Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31382e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e31382e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          X2rCpe9auNb/p5LPftnS31+wAUH4p/EKFUTiLzENxlU=
Subject key identifier:   41:A6:80:66:8F:AD:E3:5E:AE:97:EE:50:F2:D4:EF:A4:F4:49:A6:B8
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       3A317E3095A6379229AB125FE9CC2EE2247BE05B
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31382e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:02:55 +0000
ROA not before:           Thu 20 Jul 2023 13:57:55 +0000
ROA not after:            Thu 18 Jul 2024 14:02:55 +0000
asID:                     52706
IP address blocks:        177.126.18.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:31:7e:30:95:a6:37:92:29:ab:12:5f:e9:cc:2e:e2:24:7b:e0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 13:57:55 2023 GMT
            Not After : Jul 18 14:02:55 2024 GMT
        Subject: CN=41A680668FADE35EAE97EE50F2D4EFA4F449A6B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:b6:0a:b0:ef:0c:ca:35:77:ce:54:60:d2:
                    9a:a9:53:8a:11:cc:7d:af:a0:32:cd:ea:23:25:46:
                    ca:3f:21:e7:7e:5d:85:b7:db:de:d1:77:4f:52:a6:
                    85:b6:73:bf:78:51:0d:74:2e:66:ca:5f:dd:62:7b:
                    d5:2c:b1:56:5d:b9:30:10:d1:6e:77:90:76:48:83:
                    ab:1b:43:66:10:83:f6:0f:8e:cb:b0:1a:3d:12:bc:
                    0f:98:de:de:94:0c:3c:83:00:06:89:c0:cc:48:9b:
                    5d:36:fc:f6:22:6b:4a:ad:70:14:04:e2:ce:b2:e8:
                    fe:55:b9:63:4b:67:58:06:5b:6d:9d:ef:12:68:d7:
                    2e:70:ac:0f:13:0d:88:ba:1f:80:6a:15:36:98:44:
                    e5:77:3a:08:b5:70:46:4c:36:4a:78:46:35:2e:a4:
                    c7:07:04:28:a0:4a:53:30:ba:b6:ae:e4:a2:f9:04:
                    0e:42:01:4e:f3:be:e9:3f:e4:b6:48:a5:d2:eb:24:
                    9e:15:80:5c:35:a0:64:0c:ff:5a:44:82:f3:8f:69:
                    09:45:c1:cc:2e:fb:67:b1:3e:75:40:5f:32:8b:80:
                    fd:3e:20:14:a0:44:fe:3f:65:1f:26:c3:64:a9:24:
                    9c:78:6d:d9:58:5f:af:5c:45:87:c3:6b:47:f6:b1:
                    72:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A6:80:66:8F:AD:E3:5E:AE:97:EE:50:F2:D4:EF:A4:F4:49:A6:B8
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31382e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:e7:71:e3:c8:2c:d1:da:96:25:74:66:53:9d:19:ab:cf:b2:
         47:cc:d9:9f:4d:f4:f6:e3:00:4f:bd:13:68:ec:4c:a2:c0:ca:
         ad:19:a2:af:41:c1:32:e4:6d:0e:fc:5e:89:58:de:bc:4c:f4:
         d0:1d:a7:51:80:91:8b:66:0f:96:a4:19:36:5a:9a:6a:b8:ec:
         6a:dc:8f:b4:58:c3:ec:6e:68:de:98:eb:80:be:b6:35:74:cc:
         f6:36:58:db:db:b5:99:b3:99:c6:4d:b4:0e:d3:3b:3b:a8:6c:
         ba:5a:40:c4:b1:22:5a:0d:9a:f3:2d:aa:89:80:80:a0:f4:fb:
         5e:60:a0:95:ae:89:9c:5c:41:56:09:53:fe:e5:b5:45:a8:18:
         6b:09:a9:be:b0:ac:b1:31:3d:9b:f3:05:d7:c8:76:c6:10:ef:
         d3:46:f4:0c:9c:3f:cf:fe:b6:26:f7:9a:1b:ed:22:39:6f:1e:
         cb:ca:dd:1e:1e:96:17:03:48:b8:a9:45:b4:f0:eb:2f:50:21:
         99:e8:34:da:c7:bc:93:85:ea:14:77:e4:40:d2:58:e7:c2:e8:
         cb:d3:85:00:46:c6:5d:34:25:4b:91:5a:c6:48:ed:b6:34:ce:
         43:37:19:6a:54:80:a7:fd:46:c3:b9:a6:b2:41:a5:72:c8:4e:
         f9:c6:bf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org