Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31362e302f32322d3232203d3e203532373036.roa
File:                     3137372e3132362e31362e302f32322d3232203d3e203532373036.roa (raw, json)
Hash identifier:          7+ne7o5M56FLfrXQkLQ1Dt9NeJ38FXMwqDsJrePxfGE=
Subject key identifier:   C9:D5:3D:ED:8E:2C:AA:59:1D:CF:27:98:4B:63:FA:8C:06:FC:53:A6
Certificate issuer:       /CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
Certificate serial:       3B116E88D021E1337A66B9C99AFD4DB5BD6ADF1C
Authority key identifier: D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31362e302f32322d3232203d3e203532373036.roa
Signing time:             Tue 18 Apr 2023 12:21:22 +0000
ROA not before:           Tue 18 Apr 2023 12:16:22 +0000
ROA not after:            Tue 16 Apr 2024 12:21:22 +0000
asID:                     52706
IP address blocks:        177.126.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:11:6e:88:d0:21:e1:33:7a:66:b9:c9:9a:fd:4d:b5:bd:6a:df:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
        Validity
            Not Before: Apr 18 12:16:22 2023 GMT
            Not After : Apr 16 12:21:22 2024 GMT
        Subject: CN=C9D53DED8E2CAA591DCF27984B63FA8C06FC53A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:84:c5:78:dc:22:d5:b4:f6:a0:b9:1a:9d:
                    29:3a:d2:a6:d5:f3:56:32:2e:3e:74:a6:5f:03:2b:
                    04:71:81:ff:e7:b1:c1:ca:18:ee:2b:0b:29:9c:cd:
                    43:bf:3d:c5:0e:3f:1d:7c:15:5a:20:40:9a:a4:6c:
                    92:80:c7:f6:7a:2a:89:ff:24:19:b5:ce:88:60:2a:
                    60:b1:7b:59:36:b4:ac:ba:1e:da:41:08:35:e0:30:
                    d1:9d:96:be:b6:36:aa:8d:a5:1f:15:ae:0a:29:68:
                    8f:80:72:76:f3:99:e7:1f:a5:6e:63:4c:9e:84:36:
                    5e:0f:50:d0:e9:d6:13:ee:ff:02:dd:fc:31:e1:cf:
                    32:e4:cf:ed:a6:fd:7e:17:c6:27:d8:06:c4:e3:06:
                    76:d9:72:ee:c6:7b:08:cc:2d:01:b3:2e:a6:52:b4:
                    88:94:44:e9:a0:15:7c:d6:ab:94:e1:a0:2e:cb:e5:
                    61:10:59:2e:10:b1:7d:e6:0d:43:02:9f:e6:bb:6f:
                    fb:11:d2:e1:eb:90:6b:52:52:8f:cf:2e:c2:78:71:
                    fd:32:24:f7:ac:a0:1b:72:43:82:8e:69:40:97:22:
                    dd:a9:5e:b4:95:49:53:fe:ca:22:ba:12:20:f2:92:
                    b8:f7:98:4a:e7:0d:de:aa:00:93:52:81:22:e0:64:
                    30:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D5:3D:ED:8E:2C:AA:59:1D:CF:27:98:4B:63:FA:8C:06:FC:53:A6
            X509v3 Authority Key Identifier:
                keyid:D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31362e302f32322d3232203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:51:7d:80:00:5f:ad:2e:4d:98:03:53:ff:b9:2b:af:aa:9d:
         8d:d1:2a:fa:2f:da:a3:1a:32:4a:50:0d:60:db:c1:21:25:fe:
         82:3f:ff:69:e3:43:18:fa:cc:38:dc:eb:f6:a5:1a:cd:cd:c9:
         e5:a3:a9:02:2d:8e:b2:0b:a7:e2:93:ae:83:af:75:97:44:3d:
         dd:9d:4e:70:b9:f9:2d:8c:6c:b0:19:13:6f:cc:0d:7d:8c:98:
         a1:b7:68:37:66:b9:c5:66:20:e1:6e:cc:b4:db:85:e5:dc:fb:
         bb:cf:00:03:5d:05:b1:45:63:1c:b4:22:e4:ab:5b:3a:1b:c2:
         2e:b2:bd:78:8f:94:ce:25:e9:4d:8f:0c:57:60:d6:e4:57:c1:
         b1:c8:78:0e:68:8b:92:fe:55:31:78:1d:9a:fa:a8:25:27:28:
         0a:36:ca:11:1a:09:84:33:e8:d3:cd:a4:b6:c2:7a:7c:43:83:
         18:25:9e:1d:24:fe:2d:b0:bb:c5:d2:ba:8d:f0:30:99:e5:c6:
         78:06:74:d4:b2:6b:2b:c8:45:29:6c:e7:29:2e:d8:e4:9a:7f:
         4a:05:af:ec:e7:e0:b0:74:e1:ff:ac:f7:09:d3:81:f8:15:db:
         dd:6f:a8:7e:ad:f1:5a:fe:ee:a5:42:ba:74:b0:81:92:c7:af:
         5d:69:84:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org