Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa
File:                     3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          wUzWDhYtUVuW55x2Od7EiiV1MiTtdez7COrFyHGK+qQ=
Subject key identifier:   06:71:8C:F2:52:E5:46:0B:33:12:0F:17:3D:51:58:26:90:14:99:54
Certificate issuer:       /CN=126DE87CEED5B882ED5FEA43265CB6AF48F258F2
Certificate serial:       11A454DE34172CB3C5D2865809E30DEEDF7794A6
Authority key identifier: 12:6D:E8:7C:EE:D5:B8:82:ED:5F:EA:43:26:5C:B6:AF:48:F2:58:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa
Signing time:             Thu 31 Aug 2023 09:06:20 +0000
ROA not before:           Thu 31 Aug 2023 09:01:20 +0000
ROA not after:            Thu 29 Aug 2024 09:06:20 +0000
asID:                     263584
IP address blocks:        177.129.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a4:54:de:34:17:2c:b3:c5:d2:86:58:09:e3:0d:ee:df:77:94:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126DE87CEED5B882ED5FEA43265CB6AF48F258F2
        Validity
            Not Before: Aug 31 09:01:20 2023 GMT
            Not After : Aug 29 09:06:20 2024 GMT
        Subject: CN=06718CF252E5460B33120F173D51582690149954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:ac:3c:77:f4:9a:80:7d:40:23:30:aa:c9:
                    e9:8b:30:f7:ba:e0:ef:59:b3:81:31:13:7a:5a:91:
                    97:cb:5a:c3:c6:ac:30:c9:93:bf:b2:2b:07:85:16:
                    8a:df:1d:4c:e1:99:0c:17:d6:b6:02:ea:d3:e2:fe:
                    6d:c9:bb:ef:b6:94:b8:8c:08:9e:9e:c8:11:03:b9:
                    7b:dc:e1:49:6e:ea:aa:77:a8:a6:60:63:ae:4b:43:
                    0b:38:23:88:58:c6:5d:3a:a8:e1:5f:77:a6:f9:c5:
                    ba:4a:45:67:e0:aa:b9:a1:51:18:c1:73:4a:56:1b:
                    cc:26:56:47:84:cb:ec:7c:07:fa:f2:92:7f:76:30:
                    20:73:02:58:40:cd:4a:68:c2:9c:b1:8d:d7:f5:b7:
                    a9:23:6a:c1:bd:63:e9:1f:31:ec:76:50:f8:b4:a7:
                    3b:32:46:b1:9f:d8:8a:ab:a8:99:1f:1c:84:3c:57:
                    ef:28:61:1a:ec:ad:0b:93:9e:f5:32:37:fc:94:21:
                    7f:d8:71:f1:dd:ea:5c:b5:96:83:29:c0:b2:11:21:
                    ce:8b:e1:0a:fa:f2:45:9f:6a:0f:50:4b:b6:58:b6:
                    3a:cf:b0:59:2d:11:9d:af:38:f8:a4:0a:91:43:c3:
                    c0:c6:48:22:b3:02:57:71:5d:5f:11:a9:f0:99:a4:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:71:8C:F2:52:E5:46:0B:33:12:0F:17:3D:51:58:26:90:14:99:54
            X509v3 Authority Key Identifier:
                keyid:12:6D:E8:7C:EE:D5:B8:82:ED:5F:EA:43:26:5C:B6:AF:48:F2:58:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3133382e302f32342d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:dd:4c:8d:01:2c:00:ab:8c:be:cc:53:d3:ff:e9:35:c1:8d:
         69:7f:a9:59:2f:30:01:80:9a:68:57:b8:94:55:cf:b9:87:fa:
         59:df:74:c1:a2:2a:04:76:45:9f:fa:fe:af:de:98:9c:96:4c:
         42:49:c5:03:1f:9b:ad:ae:56:98:1f:ff:fe:7b:c5:1e:09:ff:
         47:20:c1:08:ea:9a:56:18:53:98:4d:ea:ed:13:0c:0a:b7:ab:
         bf:a1:48:fc:54:a4:18:2e:b1:57:9f:43:c1:5f:a6:fe:c5:71:
         ea:1f:0b:c7:ca:a7:2a:f8:8c:e7:5d:a7:7a:b6:1a:12:36:7b:
         94:62:c7:3a:a1:b5:92:a4:f9:22:9b:28:26:82:45:f2:ab:2f:
         ed:f1:a7:f5:08:54:38:ae:79:2c:ef:cf:3d:c1:92:72:1b:d7:
         c9:db:28:83:be:a2:00:7a:31:75:07:05:99:7b:21:55:9b:ab:
         bf:80:08:fe:b6:76:4f:b4:dc:60:da:81:3c:35:1e:e9:db:37:
         aa:2e:1a:fb:ed:07:16:8e:2f:37:fb:56:e7:35:19:75:69:7c:
         c6:d9:22:05:3d:c1:2b:59:5f:a5:6f:96:20:0f:ab:2a:6a:66:
         b5:ba:d4:70:e6:c3:a0:a2:92:f8:3e:f2:be:2e:b5:95:1b:5c:
         62:b0:cc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org