Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3232312e302f32342d3234203d3e20323633353232.roa
File:                     3137372e3132362e3232312e302f32342d3234203d3e20323633353232.roa (raw, json)
Hash identifier:          vXsvxiToCxwQI2P4dTdke4lN4/DqZN4IHMCPnr20rbE=
Subject key identifier:   3E:9D:9D:88:36:C7:73:5C:CD:20:9C:C3:EB:1D:69:3B:4D:6B:60:DD
Certificate issuer:       /CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
Certificate serial:       4B784201093297FFB5CF0E4154EB522E0A30CEA0
Authority key identifier: 6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3232312e302f32342d3234203d3e20323633353232.roa
Signing time:             Thu 28 Dec 2023 17:11:25 +0000
ROA not before:           Thu 28 Dec 2023 17:06:25 +0000
ROA not after:            Thu 26 Dec 2024 17:11:25 +0000
asID:                     263522
IP address blocks:        177.126.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:78:42:01:09:32:97:ff:b5:cf:0e:41:54:eb:52:2e:0a:30:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC
        Validity
            Not Before: Dec 28 17:06:25 2023 GMT
            Not After : Dec 26 17:11:25 2024 GMT
        Subject: CN=3E9D9D8836C7735CCD209CC3EB1D693B4D6B60DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:36:c8:cd:01:51:f3:63:b7:d1:30:55:20:d1:
                    15:e9:c7:84:09:52:c7:c0:c8:3c:71:6b:ce:06:48:
                    2a:0f:3d:4a:d0:4f:0d:33:ae:f4:0e:de:62:00:38:
                    3d:05:37:f2:0a:50:9d:ce:39:24:f2:9f:b8:1e:23:
                    82:b2:44:ab:0a:cd:87:e0:21:3b:d1:b5:06:2c:3d:
                    d0:ed:d1:84:1b:92:de:3a:fa:65:d6:3e:30:8e:40:
                    2d:57:4b:dc:ce:79:60:a3:00:51:72:11:34:ff:be:
                    46:29:f8:22:e7:d7:62:d9:6c:53:48:4b:9a:f0:5b:
                    77:a0:f2:ca:1f:3a:1d:c7:33:e9:a6:22:01:11:d6:
                    f6:0a:43:a4:3b:a6:43:0e:34:4b:70:1d:c8:8a:dc:
                    66:67:a3:76:25:4f:be:df:35:55:9b:01:05:24:98:
                    64:b6:4a:3f:8d:b4:c1:ac:5a:57:a0:e6:5b:18:16:
                    e2:06:51:fe:94:03:0d:21:88:2d:91:33:21:86:01:
                    af:64:8b:99:a7:b2:c6:87:a7:e0:d0:d0:3b:df:fd:
                    61:33:0d:af:b6:52:77:42:b4:12:ee:85:6e:f4:73:
                    57:87:9b:f2:1f:d9:9a:d2:78:c5:f1:41:1a:c7:6b:
                    40:cf:62:7f:83:8e:5f:62:cc:69:c3:64:9f:cc:0c:
                    48:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9D:9D:88:36:C7:73:5C:CD:20:9C:C3:EB:1D:69:3B:4D:6B:60:DD
            X509v3 Authority Key Identifier:
                keyid:6D:42:E0:36:DB:3B:EF:1B:50:7C:BD:B6:A1:AB:8A:36:B8:CF:76:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6D42E036DB3BEF1B507CBDB6A1AB8A36B8CF76EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/0/3137372e3132362e3232312e302f32342d3234203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:8d:65:7e:dd:7e:fe:25:c8:5f:8d:67:81:7b:26:8d:10:5d:
         44:58:f8:bf:f4:ff:a9:85:9f:43:d9:b3:5b:d0:c9:75:83:f3:
         ec:f4:84:c5:30:68:2c:ca:2e:f5:41:40:7c:0b:31:24:48:e0:
         c0:bd:25:01:32:aa:b5:f6:b1:28:05:fd:74:b3:0d:30:fe:34:
         97:90:af:63:68:25:2d:b7:01:4b:78:5e:39:69:4d:c9:2b:3f:
         92:9d:90:d1:4b:b3:48:2f:09:7d:48:26:44:b4:7c:a5:c1:b7:
         4b:4c:09:ac:b3:a0:5f:eb:61:54:4c:30:d8:3e:f1:de:13:71:
         f9:da:c9:2a:f0:7e:3d:3b:22:0b:b0:28:d1:0e:f9:13:11:df:
         2e:6a:70:49:e4:9f:c1:76:45:24:4b:79:db:fc:10:7c:7c:18:
         d2:de:bd:14:47:26:76:42:83:f0:45:b2:e7:d7:0f:7a:46:bf:
         da:52:15:a8:68:bc:58:a4:f7:67:56:98:7e:02:db:73:de:42:
         12:23:14:32:c2:93:bb:80:82:30:6b:73:78:81:e2:60:40:8a:
         8b:bf:ed:60:b1:39:88:0d:1e:33:2b:e0:b9:6c:5a:76:ae:25:
         dc:fb:41:67:12:a9:d2:52:51:03:b7:c1:c1:a1:e4:43:8d:19:
         2e:e0:42:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:31 2024 by rpki-client on console-ams.rpki-client.org