Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32342e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e32342e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          BPyiqRCY7B0NPxqu9H2uPEyYfGeHrX6WuUQIIA4Mw5I=
Subject key identifier:   B6:3A:73:08:C9:9F:92:94:4A:D0:53:FC:04:D9:B2:67:B9:66:8A:FC
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       539681278FD6D76078E11A5F1B27E998A60CFE12
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32342e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:06:23 +0000
ROA not before:           Thu 20 Jul 2023 14:01:23 +0000
ROA not after:            Thu 18 Jul 2024 14:06:23 +0000
asID:                     52706
IP address blocks:        177.126.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:96:81:27:8f:d6:d7:60:78:e1:1a:5f:1b:27:e9:98:a6:0c:fe:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:01:23 2023 GMT
            Not After : Jul 18 14:06:23 2024 GMT
        Subject: CN=B63A7308C99F92944AD053FC04D9B267B9668AFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:79:63:16:13:a8:95:b7:67:c1:97:36:87:8f:
                    bc:b4:7e:44:03:64:b7:6a:6c:90:05:54:bf:e8:75:
                    5c:37:df:c4:66:a7:5a:71:97:76:bb:58:bd:46:32:
                    b3:8c:a7:ad:5b:08:ea:ad:70:ad:36:d2:ad:f0:6f:
                    c8:49:06:db:3a:3e:30:8c:b0:be:b5:b4:0c:0a:3f:
                    ed:c4:86:e9:89:d4:60:26:d5:68:f9:28:37:86:8b:
                    48:03:4d:77:4d:66:ac:40:ff:8b:53:63:91:54:cd:
                    76:20:c6:1d:a6:9b:48:2e:2a:64:b3:0a:4f:a1:2c:
                    47:78:66:1e:7f:a5:13:6d:db:3f:b1:6d:b1:27:04:
                    3a:3f:9b:bc:42:95:2e:7f:30:e0:05:c0:31:d1:35:
                    fc:5d:71:b9:28:1b:e0:65:12:00:4b:5f:8e:4d:81:
                    81:0e:36:01:d5:4b:89:d3:a5:69:bf:99:e4:fb:c3:
                    44:9a:ee:76:3c:17:c5:ba:d5:a1:fa:2a:be:dd:5a:
                    59:9b:36:2f:7e:c7:eb:8a:cf:17:72:5c:b0:dc:45:
                    3b:81:36:59:ce:1b:e6:55:2c:5b:ab:41:e1:92:21:
                    84:87:cc:5f:80:92:50:77:35:b9:50:bf:4d:2c:81:
                    56:6c:3a:15:ce:13:11:4b:86:dd:54:e1:58:ca:8e:
                    1d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3A:73:08:C9:9F:92:94:4A:D0:53:FC:04:D9:B2:67:B9:66:8A:FC
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32342e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:41:c4:25:73:de:34:63:81:bd:ea:50:d0:ef:45:c7:7c:e5:
         42:f1:10:e0:5c:4a:74:48:38:d2:57:04:38:8c:cf:ff:de:88:
         34:de:36:78:6c:5f:45:56:90:55:0a:1e:6c:3f:f6:fd:ed:24:
         91:6d:ea:c8:b0:b7:68:c8:7c:50:65:56:26:70:c4:4f:28:6c:
         29:77:69:da:a7:64:5a:44:1c:85:60:79:17:33:ab:95:e6:53:
         23:8c:ff:9b:a8:25:f8:66:fb:db:fb:1f:34:bd:50:33:f5:a9:
         29:b1:6c:c8:fd:8a:87:d4:71:22:93:3f:6c:df:55:31:f7:d4:
         9c:f0:4a:4a:c1:16:7c:42:85:05:9a:76:f9:d6:e8:45:3e:bf:
         63:e9:21:66:97:0e:0a:74:a8:db:c4:49:4c:84:27:89:20:79:
         75:95:5b:2e:e8:41:f7:f7:e9:16:f1:fb:97:52:dd:14:2b:46:
         55:30:f4:5d:26:c0:09:22:94:ae:18:9b:49:4b:98:f1:09:a4:
         e4:20:b0:e8:aa:9d:3d:25:b8:89:36:ca:52:ca:f9:d4:40:8e:
         15:7a:02:4f:ed:ac:68:3a:3f:70:58:30:76:f5:4d:46:ab:79:
         f0:2b:bd:52:1d:3f:80:b9:00:1c:b3:35:5b:35:88:90:3a:e4:
         16:0b:f5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org