Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31382e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e31382e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          ALbvKZ8zGTyhOi8SzyM+D9/wsW/5D9Nk52kbGANP92M=
Subject key identifier:   48:D0:26:BB:44:17:AC:C2:AB:76:F6:D3:66:71:52:E8:1F:C8:DA:6E
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       67E44F5F2738E2F3DEB0EF30C79808478BC68920
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31382e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:02:00 +0000
ROA not before:           Thu 20 Jul 2023 13:57:00 +0000
ROA not after:            Thu 18 Jul 2024 14:02:00 +0000
asID:                     52706
IP address blocks:        177.126.18.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e4:4f:5f:27:38:e2:f3:de:b0:ef:30:c7:98:08:47:8b:c6:89:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 13:57:00 2023 GMT
            Not After : Jul 18 14:02:00 2024 GMT
        Subject: CN=48D026BB4417ACC2AB76F6D3667152E81FC8DA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ed:98:83:c8:d5:7c:40:2c:f8:96:ee:28:60:
                    07:74:d0:43:48:ed:c9:b4:92:12:84:4c:a7:05:c3:
                    02:75:cf:71:4a:de:3f:48:9a:26:27:f2:5d:a1:33:
                    2b:96:fc:de:04:88:9c:f0:2e:6d:e1:79:f1:94:2c:
                    09:fa:67:c6:4a:13:1f:8b:9f:43:84:40:2b:00:06:
                    d7:8f:02:a5:fa:ae:fc:f4:0a:c5:73:4b:10:bd:43:
                    38:13:94:d8:c9:1f:f2:80:e1:1f:63:f1:75:ef:4b:
                    52:60:6a:b1:fd:41:80:f2:f0:c9:a0:2a:7a:a9:1e:
                    34:40:b2:4e:22:44:dd:85:fd:aa:42:a6:d4:84:79:
                    cf:bd:8a:c2:ea:9a:3e:6d:8c:e8:ab:8b:47:23:35:
                    7d:1e:93:49:02:50:74:88:79:3f:01:f3:de:7f:9c:
                    b7:47:87:88:94:35:30:fc:7a:8a:87:de:cd:7e:61:
                    66:b5:be:ff:5a:f9:99:00:12:1e:39:1d:80:17:c6:
                    c2:fc:48:14:00:73:74:e7:09:59:d0:5a:95:3b:ec:
                    3f:72:e1:f6:a6:ce:eb:ab:af:5b:30:da:c2:41:33:
                    9c:e2:fe:1f:88:c9:a1:97:ee:08:3f:85:5a:2e:56:
                    a6:f9:0d:9b:58:b4:f0:bb:f6:c0:f1:8d:c0:d1:78:
                    87:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D0:26:BB:44:17:AC:C2:AB:76:F6:D3:66:71:52:E8:1F:C8:DA:6E
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e31382e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:b8:81:3c:4d:16:56:19:dd:68:fd:08:88:9f:d4:ac:6f:43:
         44:e9:ef:f1:b3:dd:e3:8c:f4:60:d9:29:ad:ab:6d:69:0f:5f:
         16:ee:27:da:91:22:85:f7:32:39:44:58:51:2b:18:c2:7f:47:
         0c:61:e6:e8:86:e5:73:a5:87:13:04:64:20:0c:37:a8:f9:16:
         31:e6:38:13:6b:a6:2e:84:ee:ef:3b:01:b3:50:40:8a:d7:44:
         a7:e7:df:c3:b3:23:65:d5:87:63:ac:4b:0a:99:6b:8c:98:4f:
         e4:02:95:4b:82:6d:58:91:77:41:08:65:78:d2:f7:1b:01:34:
         c7:53:de:9e:1b:61:fd:f2:3c:d1:61:be:a6:96:d8:05:91:4c:
         75:01:f2:f3:a8:a7:20:26:22:2a:43:a0:3f:7d:6d:b8:22:4a:
         e2:80:b0:28:1b:30:d4:ac:9a:4b:5b:48:8c:97:43:ba:6d:1f:
         1b:41:57:15:1a:94:f4:e6:e2:8d:99:1f:d9:2b:79:f1:01:ba:
         58:1d:58:4c:38:90:7b:89:51:91:c2:88:a9:f6:e4:a9:01:01:
         4c:4a:68:8a:bd:d6:b4:ad:3f:49:8b:58:26:a1:e6:ef:98:1c:
         64:f8:26:a5:70:eb:71:0c:99:dc:67:35:9b:3d:e9:a0:92:73:
         fd:22:ed:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org