Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa
File:                     3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa (raw, json)
Hash identifier:          yd2nnJrD7n6YkF7kuJODOkmQeVUFxdeVAOYxDC7Hxgc=
Subject key identifier:   AF:60:7E:73:91:C7:7F:6D:07:55:95:EF:A2:4C:5D:95:0F:EA:A5:21
Certificate issuer:       /CN=126DE87CEED5B882ED5FEA43265CB6AF48F258F2
Certificate serial:       043E55D703AC08021DD6E310BBD7E32FA3E0C66E
Authority key identifier: 12:6D:E8:7C:EE:D5:B8:82:ED:5F:EA:43:26:5C:B6:AF:48:F2:58:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa
Signing time:             Thu 31 Aug 2023 09:04:34 +0000
ROA not before:           Thu 31 Aug 2023 08:59:34 +0000
ROA not after:            Thu 29 Aug 2024 09:04:34 +0000
asID:                     263584
IP address blocks:        177.129.136.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3e:55:d7:03:ac:08:02:1d:d6:e3:10:bb:d7:e3:2f:a3:e0:c6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126DE87CEED5B882ED5FEA43265CB6AF48F258F2
        Validity
            Not Before: Aug 31 08:59:34 2023 GMT
            Not After : Aug 29 09:04:34 2024 GMT
        Subject: CN=AF607E7391C77F6D075595EFA24C5D950FEAA521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:31:2b:36:3e:8a:68:5f:fb:4d:56:2e:f6:37:
                    c1:f6:52:35:93:2b:d0:bb:90:f6:27:92:50:79:4a:
                    f8:ae:b2:e4:31:b4:de:e9:8f:d5:7d:a7:89:98:cc:
                    54:7e:ff:0b:88:69:21:7c:06:0e:d5:18:18:a1:93:
                    32:27:04:b5:38:1d:f6:ac:da:66:bf:5a:df:33:91:
                    7c:a1:53:f6:cf:bd:e8:c0:85:e0:a5:5b:8e:b5:f9:
                    38:21:5f:bd:42:70:f6:9c:32:70:ee:ff:f5:03:66:
                    28:86:f7:7e:58:61:7b:33:cc:2d:37:cd:87:4c:cb:
                    31:ed:71:d2:a6:af:89:fb:a8:e7:e3:b6:4e:ea:b2:
                    47:73:33:26:d5:92:57:b7:13:1c:d8:b2:a8:8a:9b:
                    6b:66:94:30:8b:a2:ba:56:0d:49:7b:6c:6c:63:ce:
                    72:71:46:ec:71:4f:8f:31:d9:13:2b:19:0f:e4:01:
                    44:08:db:76:2d:db:c3:3d:1a:1b:7e:b0:9d:72:48:
                    1b:d8:dd:57:e8:90:0a:e4:88:8e:98:ca:14:5b:2b:
                    42:2c:e9:b1:c2:88:29:98:2e:01:7a:0b:4a:eb:91:
                    6c:29:92:26:71:20:bf:57:e9:9d:c4:17:5a:fd:25:
                    aa:01:26:55:d5:70:cc:fc:a3:32:a5:d5:83:65:32:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:60:7E:73:91:C7:7F:6D:07:55:95:EF:A2:4C:5D:95:0F:EA:A5:21
            X509v3 Authority Key Identifier:
                keyid:12:6D:E8:7C:EE:D5:B8:82:ED:5F:EA:43:26:5C:B6:AF:48:F2:58:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3133362e302f32312d3231203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4a:53:8d:c5:5b:f6:3f:5a:50:36:a0:86:96:5c:3b:63:ac:f8:
         91:30:45:25:cc:b0:4c:6d:f6:19:be:ac:67:32:10:c0:d4:c5:
         27:0f:bd:6b:7f:6c:ad:2f:d8:ba:90:5a:94:c1:1a:a0:ec:51:
         87:e6:fc:22:70:57:cb:38:af:e7:26:51:9a:6c:5e:b4:7a:bd:
         b9:79:d0:7d:97:89:61:55:ac:c9:b1:e9:72:f4:68:3b:73:2e:
         f0:6b:f2:d2:d4:4e:af:58:7d:af:9f:ec:52:f1:08:56:0a:33:
         e5:34:a0:15:b6:e7:b9:5f:e0:99:06:ac:7f:de:1e:15:a1:c5:
         14:26:ed:55:6e:8d:27:07:94:f0:c2:79:ef:15:5d:36:bb:20:
         13:25:58:61:7e:22:63:3f:ab:8f:cb:e6:da:04:88:d4:a3:c1:
         e8:4d:8f:7d:97:54:65:45:79:3e:a3:19:96:8c:09:0c:d9:33:
         87:d0:a7:13:43:70:29:68:79:44:f3:0e:d3:d1:81:db:ae:5f:
         1b:70:8f:ab:b4:75:ba:c1:d7:6f:bf:17:57:59:e5:56:e0:4c:
         a8:57:5b:10:a4:2a:cc:c3:14:69:2b:b0:af:d6:5f:33:ee:3c:
         e0:f2:22:a3:f1:65:00:9f:3d:47:ae:04:a4:51:60:c0:18:8c:
         d6:d8:0b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org