Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32322e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e32322e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          mgeQPAKnI/XGgEmwbaTCo7UFFnLmRYXRzVTU00PogA0=
Subject key identifier:   C2:A9:51:9C:47:A4:0F:F9:88:49:56:67:F8:75:29:7E:12:EC:24:A3
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       75C136690B1078DCC3D2DA1EC29E33DE60280325
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32322e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:06:04 +0000
ROA not before:           Thu 20 Jul 2023 14:01:04 +0000
ROA not after:            Thu 18 Jul 2024 14:06:04 +0000
asID:                     52706
IP address blocks:        177.126.22.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c1:36:69:0b:10:78:dc:c3:d2:da:1e:c2:9e:33:de:60:28:03:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:01:04 2023 GMT
            Not After : Jul 18 14:06:04 2024 GMT
        Subject: CN=C2A9519C47A40FF988495667F875297E12EC24A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3e:82:54:8d:be:92:34:73:7a:e4:d8:cf:32:
                    39:e5:82:cc:12:82:73:93:60:07:b4:fb:d6:d5:ee:
                    5c:86:f7:ec:97:57:84:9c:ed:8c:66:67:cc:58:5c:
                    57:6e:ea:1c:cf:23:ed:3a:f5:17:94:c4:ce:a8:10:
                    be:e3:60:a7:f6:f3:8b:55:1b:7f:59:e7:11:28:9b:
                    a9:df:16:e1:be:88:7b:80:ac:32:ba:24:69:cf:86:
                    8c:ca:13:d4:26:c6:91:bc:d6:66:61:01:20:c0:2d:
                    8b:89:89:62:b1:53:36:3d:e3:af:06:f4:b6:bf:3f:
                    d9:35:32:fb:90:90:65:7e:55:89:5c:f2:95:98:8f:
                    ca:47:87:89:26:1c:69:76:a5:70:88:35:85:19:15:
                    27:18:00:3e:e4:25:0e:3d:ab:3f:e4:5f:a2:f1:80:
                    3c:ed:5d:48:66:64:43:b0:b4:df:f2:d3:81:f2:0e:
                    e9:63:35:f1:e1:31:9a:da:5f:95:7c:37:c1:5e:5b:
                    92:eb:f8:5b:c4:4c:4d:27:3b:e0:13:a3:7d:80:14:
                    01:f3:f9:ac:55:cd:12:a2:4b:54:1e:2a:9d:d9:f1:
                    bb:a1:b6:8f:9b:2e:7b:88:82:17:49:2f:f4:d6:2a:
                    ce:92:0f:ce:e0:3c:88:33:3d:53:a6:a4:0f:6c:58:
                    ce:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A9:51:9C:47:A4:0F:F9:88:49:56:67:F8:75:29:7E:12:EC:24:A3
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32322e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:58:85:33:80:76:97:13:b5:55:60:b5:d6:2e:b3:d1:f8:3f:
         25:56:56:94:39:eb:dd:8e:dc:0b:f0:fc:22:11:7f:54:63:97:
         25:34:56:f9:23:94:22:b6:8b:cd:05:29:3d:a1:a1:47:46:54:
         af:9c:79:0a:92:57:f0:65:d3:ae:f7:7f:91:7a:4f:ba:2e:89:
         32:aa:b1:da:40:3c:e8:e5:91:65:87:1d:9b:57:77:a0:90:a7:
         f1:b1:5e:5e:02:df:50:bc:3a:13:1b:87:c5:a9:e6:34:6c:a5:
         24:3e:f4:2a:ff:2a:1e:17:0a:da:99:09:16:9b:c2:67:c7:56:
         85:65:5b:7d:5e:c9:34:b2:77:91:fd:ec:4f:02:dd:d6:fe:b6:
         9d:8b:53:3f:54:74:d1:e0:c3:f6:ad:fe:99:0a:54:f5:1f:20:
         61:0f:c1:05:f6:a6:2a:20:df:4d:c6:87:d0:96:65:df:f4:47:
         85:ac:9e:94:a5:ce:c6:f9:a4:51:5a:77:ab:fa:d9:98:3b:76:
         c2:5b:a4:8c:10:ce:a3:14:44:31:f4:cf:70:f7:b1:3a:50:db:
         30:e8:c4:7f:03:4f:9b:d2:01:40:2e:46:74:18:1c:5f:f5:75:
         52:dd:aa:c4:dc:3b:bf:e3:bb:ce:0e:a7:12:8e:9e:00:d3:2d:
         c1:d8:c7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org