Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32322e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32322e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          yCVUjxG/Z4z+dfxJO3rg8IszA3m2bGub8IaCttprHh8=
Subject key identifier:   F3:7A:C3:4E:88:DF:93:D7:36:EF:58:48:87:EE:8E:68:08:51:C0:09
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       2DB1AB6DB84C8B7D24F9E37EA50B29290977C4ED
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32322e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:06:10 +0000
ROA not before:           Thu 20 Jul 2023 14:01:10 +0000
ROA not after:            Thu 18 Jul 2024 14:06:10 +0000
asID:                     52706
IP address blocks:        177.126.22.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:b1:ab:6d:b8:4c:8b:7d:24:f9:e3:7e:a5:0b:29:29:09:77:c4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:01:10 2023 GMT
            Not After : Jul 18 14:06:10 2024 GMT
        Subject: CN=F37AC34E88DF93D736EF584887EE8E680851C009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:81:f4:05:e7:bd:0b:cf:cc:2c:da:12:fc:25:
                    8e:0c:8c:10:96:f1:de:7b:e1:3d:fe:9b:76:d4:a8:
                    14:de:f2:6d:8f:5f:f5:30:9b:aa:98:f6:d3:bf:86:
                    fa:83:c0:83:f4:a6:79:fc:56:79:e5:50:07:78:5a:
                    15:b8:7d:c5:05:d2:8a:4b:0d:37:ec:ab:bf:6f:88:
                    63:e8:8a:b3:1c:44:b3:20:55:b1:29:ba:26:38:79:
                    6d:51:35:02:dc:8b:88:06:bd:e4:28:a6:8b:e9:7f:
                    a3:dc:31:68:d8:89:39:63:10:31:b3:a2:16:b4:57:
                    e0:c0:2c:62:ba:40:a7:90:4f:83:a0:9f:eb:dc:71:
                    8a:a7:5e:82:40:c6:2c:84:5c:30:47:54:c9:3c:64:
                    c9:dd:4e:15:36:3c:54:46:90:e1:ad:bd:7d:2f:4c:
                    27:c6:00:87:5e:cf:ca:89:65:eb:bb:5b:88:be:61:
                    d7:07:c5:ae:c6:16:cc:24:fa:a6:af:0c:2b:52:55:
                    f9:16:fe:80:ec:09:f8:09:37:bf:77:6d:a5:92:c0:
                    9f:75:c0:38:a0:9a:70:ed:39:1b:83:85:d3:55:13:
                    ed:e1:d6:6f:1b:bf:6c:d2:71:21:c6:a0:c9:02:64:
                    c7:c2:6e:90:d5:91:0a:4a:a6:d0:41:ee:35:09:41:
                    f2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7A:C3:4E:88:DF:93:D7:36:EF:58:48:87:EE:8E:68:08:51:C0:09
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32322e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:49:5e:38:76:5d:29:7c:16:9f:dc:90:33:c7:97:3c:5b:c6:
         aa:a2:6f:b1:34:d9:1f:ef:45:58:78:ac:de:0d:d2:17:ba:65:
         79:62:4c:f7:4a:c9:51:c4:27:e6:42:39:19:22:b6:70:09:d7:
         18:38:78:4b:24:cb:ba:81:42:d8:78:f5:4e:a0:a0:e6:e2:32:
         54:39:b2:54:64:3c:43:cc:98:af:a3:e1:40:5e:8b:c4:47:6d:
         42:12:32:31:4d:13:da:d3:c9:fb:90:74:d4:2e:be:38:cd:a4:
         d3:08:60:2b:47:cb:a5:82:b0:c5:b4:62:af:74:91:2a:c3:07:
         9d:09:a4:98:42:db:d7:11:7c:35:a7:71:3b:be:ed:c1:69:0d:
         16:90:cd:78:99:01:97:35:42:54:c8:b8:d3:75:1d:0c:b6:c5:
         e7:f8:e2:25:1e:c8:f5:69:be:52:b9:38:e7:8f:c2:4a:8d:06:
         61:74:43:92:59:26:bd:4d:16:7a:8c:46:45:57:bd:48:75:99:
         81:9d:b9:be:93:68:f8:7e:f6:35:e6:46:be:33:df:52:4b:57:
         25:0b:ed:7c:c3:15:82:78:ee:fc:99:3b:4a:55:f9:c7:5a:39:
         62:e1:f8:75:ea:75:0d:27:9e:18:0d:4d:a8:64:2d:a7:85:07:
         4e:69:84:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org