Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32382e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e32382e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          wOrvk1AZUGNY8v5YltMZVLd1stK2O9qPnDzL5/yBR98=
Subject key identifier:   9B:D0:44:DE:DC:03:26:E0:CD:D2:FA:E6:52:81:8D:CC:7E:C5:76:0E
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       0D6337243D18F3A72CD36803C260AAE41B94AE0F
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32382e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:06:57 +0000
ROA not before:           Thu 20 Jul 2023 14:01:57 +0000
ROA not after:            Thu 18 Jul 2024 14:06:57 +0000
asID:                     52706
IP address blocks:        177.126.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:63:37:24:3d:18:f3:a7:2c:d3:68:03:c2:60:aa:e4:1b:94:ae:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:01:57 2023 GMT
            Not After : Jul 18 14:06:57 2024 GMT
        Subject: CN=9BD044DEDC0326E0CDD2FAE652818DCC7EC5760E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3c:9a:39:ce:e8:30:2a:61:88:5a:4f:55:01:
                    bd:81:bc:5b:80:56:3c:ae:47:92:51:74:55:dc:ea:
                    17:21:95:a4:14:90:5a:d0:0b:8c:77:fc:55:f5:b7:
                    6d:44:8c:58:1b:f0:14:31:50:eb:00:f1:86:2f:86:
                    7c:f3:5b:72:a8:e8:39:28:26:30:38:6a:8e:1d:03:
                    31:a1:16:bc:5c:ab:eb:6c:1e:e5:56:26:18:3b:4f:
                    4f:2d:10:3e:53:95:56:5b:3b:b6:0b:88:28:3c:ac:
                    e2:80:37:b9:6c:10:93:78:eb:34:45:67:b6:2e:79:
                    54:8c:03:00:7a:9d:13:44:ca:35:6b:c7:1e:e5:33:
                    07:9a:87:0d:e8:37:f4:08:46:d5:3f:d8:3b:03:81:
                    86:df:26:b8:21:8c:79:35:bd:78:97:de:24:01:60:
                    7c:92:67:91:ff:a6:65:5e:f6:1c:2f:45:94:f6:ac:
                    a2:f0:b2:61:c0:22:89:6d:60:9d:d9:2a:3e:e5:57:
                    b3:1d:cb:dc:f2:72:fa:52:ce:eb:1f:52:66:d9:58:
                    17:7f:5c:71:02:45:c5:8e:1a:f8:89:94:7f:27:c9:
                    a8:b6:ea:bf:2e:bc:c2:71:c3:3b:8f:6a:3c:a1:b5:
                    62:b2:11:d7:b3:3e:e1:bc:6d:dc:91:c0:18:88:eb:
                    c6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D0:44:DE:DC:03:26:E0:CD:D2:FA:E6:52:81:8D:CC:7E:C5:76:0E
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32382e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:4b:4e:ec:7f:51:a7:4a:90:c5:b9:fc:0a:a4:ff:d5:47:1e:
         aa:9b:02:bd:e2:77:83:41:5a:19:0a:4f:05:ef:2c:c4:31:13:
         66:aa:44:b2:f7:07:cf:d8:82:b2:74:dc:a6:3a:6f:40:63:35:
         b0:c4:94:ab:93:51:78:07:b8:95:6d:64:d5:d9:db:3c:b3:7d:
         16:49:27:0b:6f:31:11:5a:27:4d:e0:66:81:29:57:09:3f:24:
         9b:c4:f1:9a:4e:a9:95:82:74:18:ab:6f:bd:67:26:80:ca:c3:
         fa:7a:2a:69:e0:45:76:41:cf:53:53:c9:00:77:d2:29:95:bb:
         4a:d1:89:c7:06:bb:27:cf:58:fa:b4:94:82:cb:3c:8e:c2:fb:
         ca:1a:e0:d1:db:c6:d0:cf:a4:28:41:4a:1a:0b:de:f7:c6:20:
         60:ca:df:23:99:ac:c4:dd:e3:2a:bc:97:b3:7d:09:54:31:fe:
         79:91:a8:89:39:4e:63:15:a6:6d:f9:5d:19:08:d9:bd:80:da:
         6f:33:eb:e4:44:17:a4:7c:5a:dc:1b:dc:fe:fb:6e:fa:f2:18:
         d6:b2:18:37:fa:56:0a:29:f6:51:cb:5f:b2:2e:dc:92:81:bf:
         e7:53:a8:c8:02:50:b2:7a:a2:86:b8:d5:95:ef:f8:24:42:be:
         23:c0:16:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org