Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32302e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e32302e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          jICwZ9MSrnuMWi4SoollSTEaVWfjYghj0WIT0RYwFio=
Subject key identifier:   FE:2E:AB:CE:5E:64:C2:D9:A8:54:36:42:53:2E:E2:7D:6D:5D:CC:4A
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       604895259EB007D1AB01368399A89E57E33756F0
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32302e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:04:08 +0000
ROA not before:           Thu 20 Jul 2023 13:59:08 +0000
ROA not after:            Thu 18 Jul 2024 14:04:08 +0000
asID:                     52706
IP address blocks:        177.126.20.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:48:95:25:9e:b0:07:d1:ab:01:36:83:99:a8:9e:57:e3:37:56:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 13:59:08 2023 GMT
            Not After : Jul 18 14:04:08 2024 GMT
        Subject: CN=FE2EABCE5E64C2D9A8543642532EE27D6D5DCC4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:33:cf:87:b3:ca:de:9b:b4:79:27:9c:b5:2d:
                    5e:d5:ae:2d:b3:eb:b6:a0:3c:cb:e7:1b:cd:0e:8e:
                    cb:6d:a8:08:9e:fd:14:92:34:33:1a:e0:a8:75:56:
                    85:32:c0:e9:eb:4a:6c:c5:13:ce:44:e2:9b:4a:67:
                    64:8b:cb:ac:cb:b4:ca:a2:72:5e:9d:6f:84:cc:c4:
                    c9:6d:d0:37:35:39:a6:ed:12:e4:46:85:e7:24:a2:
                    91:99:00:65:7e:b5:dd:42:7e:a1:e4:5b:ec:24:ec:
                    8f:a6:80:fe:cf:c8:e0:e3:4a:05:9c:bc:a7:6c:d3:
                    0e:df:52:96:8e:b7:81:87:5a:c2:64:eb:c5:d9:6e:
                    85:6a:2e:b6:0e:7c:e2:f8:1e:ea:58:23:0c:5e:ed:
                    70:26:b5:d6:4f:9f:e7:50:9d:e7:3f:65:92:a8:7a:
                    aa:ef:b3:c3:a2:78:b5:40:c3:14:78:2e:2a:93:65:
                    11:e7:43:05:0d:c5:18:f7:1f:33:8e:d0:0b:2e:f7:
                    10:8a:ac:e3:38:9e:90:b7:bd:9c:0c:84:53:36:87:
                    c6:d7:3e:0c:a2:9b:6a:d1:45:6d:df:c2:d9:df:07:
                    ab:03:5e:20:5e:58:bf:ae:ab:0b:dd:fc:1b:fb:0f:
                    ed:64:3a:c5:d9:ff:f4:fa:7d:d1:33:a4:ed:ea:4b:
                    f5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2E:AB:CE:5E:64:C2:D9:A8:54:36:42:53:2E:E2:7D:6D:5D:CC:4A
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32302e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:5a:dd:f7:91:81:e3:27:a1:7b:ef:96:26:25:6e:db:03:b7:
         ad:34:d4:9a:f9:8e:3f:78:13:d6:77:10:bc:75:7f:90:a9:d7:
         a6:ae:ec:94:60:98:52:f7:d6:eb:e9:79:5b:8a:02:b3:ca:66:
         af:85:ad:b5:c5:21:26:e0:3d:18:11:de:03:06:01:c8:b2:8f:
         9e:36:39:6c:d3:28:82:ad:c4:80:47:da:9a:85:c3:7f:a5:1a:
         e0:25:47:35:27:50:a2:50:05:5b:9b:70:f9:d0:e4:db:69:e5:
         ed:4c:37:5c:fd:05:de:0d:df:40:67:9c:6f:35:b6:a8:c3:94:
         eb:63:aa:ad:12:b0:5e:55:0e:a1:9f:9e:15:71:e6:f7:3a:40:
         d3:6a:30:9c:ed:45:0e:9d:ba:00:1c:7c:e3:7e:1c:b7:f5:cc:
         44:56:67:de:30:8e:ca:1d:35:1b:29:81:fd:d5:17:81:95:93:
         5c:35:07:cf:2d:ac:b2:c5:e9:34:e5:c6:d5:51:9b:52:98:cb:
         1f:0a:a6:ad:bf:b7:50:8b:58:d4:20:df:3e:1b:ba:57:5e:1e:
         47:e7:3a:52:07:58:fb:51:5f:50:0f:11:e5:b0:b5:7a:57:6c:
         17:c7:ed:2f:b4:1a:c2:d2:c9:17:9f:2f:bb:1e:00:a9:a0:44:
         6b:42:ed:0e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYEiVJZ6wB9GrATaDmaieV+M3VvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjFBMDJBQTJFODI5RTUxODM0Mzk1OEVFOUU3QTdEMjg0
ODM5QjQwNDAeFw0yMzA3MjAxMzU5MDhaFw0yNDA3MTgxNDA0MDhaMDMxMTAvBgNV
BAMTKEZFMkVBQkNFNUU2NEMyRDlBODU0MzY0MjUzMkVFMjdENkQ1RENDNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfM8+Hs8rem7R5J5y1LV7Vri2z
67agPMvnG80OjsttqAie/RSSNDMa4Kh1VoUywOnrSmzFE85E4ptKZ2SLy6zLtMqi
cl6db4TMxMlt0Dc1OabtEuRGheckopGZAGV+td1CfqHkW+wk7I+mgP7PyODjSgWc
vKds0w7fUpaOt4GHWsJk68XZboVqLrYOfOL4HupYIwxe7XAmtdZPn+dQnec/ZZKo
eqrvs8OieLVAwxR4LiqTZRHnQwUNxRj3HzOO0Asu9xCKrOM4npC3vZwMhFM2h8bX
Pgyim2rRRW3fwtnfB6sDXiBeWL+uqwvd/Bv7D+1kOsXZ//T6fdEzpO3qS/WtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/i6rzl5kwtmoVDZCUy7ifW1dzEowHwYDVR0j
BBgwFoAUIaAqougp5Rg0OVjunnp9KEg5tAQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC8yMUEwMkFBMkU4MjlFNTE4MzQzOTU4RUU5RTdBN0QyODQ4MzlCNDA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIxQTAyQUEyRTgyOUU1MTgz
NDM5NThFRTlFN0E3RDI4NDgzOUI0MDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzEzNzM3MmUzMTMyMzYyZTMyMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsX4UMA0GCSqGSIb3DQEBCwUAA4IBAQCnWt33kYHj
J6F775YmJW7bA7etNNSa+Y4/eBPWdxC8dX+QqdemruyUYJhS99br6XlbigKzymav
ha21xSEm4D0YEd4DBgHIso+eNjls0yiCrcSAR9qahcN/pRrgJUc1J1CiUAVbm3D5
0OTbaeXtTDdc/QXeDd9AZ5xvNbaow5TrY6qtErBeVQ6hn54Vceb3OkDTajCc7UUO
nboAHHzjfhy39cxEVmfeMI7KHTUbKYH91ReBlZNcNQfPLayyxek05cbVUZtSmMsf
Cqatv7dQi1jUIN8+G7pXXh5H5zpSB1j7UV9QDxHlsLV6V2wXx+0vtBrC0skXny+7
HgCpoERrQu0O
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org