Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3232302e302f32332d3233203d3e20323633353232.roa
File:                     3137372e3132362e3232302e302f32332d3233203d3e20323633353232.roa (raw, json)
Hash identifier:          WXK39K0Xlzy3tT/m1V81tBnYRED7zK+bf4DvONRcxmE=
Subject key identifier:   8B:D6:E7:92:1D:31:D4:2B:75:CA:76:3D:50:EE:FA:41:2E:DD:18:D6
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       3FB9378FFC0F9CA6797A091A9EE507A01411CAD8
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3232302e302f32332d3233203d3e20323633353232.roa
Signing time:             Wed 25 Oct 2023 01:01:15 +0000
ROA not before:           Wed 25 Oct 2023 00:56:15 +0000
ROA not after:            Wed 23 Oct 2024 01:01:15 +0000
asID:                     263522
IP address blocks:        177.126.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b9:37:8f:fc:0f:9c:a6:79:7a:09:1a:9e:e5:07:a0:14:11:ca:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Oct 25 00:56:15 2023 GMT
            Not After : Oct 23 01:01:15 2024 GMT
        Subject: CN=8BD6E7921D31D42B75CA763D50EEFA412EDD18D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:c5:7a:eb:ff:aa:90:16:16:81:81:3a:51:
                    85:c8:91:86:51:c9:5c:1c:72:82:b6:fc:a1:dc:ba:
                    3e:d0:a3:35:d9:a7:d6:26:a1:67:92:7d:54:95:47:
                    2f:50:5d:c2:e8:32:61:9f:b3:a9:49:b2:b8:22:6f:
                    c2:6d:fb:21:11:e1:7c:d0:e7:12:3c:84:4f:41:fc:
                    3f:c3:45:c6:e9:00:7c:39:ec:cc:0d:f5:79:f4:e0:
                    1a:9b:f7:08:19:85:7b:e2:32:2e:ff:5f:ef:3d:bf:
                    7d:a3:89:4d:79:a3:ce:5a:a5:32:c2:13:48:a0:d4:
                    ec:46:e5:4a:f7:db:6b:93:d4:96:dd:0e:1b:51:69:
                    d3:81:78:9f:4f:3d:1b:34:ce:48:c3:b9:26:0f:f4:
                    b7:9a:1e:78:56:52:4b:5b:7b:14:70:3a:5b:c9:a9:
                    13:e4:c9:08:35:84:98:c0:cd:6e:39:d2:33:78:9a:
                    85:a5:06:9a:9e:e0:93:ba:78:f2:54:5d:35:01:83:
                    d7:44:76:d6:25:69:ec:99:6b:58:51:7b:be:9e:4f:
                    bc:0a:33:83:89:4c:aa:e1:5e:33:e1:c1:3c:66:2f:
                    14:85:0e:90:7f:ba:78:a7:fc:a8:76:d3:cf:fd:03:
                    7f:84:4c:76:2c:7e:43:43:17:7a:17:e5:17:f8:44:
                    8c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D6:E7:92:1D:31:D4:2B:75:CA:76:3D:50:EE:FA:41:2E:DD:18:D6
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3232302e302f32332d3233203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:20:97:36:e1:a4:29:a7:53:65:38:c5:c5:2c:4d:04:98:50:
         31:a7:8b:b4:13:d4:f6:c8:2f:66:50:be:30:1d:57:51:30:4d:
         97:85:92:70:4f:5d:d1:6e:d4:fd:94:56:65:f8:f0:75:a2:cf:
         09:32:d6:69:d9:cc:ed:1e:97:97:a0:a5:b3:c1:57:20:68:16:
         5c:91:7a:4b:42:39:61:be:de:65:51:b8:96:2a:65:96:41:90:
         b5:6a:2f:88:45:2d:2b:52:52:ac:c6:51:27:2b:76:eb:17:14:
         2e:50:5a:fa:27:df:93:18:e9:08:32:3a:72:39:62:66:24:d7:
         f1:16:a7:99:94:ff:6f:c9:6e:8b:14:be:8e:fc:69:80:77:86:
         08:f0:53:3a:8d:a0:ef:d1:4e:97:05:54:12:04:4f:dd:3f:8e:
         9f:13:41:22:66:94:3f:cc:c6:3c:e4:8f:d9:11:78:2f:8e:ef:
         a7:97:20:bd:33:25:02:94:23:89:0f:e3:53:b0:94:1a:bb:c5:
         9f:2b:f1:71:60:36:14:bf:07:fe:2a:b8:fc:e9:97:fc:14:10:
         35:20:ff:05:32:d4:a0:64:65:22:3c:73:ad:48:41:5e:7b:25:
         08:fe:f9:e2:e8:fa:f3:1e:0b:22:8a:f5:19:59:f4:8e:53:d3:
         6f:e7:07:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org