Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa
File:                     3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          8eYbSVSezFOiQpLgg/f/3By3giG0x7hKoOIfbJ6PWlQ=
Subject key identifier:   3E:40:2F:F5:0D:D8:18:BC:9C:F9:3F:69:80:EB:05:FF:09:87:64:2F
Certificate issuer:       /CN=126DE87CEED5B882ED5FEA43265CB6AF48F258F2
Certificate serial:       610575A7B48DCA894B68BBC0FE352FF88BE042CE
Authority key identifier: 12:6D:E8:7C:EE:D5:B8:82:ED:5F:EA:43:26:5C:B6:AF:48:F2:58:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa
Signing time:             Thu 31 Aug 2023 09:06:33 +0000
ROA not before:           Thu 31 Aug 2023 09:01:33 +0000
ROA not after:            Thu 29 Aug 2024 09:06:33 +0000
asID:                     263584
IP address blocks:        177.129.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:05:75:a7:b4:8d:ca:89:4b:68:bb:c0:fe:35:2f:f8:8b:e0:42:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126DE87CEED5B882ED5FEA43265CB6AF48F258F2
        Validity
            Not Before: Aug 31 09:01:33 2023 GMT
            Not After : Aug 29 09:06:33 2024 GMT
        Subject: CN=3E402FF50DD818BC9CF93F6980EB05FF0987642F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:52:73:57:d0:98:f5:0f:ea:22:d5:d2:e2:fc:
                    1f:d6:d2:b2:1e:b9:5c:1b:6b:4f:a5:d4:7e:cb:75:
                    10:d4:f5:d4:b1:16:0f:67:e6:73:18:a5:a7:ce:fc:
                    d7:50:8f:67:52:a7:8a:04:b0:e2:dc:d8:f2:23:5b:
                    cc:81:d4:87:b3:6c:8f:e5:5c:95:00:90:a6:9c:f4:
                    46:b0:b5:e0:17:5f:ec:83:de:9f:fd:6b:e9:41:90:
                    17:a2:68:3b:e6:d4:b4:fc:29:c5:91:a5:10:a9:a6:
                    f6:42:32:99:12:32:3a:46:df:2e:aa:27:f8:af:2a:
                    bc:37:5d:cd:4d:b8:9e:55:9a:05:5b:84:c5:4b:75:
                    47:48:dd:c1:a1:4a:f9:2b:fa:b0:60:04:7b:c4:8a:
                    cf:76:7d:17:25:8f:d5:5c:fb:55:6c:38:b0:fd:5d:
                    cd:35:0b:2b:89:69:f0:41:c9:82:b0:9e:04:04:6c:
                    11:b7:36:41:d2:b2:ac:0c:4b:59:b9:1b:af:d4:4a:
                    d5:0d:5b:64:d2:9d:c2:19:1d:14:d1:12:ff:a8:38:
                    c1:25:23:a4:82:93:58:e3:23:37:77:b0:b3:5a:c5:
                    a5:2e:e9:83:4f:12:17:d0:8d:99:02:ad:0b:9e:b9:
                    db:24:ee:26:0d:6e:00:da:65:e9:9a:0d:e4:5d:15:
                    85:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:40:2F:F5:0D:D8:18:BC:9C:F9:3F:69:80:EB:05:FF:09:87:64:2F
            X509v3 Authority Key Identifier:
                keyid:12:6D:E8:7C:EE:D5:B8:82:ED:5F:EA:43:26:5C:B6:AF:48:F2:58:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3134312e302f32342d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:91:47:ea:8c:3f:75:9c:67:bb:1d:85:c1:dd:97:87:ba:62:
         53:cc:12:d2:13:8d:8c:32:bb:eb:17:9a:b9:a7:06:41:e0:9c:
         8e:2f:18:6e:e9:d8:63:59:65:14:2c:77:eb:0e:43:5f:75:5b:
         eb:8d:82:5c:c0:e5:10:af:fc:d8:34:cc:be:79:6f:cf:e0:53:
         96:59:93:ab:9c:95:69:5b:73:50:3b:b0:eb:84:50:d6:2f:e9:
         ad:49:45:92:a9:5b:85:63:76:3e:46:81:cb:0a:f1:70:fb:f6:
         71:88:54:ed:e0:c2:95:0c:50:9d:3b:c6:e4:c2:27:d6:1a:14:
         af:5e:e2:54:15:0b:f8:30:6f:31:c2:5e:2e:26:e1:44:16:6c:
         18:7d:9a:47:d0:af:66:4c:51:dd:57:9a:59:8c:18:98:b2:f6:
         7b:53:cf:87:0e:54:aa:db:61:0d:ed:c7:7c:7c:56:57:18:b4:
         fe:5a:6d:37:a8:11:ef:c6:d6:e6:75:7f:ef:a7:01:8c:eb:f3:
         38:9f:64:c9:ce:91:fe:02:6d:be:3a:a1:b8:e4:ee:36:fd:cc:
         ec:d6:fa:aa:0b:82:b0:59:7c:4f:1c:5e:56:56:6f:a7:15:9d:
         dd:56:c4:2a:81:12:1d:d6:67:68:0c:15:a3:f7:2f:8d:97:bd:
         84:b4:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org