Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3232302e302f32322d3232203d3e20323633353232.roa
File:                     3137372e3132362e3232302e302f32322d3232203d3e20323633353232.roa (raw, json)
Hash identifier:          s4sleokRnZOxvkTUqqmrooj+oq54kQDazXCkobwDs2Q=
Subject key identifier:   E8:F9:93:9E:B8:48:2F:21:28:DE:45:63:5B:A7:1C:6C:4D:1E:C3:A4
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       4502F62F6E628B3AC2F58FF32A36ED10F5BE944F
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3232302e302f32322d3232203d3e20323633353232.roa
Signing time:             Wed 25 Oct 2023 01:01:13 +0000
ROA not before:           Wed 25 Oct 2023 00:56:13 +0000
ROA not after:            Wed 23 Oct 2024 01:01:13 +0000
asID:                     263522
IP address blocks:        177.126.220.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:02:f6:2f:6e:62:8b:3a:c2:f5:8f:f3:2a:36:ed:10:f5:be:94:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Oct 25 00:56:13 2023 GMT
            Not After : Oct 23 01:01:13 2024 GMT
        Subject: CN=E8F9939EB8482F2128DE45635BA71C6C4D1EC3A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1a:de:11:e4:a7:8f:63:a6:de:c7:20:5b:c6:
                    90:77:70:2e:c3:cc:a9:6e:dc:36:66:82:0b:22:8f:
                    fa:1e:3a:6d:46:7a:0e:64:2e:16:e7:d7:cd:a3:20:
                    f6:5a:ec:39:06:34:ac:b8:2d:55:c4:f7:47:70:95:
                    3b:32:14:ae:1d:c9:b8:58:16:80:60:65:59:fb:9e:
                    61:65:ba:80:ef:a8:73:12:49:6e:20:65:43:85:38:
                    9b:c4:af:5d:58:18:7e:3d:9c:4e:55:0b:cb:26:5b:
                    4c:fa:a7:23:1d:50:83:7b:6b:34:29:04:ed:a7:aa:
                    82:6d:b7:ee:a9:5a:50:c7:1d:67:e6:34:1a:fc:fc:
                    91:94:9f:61:77:a1:95:2a:e4:21:df:f7:6e:36:4f:
                    95:ee:da:bc:55:fa:d8:13:86:d4:01:52:4c:66:35:
                    30:35:34:1e:21:d5:54:36:1d:13:b7:5f:79:00:51:
                    de:84:34:66:ad:0f:35:cb:0e:94:04:55:2f:3a:88:
                    ee:8a:6b:34:44:8e:89:b4:ce:c6:80:37:73:3c:d8:
                    a6:8c:1f:b2:87:d1:45:fa:69:31:95:33:e5:aa:9e:
                    33:50:58:a4:d9:dc:b4:28:dc:50:42:59:21:72:a9:
                    4b:c1:ac:07:2b:56:97:0f:5a:78:e8:d0:5c:e9:3a:
                    3c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F9:93:9E:B8:48:2F:21:28:DE:45:63:5B:A7:1C:6C:4D:1E:C3:A4
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3232302e302f32322d3232203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:2f:e5:57:6f:5f:69:d2:46:26:96:ac:af:79:b0:19:eb:24:
         72:13:6d:da:ee:2a:a2:7b:67:4b:e0:95:2f:cf:52:19:11:fc:
         a8:0c:6f:37:e0:00:e9:92:eb:17:fd:f5:78:99:90:86:d9:50:
         80:8c:12:41:6f:f9:87:1d:3b:3c:e2:ff:2b:66:3d:ef:b1:d4:
         6d:55:c0:b4:a1:1e:f5:5e:fa:3c:af:6f:de:22:02:47:26:b6:
         89:92:cb:e1:06:37:45:7a:33:70:21:fe:04:53:a0:9e:7e:6c:
         4e:d9:ae:99:6b:16:08:ae:b0:46:62:1e:c3:6d:0b:42:8a:37:
         0b:2a:8e:a8:d4:1b:f8:13:32:13:58:07:34:bc:8d:c1:45:c5:
         4e:38:df:f5:7e:b2:f8:e7:25:4b:16:25:bc:d7:e1:24:d3:91:
         ef:68:31:c6:90:40:a4:08:33:f6:a6:69:f1:81:14:13:92:b9:
         c3:0d:12:90:15:37:4f:fa:5e:b6:b5:18:50:0f:22:4e:cc:ff:
         72:3f:8b:38:6f:44:6d:7f:ee:34:5e:15:bc:73:5e:8e:ac:d6:
         3b:3c:f9:23:b1:9e:2c:db:1b:4c:0d:c5:71:81:4f:d9:6e:15:
         22:30:16:7a:73:c8:63:70:f9:70:5e:91:31:32:42:71:df:bd:
         53:8a:c1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:22 2025 by rpki-client