Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31392e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e31392e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          FjYLXUZ37elzVIHi0/62oPxyXMIfcElOTaO48rF6MT4=
Subject key identifier:   8C:5A:B8:63:30:AE:09:C8:E5:66:09:29:60:7D:7B:09:72:C8:EA:15
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       114E40D53C708B3EC7B8AF9AC057288202E76020
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31392e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:03:29 +0000
ROA not before:           Thu 20 Jul 2023 13:58:29 +0000
ROA not after:            Thu 18 Jul 2024 14:03:29 +0000
asID:                     52706
IP address blocks:        177.126.19.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4e:40:d5:3c:70:8b:3e:c7:b8:af:9a:c0:57:28:82:02:e7:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 13:58:29 2023 GMT
            Not After : Jul 18 14:03:29 2024 GMT
        Subject: CN=8C5AB86330AE09C8E5660929607D7B0972C8EA15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:26:7b:42:22:28:70:ba:9f:ec:c7:6a:65:
                    f8:03:50:87:fb:15:1b:33:43:8c:cb:ab:3e:a2:30:
                    f4:c1:80:50:e0:e9:3e:a7:24:81:55:51:1a:10:ea:
                    88:3c:ec:a6:b5:55:a2:39:c1:b6:6c:d6:78:eb:ad:
                    f4:25:2a:cf:f7:80:f3:06:41:00:e2:7d:d1:b8:a9:
                    8c:34:14:5c:da:cf:00:e1:64:a1:1a:bc:86:32:b7:
                    33:ee:d2:b4:1a:f9:b2:35:b6:32:7d:5b:65:ff:e2:
                    5f:92:0d:d9:5a:b7:2c:44:c0:f0:fb:16:81:28:15:
                    0f:58:3c:77:d5:c0:75:d0:ec:cf:21:94:4b:f4:3a:
                    12:58:63:4c:ee:34:af:d1:de:fb:ab:ff:b8:e7:e3:
                    b4:19:a2:c5:69:fe:02:cf:e5:12:ae:16:18:39:a8:
                    97:df:db:be:14:c6:9f:85:fd:c0:d8:e7:83:41:65:
                    4c:1e:17:f6:f4:fb:73:f7:55:55:8d:9d:a0:76:a7:
                    b8:da:9e:af:23:5c:c5:ed:78:aa:a5:b7:5c:e2:9e:
                    47:6d:bf:5b:4a:bd:22:92:fe:e0:93:96:cc:2c:3b:
                    e7:eb:18:cd:cb:6f:d6:ad:97:d5:28:19:d3:38:06:
                    dd:66:41:07:f9:52:96:b3:b3:02:66:3f:d9:c3:41:
                    42:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5A:B8:63:30:AE:09:C8:E5:66:09:29:60:7D:7B:09:72:C8:EA:15
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31392e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:12:c9:c3:97:51:2c:c2:55:71:e9:16:ea:b4:d5:3f:2b:ee:
         a5:26:11:d6:c1:fd:7d:54:88:89:a5:49:bd:6f:f1:c1:c4:ed:
         34:e5:ce:d6:98:5a:f4:0f:6b:83:e5:42:16:e3:a8:44:20:d1:
         49:11:c8:73:51:57:b0:0b:67:7b:64:56:a2:a6:d9:d9:4b:51:
         a7:3f:2c:90:26:43:45:c8:e2:98:6e:55:f0:52:1d:90:69:44:
         09:ce:70:0d:05:94:64:4b:14:65:bd:ae:aa:20:36:c5:ad:98:
         d6:5f:3d:15:62:12:70:e7:07:df:ac:e7:e3:45:e7:be:b9:6b:
         02:8b:8e:fe:85:f2:ec:3f:1c:88:74:8b:50:97:cc:1e:e5:7a:
         c8:56:12:4e:0f:fc:e8:85:8b:57:d9:4c:82:81:46:bf:00:a2:
         89:e6:f3:7e:ae:ee:b7:9f:bf:be:dd:94:d8:af:df:41:26:15:
         93:dd:62:6d:9d:ee:63:33:1d:62:2f:d3:df:fd:11:b8:7c:ff:
         0b:67:69:19:bb:4a:ea:95:77:32:8f:cd:27:7c:ee:86:6f:14:
         0a:77:5d:e5:a1:85:f7:6a:4c:28:ff:f8:7f:f7:e0:60:8d:b2:
         db:5c:2e:ba:e7:5c:51:cd:77:e6:9e:07:a6:c1:31:2e:c2:be:
         dc:50:f7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org