Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32392e302f32342d3234203d3e203532373036.roa
File:                     3137372e3132362e32392e302f32342d3234203d3e203532373036.roa (raw, json)
Hash identifier:          wYCwxCyeC+tt/louGdLwBe4JUujBCw8A2LX6UwI0NkI=
Subject key identifier:   56:0C:0A:ED:56:AE:F3:CC:FE:42:BF:DF:37:37:CE:0C:52:86:57:3A
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       5770FCB5899C9063EDFC7CD47300597D816A26EB
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32392e302f32342d3234203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:07:04 +0000
ROA not before:           Thu 20 Jul 2023 14:02:04 +0000
ROA not after:            Thu 18 Jul 2024 14:07:04 +0000
asID:                     52706
IP address blocks:        177.126.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:70:fc:b5:89:9c:90:63:ed:fc:7c:d4:73:00:59:7d:81:6a:26:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:02:04 2023 GMT
            Not After : Jul 18 14:07:04 2024 GMT
        Subject: CN=560C0AED56AEF3CCFE42BFDF3737CE0C5286573A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:33:42:da:36:40:3b:db:87:c4:11:79:8c:
                    42:2f:59:32:95:e8:08:3a:fe:90:ab:d9:86:fc:ca:
                    c9:08:b7:60:17:31:e7:42:0d:02:51:06:e1:fb:f2:
                    61:52:07:b2:b5:1a:d9:da:9c:ea:19:92:2f:f4:9b:
                    84:7c:29:6d:e7:76:b4:bf:ea:f9:7c:3d:ed:a8:b4:
                    2e:84:b9:76:ee:8f:ae:17:7b:a3:87:38:86:45:53:
                    e7:f5:12:a2:05:b1:a9:7d:d2:40:8a:c0:ec:a7:80:
                    9d:fc:2e:e2:c8:f6:c1:d3:d1:64:8e:18:a0:a9:32:
                    ca:02:3a:b4:96:53:1f:26:d1:6c:a7:b6:71:f6:9f:
                    5a:0d:5a:ff:fd:1c:f7:cf:4b:18:b6:37:b6:c1:da:
                    92:9b:d8:38:fd:6b:fb:16:c7:bc:ef:29:2f:3f:1c:
                    29:59:f5:2c:a0:ed:7e:d3:e7:9c:4d:1c:9e:ec:07:
                    bb:03:15:bc:78:15:f7:ff:6f:7d:1e:b2:42:97:33:
                    1a:bd:25:34:61:15:1e:67:ae:9d:b8:7f:b9:a4:69:
                    42:2c:8a:05:10:dd:a4:d7:04:a7:db:4e:3e:ab:87:
                    cf:08:ea:76:be:71:00:8c:0b:54:2e:f0:95:8c:0d:
                    7e:a1:f6:67:a9:6f:85:d8:f2:c6:05:a9:b8:04:6f:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0C:0A:ED:56:AE:F3:CC:FE:42:BF:DF:37:37:CE:0C:52:86:57:3A
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e32392e302f32342d3234203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:24:7b:1a:44:ef:52:7e:54:84:60:12:41:8f:d7:bb:3b:17:
         dc:c9:fc:84:18:3f:bc:a5:97:1a:b4:b0:5f:8f:a6:fc:4f:3d:
         47:6a:c1:26:f3:81:c4:f8:7d:7f:03:23:29:94:0e:fe:10:07:
         5d:bd:ab:bc:b0:60:cd:52:8d:37:db:09:70:7e:de:2a:3e:b4:
         77:3e:6c:a3:37:7c:3e:2a:68:36:c4:ae:76:1a:c8:f3:df:44:
         8b:2e:1e:ce:d6:51:d0:7f:52:5a:03:7e:07:18:3a:ef:b3:d3:
         8a:31:9f:40:71:7e:49:e7:f1:db:7f:3b:86:e2:10:40:bb:e3:
         92:11:7e:1e:46:4a:9f:9b:71:d3:57:e2:f8:20:87:4d:92:97:
         4d:90:7f:62:eb:a4:18:f6:e4:81:44:ca:c1:d6:60:93:a5:0f:
         c0:33:00:a5:b9:0d:3c:cf:5c:f8:3b:f5:a7:fb:cb:d9:a6:38:
         1d:c4:5e:7b:cb:e3:ef:1a:1a:93:8a:fd:78:d1:3a:af:f4:46:
         e7:90:f8:ee:af:05:5b:6f:49:95:2c:fa:fc:d0:f9:1b:2c:8f:
         e4:e6:2d:97:2b:13:a3:b5:cc:f7:0a:1a:1e:c8:c3:51:0f:2a:
         f3:2c:06:b9:10:33:4e:2f:01:f8:34:14:a9:d0:3c:cc:06:b2:
         a9:61:cd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org