Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32352e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32352e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          1DFChP2PFEXfG37OCHcGmJDGHeNYFwEwLbWdUEY+YCQ=
Subject key identifier:   CD:7B:08:E9:4C:2E:16:45:81:7D:46:5F:96:0E:1A:F0:E6:CB:7B:55
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       31CDE810A1DACE73739594C06C988F1AEE034FAA
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32352e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:06:35 +0000
ROA not before:           Thu 20 Jul 2023 14:01:35 +0000
ROA not after:            Thu 18 Jul 2024 14:06:35 +0000
asID:                     52706
IP address blocks:        177.126.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:cd:e8:10:a1:da:ce:73:73:95:94:c0:6c:98:8f:1a:ee:03:4f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:01:35 2023 GMT
            Not After : Jul 18 14:06:35 2024 GMT
        Subject: CN=CD7B08E94C2E1645817D465F960E1AF0E6CB7B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:cf:bb:31:49:e9:5a:33:ae:44:61:2d:88:
                    41:08:13:91:fd:df:c0:99:f6:54:9a:07:5f:5d:ae:
                    bf:8e:63:24:1d:21:a1:88:85:c8:54:5a:af:94:7c:
                    04:c9:16:aa:b6:6e:3e:24:bb:03:6f:38:19:9b:cb:
                    5c:01:ff:eb:8d:5b:01:7a:45:64:bb:64:49:05:67:
                    64:80:da:0e:9d:19:4e:a1:d3:ff:c4:bf:78:c7:56:
                    cf:c5:2d:04:b6:b9:de:20:c7:de:75:6a:45:06:e9:
                    a7:44:34:28:36:a7:47:0b:0d:fd:7a:37:53:f9:9f:
                    d3:49:8b:83:88:78:94:42:30:83:e3:bd:be:73:f6:
                    1e:53:87:3e:2c:a5:b8:be:0d:e6:67:ed:11:73:01:
                    e0:d0:ab:6a:b8:f2:eb:ec:e0:fc:0b:26:d2:e5:4c:
                    0b:07:66:d2:10:5b:c5:be:9f:ac:42:23:82:7e:d1:
                    96:16:b5:5e:a5:74:f2:7f:05:d8:f2:c3:00:0d:45:
                    70:8f:0c:55:88:f8:99:b2:d1:2d:86:fd:f2:3c:72:
                    5d:7e:38:84:42:1b:5b:d6:53:15:c4:df:b3:aa:d8:
                    80:2e:5b:73:14:52:5d:d6:4c:f4:d2:39:21:f5:77:
                    13:9f:19:ef:e7:92:f0:b7:97:42:a9:34:33:9b:75:
                    74:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7B:08:E9:4C:2E:16:45:81:7D:46:5F:96:0E:1A:F0:E6:CB:7B:55
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32352e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:b7:0e:ea:3c:46:94:9e:f7:95:d2:ad:cd:12:2f:90:ce:e6:
         86:38:14:ba:5d:f4:01:58:c5:22:e7:d5:9a:31:ec:22:ee:7f:
         c9:9d:01:a1:71:85:8c:bb:51:4c:22:9f:a7:30:89:a4:7f:9e:
         63:01:ac:a9:60:8e:02:21:36:89:e8:66:d7:c6:1c:2a:8b:52:
         8b:31:02:4c:ed:2b:3b:a3:fb:32:a4:8c:b9:5e:2e:9e:49:27:
         eb:b4:db:11:0c:ab:9a:26:ff:8f:33:9b:bf:f1:6e:58:66:3a:
         d9:0d:a7:e3:45:73:41:fb:40:df:16:40:a9:1b:34:c7:62:9b:
         f2:c1:cf:2b:20:aa:58:64:22:5b:72:4d:bc:86:6e:d4:6e:10:
         3e:94:da:9b:d5:b4:f3:3c:45:23:76:0b:9e:39:d6:c3:ac:cf:
         8e:e4:2b:ef:30:e9:9d:2f:0c:54:db:95:85:c8:f9:16:42:1b:
         e8:91:4b:67:9a:14:af:14:04:58:a0:72:06:29:75:92:b2:a6:
         03:e3:f2:9d:8e:81:2b:5b:1e:2d:0c:1d:7a:27:2b:ef:04:32:
         8d:fe:b1:61:8b:1a:45:94:e1:3a:4d:32:c5:64:66:7c:e4:0d:
         d5:49:a2:dd:70:9e:73:ce:dd:69:f3:cf:15:3b:c5:80:4f:5e:
         31:9c:35:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org