Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31362e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e31362e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          YGUTnw8T6+mFuSxlaIj3IZ51QbpryOUZH181Yqo6aus=
Subject key identifier:   90:0C:C8:88:BA:9E:A9:4D:BA:5C:FE:7F:CA:76:4E:58:94:5E:C0:C4
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       1CAAA3247B4A6FEBA3E191DD4FD67F6D2CEC1319
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31362e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:00:57 +0000
ROA not before:           Thu 20 Jul 2023 13:55:57 +0000
ROA not after:            Thu 18 Jul 2024 14:00:57 +0000
asID:                     52706
IP address blocks:        177.126.16.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:aa:a3:24:7b:4a:6f:eb:a3:e1:91:dd:4f:d6:7f:6d:2c:ec:13:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 13:55:57 2023 GMT
            Not After : Jul 18 14:00:57 2024 GMT
        Subject: CN=900CC888BA9EA94DBA5CFE7FCA764E58945EC0C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c0:7f:c1:fe:e3:e3:0f:55:db:63:6a:d8:3c:
                    2b:2a:55:e7:28:f5:c2:8f:48:e8:0d:f2:a6:55:50:
                    67:a3:a2:2f:54:67:13:5a:83:37:19:1b:85:b1:d7:
                    fe:c6:97:92:d4:0a:3d:f1:34:f9:b6:a7:ae:48:a9:
                    02:d2:c1:6e:f3:75:a8:c6:52:d9:cd:a6:67:11:3e:
                    cf:73:8f:32:45:ee:5a:1a:43:88:87:48:b8:83:72:
                    7d:b7:d7:9d:ba:4d:89:c8:d4:c5:5a:3a:9f:db:ee:
                    74:e0:ca:64:4e:fa:7c:73:2a:35:56:99:8e:21:49:
                    13:01:c9:1f:5a:24:1b:d0:75:5d:7c:4a:20:cc:dc:
                    6b:02:bd:a0:8e:5d:ae:51:55:5c:2f:77:6b:a5:ae:
                    15:c7:42:82:70:b1:28:13:33:d6:2e:be:99:df:89:
                    b8:7c:64:6a:ac:a0:98:29:9a:b4:4d:29:5d:6b:e1:
                    1d:ce:42:c0:e6:af:ce:43:bf:34:6e:55:67:25:ff:
                    8f:16:d3:2a:6b:70:4c:a9:9a:c9:e1:85:a6:eb:15:
                    4e:51:9a:83:9b:a8:9f:fb:31:25:34:58:80:87:3e:
                    dd:6b:4b:20:7e:63:f7:7e:94:8d:97:09:7f:95:01:
                    b6:07:21:18:76:c0:22:c7:e8:a1:12:3a:f9:f4:fa:
                    59:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:0C:C8:88:BA:9E:A9:4D:BA:5C:FE:7F:CA:76:4E:58:94:5E:C0:C4
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31362e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:6d:27:83:bf:5c:e5:dd:42:c0:83:e4:1b:cd:07:2a:dd:dc:
         d6:4e:0a:29:4b:f1:b9:f0:21:f4:23:51:5a:11:28:c0:72:07:
         23:5b:9d:83:e2:7a:93:f6:af:94:0f:02:d1:f4:45:f1:b5:df:
         50:c5:9a:ab:27:74:2a:74:ba:8d:5c:1c:98:d0:00:68:19:91:
         b8:d3:c5:90:88:61:87:63:24:87:cb:99:d8:e9:d0:80:88:44:
         04:57:64:a8:aa:44:c3:8e:f2:91:b0:6f:d9:e8:aa:af:c9:72:
         77:04:d6:9a:2c:fa:19:59:c3:38:fe:e9:ea:56:3e:95:fe:df:
         9e:c9:e5:f6:7b:3a:ab:e8:f5:49:71:07:fa:ee:06:10:4c:ef:
         2f:fe:e8:90:18:25:39:13:14:2a:0b:93:cf:03:99:c7:23:7f:
         41:af:42:f1:40:45:94:4d:91:c7:4b:88:80:38:2c:d0:df:21:
         d3:bf:be:8c:f5:97:cc:9d:4b:bd:11:f3:b6:65:c0:fc:c7:08:
         f2:75:41:e0:a7:86:14:fa:a6:25:fa:29:9a:3c:48:22:24:ba:
         5a:b2:b3:b8:4e:6b:44:57:cf:ac:34:85:70:0e:4f:be:93:4f:
         7a:61:78:ed:2c:df:70:d9:72:2b:3b:93:4a:5d:97:a2:01:06:
         cc:4d:aa:21
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHKqjJHtKb+uj4ZHdT9Z/bSzsExkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBMDJBQTJFODI5RTUxODM0Mzk1OEVFOUU3QTdEMjg0
ODM5QjQwNDAeFw0yMzA3MjAxMzU1NTdaFw0yNDA3MTgxNDAwNTdaMDMxMTAvBgNV
BAMTKDkwMENDODg4QkE5RUE5NERCQTVDRkU3RkNBNzY0RTU4OTQ1RUMwQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnwH/B/uPjD1XbY2rYPCsqVeco
9cKPSOgN8qZVUGejoi9UZxNagzcZG4Wx1/7Gl5LUCj3xNPm2p65IqQLSwW7zdajG
UtnNpmcRPs9zjzJF7loaQ4iHSLiDcn231526TYnI1MVaOp/b7nTgymRO+nxzKjVW
mY4hSRMByR9aJBvQdV18SiDM3GsCvaCOXa5RVVwvd2ulrhXHQoJwsSgTM9Yuvpnf
ibh8ZGqsoJgpmrRNKV1r4R3OQsDmr85DvzRuVWcl/48W0yprcEypmsnhhabrFU5R
moObqJ/7MSU0WICHPt1rSyB+Y/d+lI2XCX+VAbYHIRh2wCLH6KESOvn0+lnDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUkAzIiLqeqU26XP5/ynZOWJRewMQwHwYDVR0j
BBgwFoAUIaAqougp5Rg0OVjunnp9KEg5tAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC8yMUEwMkFBMkU4MjlFNTE4MzQzOTU4RUU5RTdBN0QyODQ4MzlCNDA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIxQTAyQUEyRTgyOUU1MTgz
NDM5NThFRTlFN0E3RDI4NDgzOUI0MDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzEzNzM3MmUzMTMyMzYyZTMxMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsX4QMA0GCSqGSIb3DQEBCwUAA4IBAQCqbSeDv1zl
3ULAg+QbzQcq3dzWTgopS/G58CH0I1FaESjAcgcjW52D4nqT9q+UDwLR9EXxtd9Q
xZqrJ3QqdLqNXByY0ABoGZG408WQiGGHYySHy5nY6dCAiEQEV2SoqkTDjvKRsG/Z
6KqvyXJ3BNaaLPoZWcM4/unqVj6V/t+eyeX2ezqr6PVJcQf67gYQTO8v/uiQGCU5
ExQqC5PPA5nHI39Br0LxQEWUTZHHS4iAOCzQ3yHTv76M9ZfMnUu9EfO2ZcD8xwjy
dUHgp4YU+qYl+imaPEgiJLpasrO4TmtEV8+sNIVwDk++k096YXjtLN9w2XIrO5NK
XZeiAQbMTaoh
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org