Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32372e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32372e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          5OUXxTmJy01oIrXEskeHIMFTtxBiRkEJNBDG0s/uXCo=
Subject key identifier:   58:95:61:F8:04:6B:B9:5B:88:A2:D9:A5:36:FB:4B:80:3F:82:64:64
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       3072C642B639D5E115D371C76E8006FAD1285524
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32372e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:06:47 +0000
ROA not before:           Thu 20 Jul 2023 14:01:47 +0000
ROA not after:            Thu 18 Jul 2024 14:06:47 +0000
asID:                     52706
IP address blocks:        177.126.27.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:72:c6:42:b6:39:d5:e1:15:d3:71:c7:6e:80:06:fa:d1:28:55:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:01:47 2023 GMT
            Not After : Jul 18 14:06:47 2024 GMT
        Subject: CN=589561F8046BB95B88A2D9A536FB4B803F826464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:af:82:bd:c9:48:82:3c:a1:4d:d2:17:66:78:
                    09:8e:b8:7e:f0:77:f6:ad:db:95:94:a9:ed:f5:4d:
                    c5:a1:f5:2b:6d:20:26:b8:65:ab:c7:2f:c2:95:9c:
                    54:07:ce:24:76:09:9f:7b:99:54:87:36:e1:36:fd:
                    23:36:4f:17:1d:5e:79:47:14:4c:90:32:df:fe:7f:
                    70:44:e1:4a:d4:03:f2:5b:de:f9:98:1e:92:13:3c:
                    ae:33:ec:e2:a9:3c:04:d9:f1:81:34:c5:7e:5d:79:
                    62:d2:74:aa:69:d4:c4:49:84:80:99:28:74:64:94:
                    c7:7f:17:bc:4b:00:dd:71:49:d6:62:9b:c0:6c:d1:
                    68:2c:a0:94:df:0d:ea:a3:75:b9:74:61:09:62:76:
                    11:09:99:5a:d0:44:33:7c:4a:78:48:b9:57:26:7e:
                    a8:6c:52:77:60:88:e6:09:c4:96:8c:dd:15:41:d9:
                    5c:2e:ee:73:d3:0d:ce:1e:5d:e2:60:f3:11:ed:fa:
                    e8:dc:c9:93:4a:a1:57:84:9f:fb:24:93:73:31:7a:
                    0d:67:2c:95:a6:4b:30:0d:e4:f6:d1:9b:fd:0d:91:
                    1f:78:ac:cc:4d:f9:87:c8:05:f4:43:53:d4:5a:80:
                    97:e0:3d:20:89:c3:2e:c9:e1:99:f5:78:0f:21:7f:
                    23:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:95:61:F8:04:6B:B9:5B:88:A2:D9:A5:36:FB:4B:80:3F:82:64:64
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32372e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:86:b8:23:44:4a:d0:f0:b4:34:16:1b:f9:75:22:96:eb:0b:
         ba:00:65:ba:27:69:d2:0c:f1:24:4b:b4:5a:65:4e:9a:68:6d:
         34:b6:ad:ff:7b:67:7b:41:1c:40:ae:b2:af:1e:8f:b5:2f:61:
         82:02:cc:21:01:28:f8:d4:60:f3:50:d3:79:32:35:de:a2:f4:
         0c:d7:ae:eb:e0:a2:b3:bf:82:5c:5e:59:76:8c:83:1b:ab:a0:
         da:bc:7d:af:fa:91:0c:35:d9:74:2e:fc:c6:74:2a:4f:93:46:
         65:7b:54:b5:da:c4:e1:dd:f5:b9:0e:00:1a:7b:38:58:4c:4b:
         ef:10:b4:58:b8:d0:c7:7f:fc:2d:e3:49:13:fb:a9:f4:22:ae:
         63:00:19:e7:fc:44:e7:18:9a:2a:cc:80:be:7f:45:e4:f5:c7:
         9c:4d:7e:3f:88:dd:30:8d:ea:59:a5:dc:5f:46:e4:3f:5a:d7:
         c2:8d:f9:09:08:ea:06:f0:04:68:0e:59:1f:67:bf:3d:f0:87:
         b2:4a:a2:49:a7:cb:20:98:64:0d:76:e9:01:1d:3e:90:c3:97:
         ac:db:70:38:91:2d:54:f0:56:7f:9f:53:d5:ba:e5:ea:56:84:
         dd:a6:59:da:1c:8b:c8:28:19:39:35:6f:e4:f9:d4:0d:05:aa:
         0c:eb:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org