Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e33302e302f32332d3233203d3e203532373036.roa
File:                     3137372e3132362e33302e302f32332d3233203d3e203532373036.roa (raw, json)
Hash identifier:          Hda1hImfcMMDf70eG2sEvTFRgZhD47aHAZtF+YnUXbc=
Subject key identifier:   BB:96:21:F6:8B:CB:BB:DF:52:C5:8A:AC:53:DB:0A:9C:2E:37:57:7C
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       0B3961BED1ADA69BDC949D0C17DE30705CE2AA88
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e33302e302f32332d3233203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:07:08 +0000
ROA not before:           Thu 20 Jul 2023 14:02:08 +0000
ROA not after:            Thu 18 Jul 2024 14:07:08 +0000
asID:                     52706
IP address blocks:        177.126.30.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:39:61:be:d1:ad:a6:9b:dc:94:9d:0c:17:de:30:70:5c:e2:aa:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:02:08 2023 GMT
            Not After : Jul 18 14:07:08 2024 GMT
        Subject: CN=BB9621F68BCBBBDF52C58AAC53DB0A9C2E37577C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:20:a4:40:dd:54:a4:59:35:9b:34:30:ec:ea:
                    bd:ed:79:a4:d4:f9:9d:a8:8d:28:d0:85:ab:71:73:
                    46:04:62:9f:53:4a:d6:ea:84:b7:c2:01:49:98:0c:
                    a8:cd:89:9a:d8:f0:9b:c6:14:2d:14:53:05:fc:ce:
                    b2:1e:35:e2:04:ce:e3:3f:30:ff:d5:8f:48:8d:64:
                    47:0a:8c:f5:6a:df:c7:51:a6:b0:d3:d3:c3:dc:05:
                    8e:21:4e:fe:b0:ef:f6:ad:35:ad:16:54:9e:92:a5:
                    f7:73:89:3d:24:9a:94:87:ea:44:e9:66:a7:06:1b:
                    28:e7:85:9b:48:66:4d:56:02:84:71:88:71:2d:58:
                    b5:5a:fe:e8:3a:ca:85:27:41:92:81:bd:7d:90:f7:
                    42:f5:5d:fb:21:b4:da:b7:9c:3c:dd:64:66:a8:46:
                    2b:74:12:1b:a5:e6:f0:dc:3a:8d:07:9e:e6:06:cb:
                    a7:a0:fd:04:74:ea:28:b4:3b:01:76:25:b7:80:90:
                    89:a9:ef:e1:0f:42:ca:8f:6b:af:ca:8c:6f:3a:84:
                    68:51:9b:af:a4:0a:bd:90:4e:f4:b2:15:88:4b:b5:
                    e6:73:82:60:65:c4:89:e1:31:e4:e9:22:a6:9e:7e:
                    9f:74:14:da:de:bb:77:26:4c:aa:2f:5f:26:ab:82:
                    10:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:96:21:F6:8B:CB:BB:DF:52:C5:8A:AC:53:DB:0A:9C:2E:37:57:7C
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/3137372e3132362e33302e302f32332d3233203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:f7:fa:13:a4:79:8f:b2:e3:96:a5:b6:9e:3a:44:06:66:31:
         c9:44:f2:dc:c4:3d:fc:15:ac:2d:37:fc:45:8c:80:c4:61:e9:
         2c:cf:b6:bd:1f:50:fe:2b:51:ce:05:26:d9:e8:78:59:ad:a9:
         14:5a:77:cb:56:ed:8a:76:db:c8:a2:49:9e:15:22:8c:32:97:
         ad:f4:e6:ed:4f:3c:13:e8:4b:65:40:d1:72:fb:90:b3:58:72:
         b2:e0:ca:db:93:40:75:92:4a:0f:e9:36:43:c9:db:1c:85:8d:
         75:41:34:a1:97:4f:db:63:31:37:1d:67:71:3e:c6:15:3d:26:
         d9:1e:d0:5c:24:06:9c:b6:0b:57:f0:3c:11:e7:53:4c:2e:66:
         c8:3a:75:cc:b3:f3:95:41:f7:24:60:4a:31:4e:fd:c1:85:e4:
         05:a1:c3:bc:8a:c1:20:96:74:94:3d:80:b1:43:4e:17:29:2e:
         55:22:e8:33:98:ab:40:18:95:a1:28:0c:ac:bf:2b:7c:d8:96:
         83:96:cc:ea:70:74:32:df:f3:be:e8:f7:72:f2:8a:cf:4f:dc:
         68:15:c4:6d:91:fd:51:ee:96:12:a7:88:8a:e3:1a:3a:97:0e:
         6c:cc:16:92:5c:be:14:01:48:14:b9:c0:3a:88:98:6b:49:f9:
         40:a9:8a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org