Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32302e302f32322d3232203d3e203532373036.roa
File:                     3137372e3132362e32302e302f32322d3232203d3e203532373036.roa (raw, json)
Hash identifier:          nyf4m9oZzZhmDA6gs+5bPt5a68thBn4Kq0NfYvpkRAs=
Subject key identifier:   10:C5:11:97:DF:10:46:33:84:EF:83:56:0F:C0:BB:8B:14:6A:A8:07
Certificate issuer:       /CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
Certificate serial:       032E1541148FA30E5CD91BB2591B5648311B1893
Authority key identifier: D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32302e302f32322d3232203d3e203532373036.roa
Signing time:             Tue 18 Apr 2023 12:23:06 +0000
ROA not before:           Tue 18 Apr 2023 12:18:06 +0000
ROA not after:            Tue 16 Apr 2024 12:23:06 +0000
asID:                     52706
IP address blocks:        177.126.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2e:15:41:14:8f:a3:0e:5c:d9:1b:b2:59:1b:56:48:31:1b:18:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
        Validity
            Not Before: Apr 18 12:18:06 2023 GMT
            Not After : Apr 16 12:23:06 2024 GMT
        Subject: CN=10C51197DF10463384EF83560FC0BB8B146AA807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8a:60:82:39:b7:28:70:d9:9b:80:02:ab:db:
                    f5:42:ba:20:e9:fd:78:f9:d0:8b:ac:68:84:d7:b8:
                    b2:4e:c9:18:c3:bb:f2:a3:79:7e:bb:5c:07:be:b8:
                    93:b9:3d:14:a5:00:ae:82:30:f9:ff:83:5b:8e:ee:
                    a6:e8:fb:ab:12:ad:89:fc:45:2c:f5:01:02:37:77:
                    a0:8f:03:ca:ed:fb:1c:00:b2:d2:be:ea:1e:63:d7:
                    3f:c3:a4:aa:d5:a8:58:4f:f6:02:c1:6f:9b:5a:fd:
                    2e:59:bb:9c:58:de:26:1f:ee:c5:6d:cf:f8:fa:4f:
                    3d:e4:1f:19:e1:b9:6c:28:83:bc:2a:11:35:7e:8f:
                    f5:15:fe:ab:4b:bc:ff:30:ea:52:e9:8a:62:f8:cd:
                    29:98:f6:d1:62:02:d0:38:c6:c1:27:cd:1b:c7:64:
                    88:0d:0c:9f:4c:bf:cb:44:10:33:db:81:a8:b6:cd:
                    2b:75:10:e8:01:87:7d:b1:cf:7c:27:4d:5d:3c:76:
                    65:c6:7d:66:e4:e9:d9:e1:93:40:a3:6b:a2:4c:f2:
                    4a:e4:ef:63:52:6e:9a:eb:92:04:a6:85:a9:31:4f:
                    35:0e:e6:17:bf:a4:70:de:cf:c5:e4:f0:74:de:81:
                    bf:25:9e:dc:74:4d:7a:80:6c:e6:c1:73:92:28:60:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C5:11:97:DF:10:46:33:84:EF:83:56:0F:C0:BB:8B:14:6A:A8:07
            X509v3 Authority Key Identifier:
                keyid:D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32302e302f32322d3232203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:a8:29:99:4e:3f:fb:48:d6:5a:48:35:f9:d8:c9:7d:e6:27:
         be:5d:0e:0d:f8:3f:62:a8:32:67:51:c8:c6:4d:c9:38:44:10:
         ea:b6:b0:b3:ad:f4:d3:f4:7e:0f:d2:07:cb:c5:bc:56:51:61:
         62:54:19:d6:e7:92:e7:12:9e:33:0a:ef:ac:fb:2f:93:35:5d:
         07:aa:a0:d7:83:2a:02:01:59:26:c4:88:3c:52:90:b2:37:78:
         94:73:62:78:ed:4a:a7:51:7b:2c:1e:e7:7e:a1:db:69:08:46:
         37:77:f1:c6:32:cd:0a:97:12:89:a3:2d:db:1d:21:49:69:e5:
         6f:b7:df:e6:c2:f9:f9:5d:8e:6e:d9:3c:b8:ee:eb:ba:2f:95:
         73:d1:f8:a0:dc:26:a2:26:86:c0:d9:7f:d2:1d:33:8b:23:55:
         96:30:80:cb:76:b9:8f:70:41:79:53:24:49:d0:c1:42:52:01:
         07:6f:47:bb:fc:75:84:bb:ea:eb:33:ed:30:54:7e:d3:6c:18:
         64:ca:e9:80:32:a9:70:7e:0c:21:42:93:04:12:3a:55:f5:cb:
         74:86:af:a1:4d:5a:5c:2b:21:4d:71:bf:63:89:dd:fc:34:64:
         79:ef:fd:1c:3b:70:ad:51:39:83:d7:0d:01:ac:0b:6b:5c:eb:
         85:ae:97:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org