Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32302e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32302e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          QDj+l/MCLXVeLOqDyWzH8ipt9reGC5qk0dtEOE+gwlY=
Subject key identifier:   0F:D6:70:8A:6D:CD:64:57:6C:B9:A4:66:F3:79:64:85:BA:91:45:06
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       48B230E4CDF670826AECD7065D585A8F53CB25FA
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32302e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:04:36 +0000
ROA not before:           Thu 20 Jul 2023 13:59:36 +0000
ROA not after:            Thu 18 Jul 2024 14:04:36 +0000
asID:                     52706
IP address blocks:        177.126.20.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b2:30:e4:cd:f6:70:82:6a:ec:d7:06:5d:58:5a:8f:53:cb:25:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 13:59:36 2023 GMT
            Not After : Jul 18 14:04:36 2024 GMT
        Subject: CN=0FD6708A6DCD64576CB9A466F3796485BA914506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:62:d6:94:89:6f:be:99:65:7a:fa:2f:fe:49:
                    b4:f7:77:57:84:15:d7:c5:d6:e2:5d:16:95:2d:36:
                    88:e3:50:13:7d:1d:7b:e4:d5:3b:d3:d7:21:ed:6d:
                    17:bf:4c:5b:a6:65:e7:3a:e9:48:73:b4:4c:d8:c2:
                    03:88:4f:32:bd:e4:97:03:49:fd:1c:e7:d7:39:d5:
                    bd:21:02:1e:b2:ce:b3:35:db:67:ef:19:8b:df:04:
                    09:96:04:3c:d9:06:00:11:77:36:49:07:fe:a0:34:
                    34:89:46:cb:35:72:4a:01:37:27:d2:bf:1c:03:36:
                    ca:80:83:ab:44:fe:16:52:82:22:d1:7e:67:d6:0a:
                    9d:9a:17:0d:c2:90:89:ef:f6:fe:61:fd:f2:11:3c:
                    61:55:46:75:43:b0:13:81:55:0f:d6:17:ab:dc:ea:
                    47:ae:51:8f:00:5c:70:a0:13:1f:84:44:89:1f:93:
                    59:44:47:2a:6c:92:4b:9e:a6:4b:5c:37:e0:41:74:
                    b1:0d:bf:c7:27:2b:ba:4d:eb:13:37:e0:48:7a:bf:
                    ab:d2:b7:78:de:21:51:af:f3:69:fa:b9:84:b2:1a:
                    23:5a:61:85:2f:79:a1:a8:b5:c1:61:0c:b1:30:81:
                    e9:f9:94:19:b4:f9:e5:35:9b:bb:32:5b:86:43:a6:
                    c3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D6:70:8A:6D:CD:64:57:6C:B9:A4:66:F3:79:64:85:BA:91:45:06
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32302e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:fa:ee:33:94:12:b6:6e:f3:96:ef:11:e6:1b:f5:cd:3e:eb:
         ee:02:36:1e:85:34:17:90:d4:f3:95:25:89:b7:27:6e:cf:27:
         45:d0:d7:3c:4f:ae:c3:55:31:f8:07:ef:f4:d2:65:b3:c9:12:
         fb:21:ca:d8:86:15:eb:88:0d:9b:87:22:e4:b8:70:3c:e2:f2:
         be:a0:8f:50:e9:0f:71:aa:51:ac:12:c6:62:e6:94:2f:1f:b5:
         4b:0d:f3:d6:00:fb:cb:84:83:b9:0b:8f:05:dd:9a:c9:29:30:
         08:a4:20:ce:74:61:c6:dd:0c:26:9e:9a:8a:27:37:e9:bb:4b:
         14:8e:ce:bd:a6:95:8c:fa:c7:bd:dd:a5:91:e3:f1:11:2a:19:
         1d:3b:92:dd:56:0f:17:86:8e:ba:d7:22:6b:7f:5b:b1:f4:82:
         ce:c4:a2:16:be:08:b5:ac:c3:1d:15:de:1d:ae:f5:f8:33:a4:
         dc:1b:2c:96:f8:85:00:4a:52:05:a8:3c:e9:9c:b1:71:00:ae:
         87:87:bc:3d:b0:01:98:9d:4c:70:01:01:e3:09:bc:51:52:8b:
         95:62:3f:5d:e1:66:5d:b0:71:a8:7f:68:7f:a5:4f:6c:f6:3a:
         62:08:9f:3e:18:e9:6e:b4:cb:1c:57:58:3b:a9:6d:1f:28:82:
         66:33:e6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org