Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32382e302f32322d3232203d3e203532373036.roa
File:                     3137372e3132362e32382e302f32322d3232203d3e203532373036.roa (raw, json)
Hash identifier:          PgPPkWFKokq8ikjkJlRELc3NFQJfhEUKfdnmKMNude0=
Subject key identifier:   B5:F0:E4:65:47:16:7B:F5:25:42:EB:08:43:60:A8:DA:76:62:1A:E9
Certificate issuer:       /CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
Certificate serial:       67BBC187EB336F71BB1D6B409050305DF7F40B1E
Authority key identifier: D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32382e302f32322d3232203d3e203532373036.roa
Signing time:             Tue 18 Apr 2023 12:28:34 +0000
ROA not before:           Tue 18 Apr 2023 12:23:34 +0000
ROA not after:            Tue 16 Apr 2024 12:28:34 +0000
asID:                     52706
IP address blocks:        177.126.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bb:c1:87:eb:33:6f:71:bb:1d:6b:40:90:50:30:5d:f7:f4:0b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
        Validity
            Not Before: Apr 18 12:23:34 2023 GMT
            Not After : Apr 16 12:28:34 2024 GMT
        Subject: CN=B5F0E46547167BF52542EB084360A8DA76621AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:2f:86:c8:4b:83:ae:f8:ca:60:39:3a:5b:
                    e2:7d:8d:00:77:c6:98:ec:93:7a:55:28:1a:24:1a:
                    a1:d2:2a:e5:25:36:0f:f1:fb:cb:1b:a5:8a:7a:54:
                    2d:66:ec:72:a7:61:58:51:ea:c7:14:e2:d9:e0:fc:
                    46:1e:c9:7c:b6:96:79:ba:bd:42:2b:d9:02:cb:5f:
                    50:12:ba:8b:45:d0:56:0b:00:d5:87:fd:e8:63:43:
                    a1:72:87:b3:2d:b8:f8:aa:e1:ac:e7:d6:9d:7a:51:
                    72:e2:e3:92:0a:7a:03:04:ef:a9:67:d5:f1:56:9d:
                    17:99:67:8e:c4:35:0c:d1:22:a4:a5:d6:e4:1c:9f:
                    93:00:b6:12:87:0c:c3:71:21:62:0d:d6:72:d2:bf:
                    42:c1:b8:1a:45:50:78:de:e3:f0:2d:02:63:b6:c9:
                    c4:71:f9:6f:42:9b:11:13:7b:73:a4:aa:40:0b:1b:
                    e6:01:61:7a:7c:1d:3b:40:8b:22:58:a0:45:8e:04:
                    26:0e:58:80:e1:8d:79:7b:42:10:55:56:90:f4:d6:
                    ed:1a:69:f2:3d:92:36:1f:97:4d:be:69:f4:b5:16:
                    b1:33:a3:35:7b:d3:92:c6:b7:5c:84:39:a7:9e:74:
                    ec:5f:21:7f:1a:22:f1:d7:63:76:9d:2d:e0:c5:d4:
                    47:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F0:E4:65:47:16:7B:F5:25:42:EB:08:43:60:A8:DA:76:62:1A:E9
            X509v3 Authority Key Identifier:
                keyid:D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32382e302f32322d3232203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:2a:30:11:7c:38:73:36:5a:8c:99:d1:53:64:04:09:6d:82:
