Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32312e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32312e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          ehY/9rOzVX/nDPFVoonFro88yNBGOwrWQi8onEe37/8=
Subject key identifier:   01:EE:9F:9B:95:62:9F:19:D8:FD:5E:81:C7:4A:04:C5:6A:44:12:3A
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       2A11EC9F36AAE21C416995BA5E6963DCD6CEB514
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32312e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:04:50 +0000
ROA not before:           Thu 20 Jul 2023 13:59:50 +0000
ROA not after:            Thu 18 Jul 2024 14:04:50 +0000
asID:                     52706
IP address blocks:        177.126.21.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:11:ec:9f:36:aa:e2:1c:41:69:95:ba:5e:69:63:dc:d6:ce:b5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 13:59:50 2023 GMT
            Not After : Jul 18 14:04:50 2024 GMT
        Subject: CN=01EE9F9B95629F19D8FD5E81C74A04C56A44123A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7d:fb:08:ee:12:17:f4:9a:cd:16:c4:c3:cb:
                    f8:a5:71:8a:a6:d7:7e:33:b7:7f:6d:40:0f:08:86:
                    02:d3:5b:2f:17:e9:29:b2:e9:90:7b:3a:eb:92:c6:
                    14:b3:46:8a:68:02:7f:f0:6a:78:0f:aa:f6:fd:41:
                    00:b4:38:98:0c:d7:25:9b:3c:15:53:14:d0:7a:1a:
                    2e:31:6d:d9:0c:bd:09:25:f6:a5:4e:bd:ea:38:c5:
                    80:4a:69:43:8c:55:9a:be:48:c0:65:1b:1f:e9:a9:
                    f6:d8:ef:57:5f:61:38:47:8a:45:42:57:50:56:1a:
                    5c:25:a7:3b:31:d3:3a:2c:11:ae:4e:37:91:aa:4f:
                    2b:a2:0e:21:45:a8:ba:ea:f7:e8:b8:4d:b8:5c:07:
                    f5:b0:8e:b0:31:c7:f1:6b:84:22:64:69:ff:e8:67:
                    df:87:e0:fb:9c:82:ef:27:7a:c1:98:a1:6d:5b:c9:
                    84:5e:52:63:45:83:df:04:aa:c8:31:6a:45:9e:a8:
                    67:8f:3a:69:86:b9:5e:bf:4e:e6:6c:36:a4:18:7b:
                    53:e4:71:cf:09:e1:d6:c1:b5:40:f6:c2:2e:b6:26:
                    c5:89:27:43:fd:85:95:2b:2b:2d:cb:ff:ac:74:bc:
                    85:b0:62:72:07:4f:08:b7:fe:6e:ef:91:d4:67:9e:
                    c7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EE:9F:9B:95:62:9F:19:D8:FD:5E:81:C7:4A:04:C5:6A:44:12:3A
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32312e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:83:37:49:75:7c:30:59:ae:42:5e:b4:ba:b7:19:c0:21:d9:
         35:74:a7:27:55:fb:6d:3d:30:d3:03:bf:10:05:82:6d:96:d7:
         e4:f5:f9:26:4d:aa:f2:58:e4:8c:f3:98:be:85:9f:f3:fd:e7:
         7e:89:8d:a8:90:13:04:e6:07:e2:97:27:c5:61:9e:ce:a9:fb:
         b4:17:af:d6:41:32:18:57:a2:4d:50:47:8f:76:2f:47:ea:df:
         92:65:e3:95:b1:3b:b1:5b:f3:5d:4d:bc:d5:42:aa:de:25:ea:
         43:dd:a6:ea:a5:63:64:eb:d9:a3:95:fa:a6:10:6f:81:89:2c:
         4a:4f:a1:f1:d7:c0:24:0e:73:d4:f8:5d:a2:8a:51:52:9b:16:
         ac:3b:2b:99:82:ef:4d:23:4e:27:cb:6c:d4:26:21:6b:7e:74:
         27:5d:c1:45:2a:2c:c0:21:87:f3:d4:08:d2:7b:1c:66:1d:5b:
         dd:98:da:81:d7:08:53:62:b6:16:3f:9e:ad:92:5d:d1:ca:2b:
         b5:c4:a9:fb:fd:19:f5:d5:b2:e8:7b:0d:93:20:b6:23:27:40:
         b7:14:0c:5e:bf:30:61:88:b8:c5:ab:d8:1c:20:22:36:5a:1f:
         4c:f0:74:e9:e0:20:56:58:6d:9e:12:1a:77:6a:7d:9c:f8:af:
         ef:18:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org