:b5:3d:4e:ac:78:
         2d:f7:d0:08:70:22:88:4f:3f:56:72:d2:4c:c5:04:de:b6:7f:
         67:45:3f:e9:1f:0b:92:90:10:ea:8b:74:2f:06:69:e5:56:e0:
         c5:63:c5:5b:53:f1:c0:63:fd:f6:e7:15:ed:e7:c0:fa:25:42:
         f0:44:1f:ed:6f:6c:48:6d:2a:1b:5d:6b:8e:de:b1:e2:d2:f5:
         41:92:6f:32:b2:0b:93:e5:ce:22:ce:a7:45:37:c7:b0:e2:0a:
         7e:42:22:50:65:90:0b:11:e3:a8:3a:b0:3c:b5:10:be:00:c7:
         98:dd:8f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org