         04:4a:63:ff:7b:0e:c1:38:3f:c6:78:04:79:e5:9a:25:a6:bf:
         a9:57:ba:bc:b9:3c:89:16:48:00:13:97:25:70:6c:8b:9d:49:
         17:b5:6a:ff:25:98:ee:0d:fc:81:ca:36:2a:dd:21:b1:c6:33:
         f6:6d:11:58:f6:79:90:35:ca:ef:a6:62:2a:b2:1b:d9:7c:3c:
         37:39:3d:c3:8d:ba:0c:8a:bb:fc:65:b6:32:2a:c6:45:0b:95:
         35:64:bb:4d:c2:5b:04:36:0a:29:11:b2:34:5b:2f:5f:71:db:
         31:ba:d0:a3:21:0d:58:92:f0:4a:fe:00:6e:09:6c:44:67:fa:
         4a:6b:c6:10:4b:08:a3:ce:ee:a5:e9:bf:b6:d6:3b:05:b4:86:
         e3:de:b0:79:71:34:f3:2b:d8:99:e2:c8:fd:33:6a:e7:a9:76:
         be:51:01:d7:6e:2d:da:fb:bf:62:06:92:a1:62:08:68:81:2f:
         5a:12:7d:4e:4b:3e:7a:3f:a6:4c:53:eb:59:5b:5b:94:d6:08:
         ba:6d:ec:30:22:7a:75:09:8b:b6:03:5b:f7:0b:db:c5:6b:8d:
         9a:86:fd:ae:0d:8c:1b:73:88:e2:03:b8:57:a0:94:75:54:2c:
         cb:f4:6b:0d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZ7vBh+szb3G7HWtAkFAwXff0Cx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDk2MUFCMTU1MjhFRDlFRkZDRjBGMEREQTJGRTBDN0Qw
Q0I5OTM0QjAeFw0yMzA0MTgxMjIzMzRaFw0yNDA0MTYxMjI4MzRaMDMxMTAvBgNV
BAMTKEI1RjBFNDY1NDcxNjdCRjUyNTQyRUIwODQzNjBBOERBNzY2MjFBRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNHi+GyEuDrvjKYDk6W+J9jQB3
xpjsk3pVKBokGqHSKuUlNg/x+8sbpYp6VC1m7HKnYVhR6scU4tng/EYeyXy2lnm6
vUIr2QLLX1ASuotF0FYLANWH/ehjQ6Fyh7MtuPiq4azn1p16UXLi45IKegME76ln
1fFWnReZZ47ENQzRIqSl1uQcn5MAthKHDMNxIWIN1nLSv0LBuBpFUHje4/AtAmO2
ycRx+W9CmxETe3OkqkALG+YBYXp8HTtAiyJYoEWOBCYOWIDhjXl7QhBVVpD01u0a
afI9kjYfl02+afS1FrEzozV705LGt1yEOaeedOxfIX8aIvHXY3adLeDF1EcnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUtfDkZUcWe/UlQusIQ2Co2nZiGukwHwYDVR0j
BBgwFoAU2WGrFVKO2e/88PDdov4MfQy5k0swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEdIYU5yeFVTdUVjUWpuSDNqam0zaEE3cHBuSjZKdDJnRU1VdGdxYXhX
MUcvMC9EOTYxQUIxNTUyOEVEOUVGRkNGMEYwRERBMkZFMEM3RDBDQjk5MzRCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Q5NjFBQjE1NTI4RUQ5RUZG
Q0YwRjBEREEyRkUwQzdEMENCOTkzNEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRHSGFOcnhVU3VFY1FqbkgzamptM2hBN3Bwbko2SnQyZ0VNVXRncWF4VzFHLzAv
MzEzNzM3MmUzMTMyMzYyZTMyMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNTMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCsX4cMA0GCSqGSIb3DQEBCwUAA4IBAQCqKjARfDhz
NlqMmdFTZAQJbYIESmP/ew7BOD/GeAR55Zolpr+pV7q8uTyJFkgAE5clcGyLnUkX
tWr/JZjuDfyByjYq3SGxxjP2bRFY9nmQNcrvpmIqshvZfDw3OT3DjboMirv8ZbYy
KsZFC5U1ZLtNwlsENgopEbI0Wy9fcdsxutCjIQ1YkvBK/gBuCWxEZ/pKa8YQSwij
zu6l6b+21jsFtIbj3rB5cTTzK9iZ4sj9M2rnqXa+UQHXbi3a+79iBpKhYghogS9a
En1OSz56P6ZMU+tZW1uU1gi6bewwInp1CYu2A1v3C9vFa42ahv2uDYwbc4jiA7hX
oJR1VCzL9GsN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org