Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31362e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e31362e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          ViGcOgoz26gP77eE/RH6i+/ipd2Dy9Tslxc5PnpcF1s=
Subject key identifier:   17:C0:F5:E0:0C:93:BD:4B:C2:CE:CE:7F:FA:1D:A8:72:4F:89:F2:AA
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       0797BCD597F9CD74390ABB208EFF649DDCE0A044
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31362e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 13:58:12 +0000
ROA not before:           Thu 20 Jul 2023 13:53:12 +0000
ROA not after:            Thu 18 Jul 2024 13:58:12 +0000
asID:                     52706
IP address blocks:        177.126.16.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:97:bc:d5:97:f9:cd:74:39:0a:bb:20:8e:ff:64:9d:dc:e0:a0:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 13:53:12 2023 GMT
            Not After : Jul 18 13:58:12 2024 GMT
        Subject: CN=17C0F5E00C93BD4BC2CECE7FFA1DA8724F89F2AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e9:d7:7e:ce:41:07:d7:58:13:fa:34:8a:fb:
                    fe:8a:9b:64:3e:ff:56:c6:f3:56:58:7b:28:99:13:
                    9e:59:7b:f7:6a:81:e0:0c:84:0a:0d:42:a9:da:ab:
                    84:3a:64:f3:ee:7c:03:c2:ac:c4:22:f8:c7:39:a9:
                    b2:83:b3:dc:76:e9:b4:d3:7b:50:16:46:a9:a3:4c:
                    2f:24:6a:20:b9:a5:65:b8:96:50:8f:36:c3:b2:36:
                    ce:24:e8:48:a7:12:6c:93:9a:15:e8:5c:9b:13:1d:
                    f3:29:d8:d5:a2:84:ad:84:ee:82:75:08:65:e5:c0:
                    f9:c8:1e:2a:59:4b:45:f8:33:12:07:50:ef:df:2a:
                    d7:19:15:76:7f:cf:8c:dd:3c:5e:05:b2:cc:4b:d1:
                    3a:66:82:e2:b4:f3:6d:6c:ad:c5:96:9b:75:1f:af:
                    19:fb:91:6f:df:da:37:df:54:21:e9:1e:8b:c2:59:
                    a9:3d:fc:d8:39:b8:35:c9:d6:c3:7d:19:5f:2b:08:
                    6d:f5:ec:9a:3f:f6:6a:c8:d6:4e:02:da:01:44:d6:
                    c0:0f:08:2e:f0:eb:a1:c5:7d:21:e2:e3:0b:90:91:
                    c6:b2:0f:0c:7e:61:40:b2:fc:3f:70:d7:7d:11:75:
                    f4:52:21:6b:c4:7c:a4:69:ac:c4:af:5e:af:79:b0:
                    54:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C0:F5:E0:0C:93:BD:4B:C2:CE:CE:7F:FA:1D:A8:72:4F:89:F2:AA
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31362e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:6c:58:d3:92:b9:49:99:b3:70:c7:8f:95:28:69:7f:05:c0:
         1f:f8:98:3c:8f:0d:99:15:d3:c4:eb:80:5f:63:ee:08:06:b9:
         72:8a:f1:bc:19:a9:b0:de:83:06:76:02:99:0b:23:33:59:c5:
         19:83:71:3a:87:d4:0e:68:cd:27:e5:05:56:13:11:ea:e8:7e:
         3c:e0:f9:bb:d3:ef:ab:c9:09:28:68:4f:cb:2c:9d:4f:5d:3b:
         83:52:1c:ca:7e:65:90:92:e0:0e:0f:00:09:dd:a4:e7:f3:83:
         f6:ea:86:48:fc:5e:23:99:e1:b9:b9:6f:39:1e:de:3d:96:c3:
         37:d5:0c:06:e8:d5:aa:9b:75:46:82:7e:c4:c2:9e:c5:d7:d9:
         d7:45:fc:08:0f:0f:d4:6b:01:40:eb:12:62:f6:85:b2:ac:63:
         da:89:42:5c:8f:82:28:71:d5:eb:2c:04:3a:5a:e2:ad:ef:93:
         30:ac:ef:56:44:84:f5:1a:2b:41:67:09:ee:f8:5c:be:bc:f2:
         ab:d7:51:7d:23:6f:e0:d0:5f:a6:d0:d6:8d:ac:ee:16:c0:20:
         ae:98:e0:2d:d3:5d:de:57:05:55:60:96:53:17:4c:f9:39:56:
         dd:be:ba:da:57:e7:67:9c:ae:67:4e:8d:c8:17:f8:87:df:6c:
         b0:00:57:0f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUB5e81Zf5zXQ5Crsgjv9kndzgoEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBMDJBQTJFODI5RTUxODM0Mzk1OEVFOUU3QTdEMjg0
ODM5QjQwNDAeFw0yMzA3MjAxMzUzMTJaFw0yNDA3MTgxMzU4MTJaMDMxMTAvBgNV
BAMTKDE3QzBGNUUwMEM5M0JENEJDMkNFQ0U3RkZBMURBODcyNEY4OUYyQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu6dd+zkEH11gT+jSK+/6Km2Q+
/1bG81ZYeyiZE55Ze/dqgeAMhAoNQqnaq4Q6ZPPufAPCrMQi+Mc5qbKDs9x26bTT
e1AWRqmjTC8kaiC5pWW4llCPNsOyNs4k6EinEmyTmhXoXJsTHfMp2NWihK2E7oJ1
CGXlwPnIHipZS0X4MxIHUO/fKtcZFXZ/z4zdPF4FssxL0TpmguK0821srcWWm3Uf
rxn7kW/f2jffVCHpHovCWak9/Ng5uDXJ1sN9GV8rCG317Jo/9mrI1k4C2gFE1sAP
CC7w66HFfSHi4wuQkcayDwx+YUCy/D9w130RdfRSIWvEfKRprMSvXq95sFT7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUF8D14AyTvUvCzs5/+h2ock+J8qowHwYDVR0j
BBgwFoAUIaAqougp5Rg0OVjunnp9KEg5tAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC8yMUEwMkFBMkU4MjlFNTE4MzQzOTU4RUU5RTdBN0QyODQ4MzlCNDA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIxQTAyQUEyRTgyOUU1MTgz
NDM5NThFRTlFN0E3RDI4NDgzOUI0MDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzEzNzM3MmUzMTMyMzYyZTMxMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsX4QMA0GCSqGSIb3DQEBCwUAA4IBAQBkbFjTkrlJ
mbNwx4+VKGl/BcAf+Jg8jw2ZFdPE64BfY+4IBrlyivG8Gamw3oMGdgKZCyMzWcUZ
g3E6h9QOaM0n5QVWExHq6H484Pm70++ryQkoaE/LLJ1PXTuDUhzKfmWQkuAODwAJ
3aTn84P26oZI/F4jmeG5uW85Ht49lsM31QwG6NWqm3VGgn7Ewp7F19nXRfwIDw/U
awFA6xJi9oWyrGPaiUJcj4IocdXrLAQ6WuKt75MwrO9WRIT1GitBZwnu+Fy+vPKr
11F9I2/g0F+m0NaNrO4WwCCumOAt013eVwVVYJZTF0z5OVbdvrraV+dnnK5nTo3I
F/iH32ywAFcP
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org