Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32332e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32332e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          fxbcEAFgKu7QbDpJmiVqI5qmDQRKXwnjIvYVOCyzCZc=
Subject key identifier:   59:E0:C2:FA:43:67:31:49:56:61:8C:DC:16:EE:54:94:3C:47:B2:65
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       0887AD2701D02691BA7265C3D94009D0555DDC54
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32332e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:06:15 +0000
ROA not before:           Thu 20 Jul 2023 14:01:15 +0000
ROA not after:            Thu 18 Jul 2024 14:06:15 +0000
asID:                     52706
IP address blocks:        177.126.23.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:87:ad:27:01:d0:26:91:ba:72:65:c3:d9:40:09:d0:55:5d:dc:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:01:15 2023 GMT
            Not After : Jul 18 14:06:15 2024 GMT
        Subject: CN=59E0C2FA4367314956618CDC16EE54943C47B265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:e0:c3:3e:35:70:9f:32:1d:b3:cf:e7:4c:
                    b4:79:47:c5:2c:5d:28:b9:87:28:77:bf:3b:f1:c7:
                    9a:76:b1:74:f6:83:5f:a0:40:3d:08:ff:9f:a6:79:
                    d1:5e:52:e4:9a:46:0c:29:85:f6:4c:a9:ed:71:f3:
                    9d:c7:34:18:c8:31:4d:81:17:4a:0c:09:1d:0f:50:
                    16:7e:5a:68:b1:74:21:3e:b2:da:a6:86:8c:55:e1:
                    9b:c9:10:8d:22:7a:35:33:16:c9:f9:99:66:8c:e8:
                    da:17:54:53:70:4c:4c:f2:01:d8:7e:bc:2e:bd:c3:
                    ce:0a:5c:49:8c:58:d8:85:a0:b9:82:2d:f3:e7:8c:
                    3d:0e:e0:99:08:03:fa:e2:2f:4f:f1:4d:fb:8e:df:
                    3c:ae:da:d7:72:ae:e2:06:4a:6c:6b:c1:0a:4a:1b:
                    de:1b:2f:08:65:70:ec:67:4d:19:8e:10:65:04:b0:
                    83:e7:10:47:89:13:80:b3:81:5c:dd:ca:29:e2:d0:
                    b3:2f:14:d8:35:32:fa:ae:8c:13:56:d6:3c:5e:67:
                    0e:a1:bb:2d:8d:28:fc:d7:e9:57:9c:19:89:dc:3a:
                    29:81:0f:52:03:19:3c:39:40:f6:73:87:b0:38:7a:
                    d1:67:32:b8:1c:da:39:41:50:00:c0:f6:b5:6d:75:
                    b1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E0:C2:FA:43:67:31:49:56:61:8C:DC:16:EE:54:94:3C:47:B2:65
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32332e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:39:69:e1:b1:be:25:97:2c:6a:79:d1:82:7e:fb:0c:9b:a9:
         69:56:11:7b:a7:ba:72:e9:22:55:0a:20:0f:b1:ed:bc:76:58:
         04:b2:64:71:c4:d2:55:b4:9f:58:70:a8:50:82:2c:94:dd:97:
         b9:d7:55:b7:0b:f1:11:aa:fd:c5:ac:5f:ab:9c:c1:7d:30:00:
         9d:d7:20:36:52:dd:11:44:4b:81:3c:e6:f8:03:26:00:37:b8:
         c7:d6:96:6e:98:f5:40:63:31:ab:dd:5c:10:b6:68:9a:7d:1e:
         8d:3f:0d:0c:f1:90:69:81:c6:41:06:4a:ef:23:e0:c7:7c:4f:
         ba:4f:cb:b2:5a:fa:b0:ae:b1:82:3e:ad:fe:cc:1a:f9:6a:11:
         bf:c9:90:51:aa:7b:26:f5:48:05:73:76:3a:a0:a9:bb:44:ad:
         fc:28:08:e2:34:b5:3c:eb:aa:98:0a:50:70:b0:ab:0b:b7:fc:
         87:c7:06:95:e5:9e:59:d5:11:9c:3c:1d:b2:d2:9b:5c:64:68:
         05:c0:cd:5c:ee:63:1a:55:f1:33:8b:7c:06:5e:d7:52:d5:4c:
         27:b0:f9:8f:93:4c:0a:51:f3:69:f6:9a:a6:81:c0:f8:19:1b:
         9f:ad:d8:1a:bb:8b:62:3e:2c:1d:30:f7:a7:a3:16:57:fb:3c:
         77:4a:06:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org