Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32342e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32342e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          +N5ebqczDQscOsH3xkEy6ODrlualBZrmHjJWLE7eeFU=
Subject key identifier:   D9:78:FB:C9:E7:C0:E3:FB:87:34:DF:52:8E:1B:E0:54:16:06:3A:2F
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       29DEEAF7DC2840A773EDB7F15FD38509C8663E65
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32342e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:06:31 +0000
ROA not before:           Thu 20 Jul 2023 14:01:31 +0000
ROA not after:            Thu 18 Jul 2024 14:06:31 +0000
asID:                     52706
IP address blocks:        177.126.24.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:de:ea:f7:dc:28:40:a7:73:ed:b7:f1:5f:d3:85:09:c8:66:3e:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:01:31 2023 GMT
            Not After : Jul 18 14:06:31 2024 GMT
        Subject: CN=D978FBC9E7C0E3FB8734DF528E1BE05416063A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:96:68:fe:0c:c6:5a:80:45:6b:1c:b1:b3:e5:
                    7f:1e:d0:3a:64:74:e6:6e:67:9a:48:70:bc:d5:75:
                    59:5a:0f:7b:4d:b1:72:79:ce:bb:1e:de:c4:db:be:
                    c0:77:db:a7:a3:01:20:d2:8f:74:97:d8:ee:26:b2:
                    83:f5:10:33:c8:49:dc:37:3b:19:4c:86:ab:21:9e:
                    99:2b:9a:d7:ff:dc:88:9f:c4:65:2d:0a:d3:af:f2:
                    9b:b5:17:79:10:11:14:5b:3e:4f:7e:fa:0c:27:d4:
                    44:8d:e7:37:c4:c6:40:f8:66:ce:9e:c6:13:1b:08:
                    29:03:d1:39:d5:59:6c:2c:28:8c:cd:d7:67:54:33:
                    a5:2f:68:ec:32:4e:35:b4:bb:ef:e2:05:c5:39:fb:
                    4d:a5:ad:58:ed:c4:a2:36:68:5a:3c:3a:f3:c0:6e:
                    24:2b:74:4b:91:3d:3f:8c:34:34:35:3d:a4:68:d1:
                    95:d3:14:0d:2c:10:bc:40:98:7e:f9:c7:8d:3a:99:
                    e0:ff:49:aa:1e:a2:28:c8:f7:ba:85:05:24:1b:e4:
                    b8:4b:a6:b8:f8:24:52:ed:47:25:59:47:07:a3:c9:
                    d3:6e:d4:ea:bb:a5:31:13:e6:09:aa:df:31:05:c5:
                    9e:48:70:3d:55:e5:ed:0f:16:a8:34:61:0b:72:82:
                    88:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:78:FB:C9:E7:C0:E3:FB:87:34:DF:52:8E:1B:E0:54:16:06:3A:2F
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32342e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:47:35:08:28:7b:32:84:90:cf:96:94:67:7b:84:a9:96:a9:
         a4:0a:b6:cb:e8:d5:85:e5:6e:e8:27:cf:43:e2:7e:90:4c:6d:
         6a:c5:1a:46:ca:e5:a0:e8:41:c2:b1:7c:1c:e3:3a:18:e1:25:
         ff:6a:68:97:82:59:b0:9a:f9:c4:7b:1e:2c:88:9d:5e:75:43:
         39:88:9e:fd:d1:f3:2a:3c:b9:b7:34:b1:51:df:e4:d2:62:a5:
         44:af:c3:28:f9:0f:c0:12:dd:44:0b:44:b2:49:37:82:9c:af:
         c8:5c:96:80:61:a8:12:b8:15:84:7b:a0:85:be:4f:b6:b0:63:
         bf:de:92:a8:46:df:e9:76:3b:70:b9:f3:c5:01:04:fe:15:96:
         b7:a8:80:a9:93:e3:18:4d:f4:a1:43:17:cf:a2:cb:33:57:4a:
         18:e4:3a:48:f0:a4:d3:c7:bf:0c:1d:b5:4b:53:34:0d:bc:28:
         ec:ec:51:ec:5c:2c:72:c5:75:c0:ca:c4:17:0d:79:0b:ba:a2:
         4b:0e:9f:39:84:1f:41:b0:55:8c:9e:c9:21:9e:96:27:dc:a2:
         91:10:4a:eb:b6:e5:35:6e:48:e5:19:12:3e:da:72:7a:2a:de:
         7f:24:09:54:a2:66:a1:f6:1e:b1:5d:ad:77:9c:28:b3:f6:07:
         d4:2e:8e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org