Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3133362e302f32342d3234203d3e20323633353834.roa
File:                     3137372e3132392e3133362e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          RW/h6dtUwuabvuRQCwYkDPGc/rAf40bwX1TZxA3CzHA=
Subject key identifier:   A8:4D:BA:FA:AA:1B:AD:87:92:1B:C7:0B:B7:0B:BE:5A:4F:DF:4C:83
Certificate issuer:       /CN=126DE87CEED5B882ED5FEA43265CB6AF48F258F2
Certificate serial:       330A20B6B1DE43CBD1DECC579DB4167BF7A70164
Authority key identifier: 12:6D:E8:7C:EE:D5:B8:82:ED:5F:EA:43:26:5C:B6:AF:48:F2:58:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3133362e302f32342d3234203d3e20323633353834.roa
Signing time:             Thu 31 Aug 2023 09:04:38 +0000
ROA not before:           Thu 31 Aug 2023 08:59:38 +0000
ROA not after:            Thu 29 Aug 2024 09:04:38 +0000
asID:                     263584
IP address blocks:        177.129.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:0a:20:b6:b1:de:43:cb:d1:de:cc:57:9d:b4:16:7b:f7:a7:01:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126DE87CEED5B882ED5FEA43265CB6AF48F258F2
        Validity
            Not Before: Aug 31 08:59:38 2023 GMT
            Not After : Aug 29 09:04:38 2024 GMT
        Subject: CN=A84DBAFAAA1BAD87921BC70BB70BBE5A4FDF4C83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:85:23:30:8d:4d:d2:e9:54:c9:40:83:a3:
                    f6:6c:43:e6:50:c4:65:ac:95:b8:8f:f2:5d:cd:33:
                    f1:8f:fb:77:bf:9c:dc:44:04:93:5b:34:53:67:5e:
                    40:f2:24:de:57:48:91:26:b0:68:9f:b2:69:03:fa:
                    3f:6f:9d:05:be:0b:d7:ab:0c:e6:e8:45:e5:1a:98:
                    ec:19:80:d7:75:48:2f:3e:55:33:f8:f7:64:7a:d7:
                    8a:e1:dc:a2:6a:3f:47:d8:c5:e2:50:fe:36:fa:b4:
                    75:e8:62:1d:91:da:78:ff:b4:fc:3b:a6:68:d6:75:
                    66:67:94:e9:66:e5:2b:76:02:bc:b1:2a:c2:f0:f0:
                    85:69:08:b5:b5:15:dc:ae:93:28:29:f3:e4:d9:f6:
                    3c:0f:a5:6f:91:cb:64:5f:d1:88:a9:e2:0d:f7:ee:
                    e4:2c:4b:57:6a:ca:94:1a:34:f8:a9:f1:fe:1b:aa:
                    bb:36:3a:e6:99:6b:f5:96:ab:f8:bb:ef:76:cc:27:
                    12:84:ab:5f:a1:15:85:29:86:0c:a9:20:4d:59:22:
                    1b:12:81:50:63:e5:ec:69:d2:bd:02:74:7a:36:02:
                    d0:03:0d:cf:e5:d6:e3:72:29:37:72:de:c3:87:6b:
                    d7:e7:fd:e2:0d:31:ae:6f:4a:7d:d5:51:c1:46:66:
                    73:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4D:BA:FA:AA:1B:AD:87:92:1B:C7:0B:B7:0B:BE:5A:4F:DF:4C:83
            X509v3 Authority Key Identifier:
                keyid:12:6D:E8:7C:EE:D5:B8:82:ED:5F:EA:43:26:5C:B6:AF:48:F2:58:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3133362e302f32342d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:6c:b6:64:12:91:27:0a:2b:c4:bb:c6:06:46:75:2f:ac:74:
         52:f3:cc:a0:88:2a:81:87:6c:72:75:0c:3f:65:12:7c:fb:78:
         48:7d:f8:23:11:28:60:f5:fe:a2:fa:24:8d:b1:88:e0:55:8b:
         ac:e5:5a:f9:63:56:29:3e:d3:68:bf:f6:b0:ce:95:2b:2c:84:
         db:cf:f6:be:c0:52:4c:4f:57:5f:93:91:b9:b1:4a:4f:18:62:
         3a:89:65:85:5b:a2:07:80:de:87:04:77:9f:bb:7d:61:6b:15:
         2b:f6:b2:fd:73:08:fe:ac:5f:21:01:55:ad:84:1f:00:3c:f2:
         f3:1f:2d:e7:cf:74:a5:dc:b1:3e:ba:c3:ff:2d:79:dc:41:cc:
         19:ca:98:cd:6d:5a:e3:e0:8d:c8:da:df:1c:8f:f4:6f:4d:2c:
         00:50:ef:ed:18:5b:01:af:f2:67:2e:b5:0b:22:d8:38:8b:40:
         74:98:44:eb:c6:7c:de:bb:95:ae:fc:66:ff:9e:c5:b0:97:79:
         c3:b2:33:af:9c:58:66:b3:35:1f:7b:22:f9:cc:08:d8:df:43:
         4c:41:96:95:d8:e4:aa:c4:5a:81:16:a6:46:45:e6:a3:c6:ce:
         ce:91:0a:ac:95:c5:5f:c0:1a:89:55:60:1c:e1:6a:d3:02:98:
         d6:ef:fc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org