Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa
File:                     3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          VrWss4pITvTaR3xaIJfufiKLF6JODdEeZS0bqXp/r78=
Subject key identifier:   D9:8E:2C:5C:12:38:DF:9F:A9:5C:2C:4A:56:C0:76:02:3C:79:A8:A6
Certificate issuer:       /CN=126DE87CEED5B882ED5FEA43265CB6AF48F258F2
Certificate serial:       11CB49DF6276CE3E3DE2C46B55DBB406BD7E5A12
Authority key identifier: 12:6D:E8:7C:EE:D5:B8:82:ED:5F:EA:43:26:5C:B6:AF:48:F2:58:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa
Signing time:             Thu 31 Aug 2023 09:06:37 +0000
ROA not before:           Thu 31 Aug 2023 09:01:37 +0000
ROA not after:            Thu 29 Aug 2024 09:06:37 +0000
asID:                     263584
IP address blocks:        177.129.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:cb:49:df:62:76:ce:3e:3d:e2:c4:6b:55:db:b4:06:bd:7e:5a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126DE87CEED5B882ED5FEA43265CB6AF48F258F2
        Validity
            Not Before: Aug 31 09:01:37 2023 GMT
            Not After : Aug 29 09:06:37 2024 GMT
        Subject: CN=D98E2C5C1238DF9FA95C2C4A56C076023C79A8A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a6:60:90:c1:6c:49:2e:6a:a3:47:9a:b0:a7:
                    e9:94:33:2a:35:81:76:0c:ef:08:3e:25:b9:94:eb:
                    a1:4a:72:3d:fd:51:a1:c9:5b:fa:50:f5:2c:8f:25:
                    de:17:e2:e6:da:ac:e4:ab:c6:51:5e:c2:17:4e:ba:
                    67:0a:a1:37:53:c8:b7:10:66:c0:a7:d7:bf:c1:96:
                    95:c8:cb:3f:52:e4:07:6c:f0:01:59:53:ed:63:57:
                    98:d9:4e:92:0c:7c:95:d9:cd:91:e8:f1:3a:cd:51:
                    e4:92:2f:7e:b0:8b:51:43:d8:96:61:41:94:aa:50:
                    ae:cf:d6:44:e7:e9:b0:e6:2e:ea:50:d4:89:95:a7:
                    1e:08:d8:9d:78:23:46:83:c2:95:b6:9e:67:30:23:
                    4e:24:01:36:dd:5a:df:b2:24:13:59:a7:a8:0a:7e:
                    25:f2:e8:e3:da:4f:47:77:2e:24:65:8b:f0:30:1b:
                    7d:45:9d:4b:b9:fb:c4:21:fd:99:43:5d:a9:29:05:
                    f0:f7:24:22:a7:f6:3d:0c:4e:d6:37:10:9d:fe:13:
                    87:ae:c4:77:4a:ef:b3:49:93:b3:79:3d:9f:05:10:
                    b7:3a:64:ed:6c:6c:70:99:4c:0a:b2:b9:e6:00:6b:
                    13:45:81:9c:36:a3:78:3e:5d:a6:22:70:2e:ba:4c:
                    d0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8E:2C:5C:12:38:DF:9F:A9:5C:2C:4A:56:C0:76:02:3C:79:A8:A6
            X509v3 Authority Key Identifier:
                keyid:12:6D:E8:7C:EE:D5:B8:82:ED:5F:EA:43:26:5C:B6:AF:48:F2:58:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3134322e302f32342d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:52:a8:90:3c:ec:53:eb:06:14:b4:6f:52:40:35:c7:34:cd:
         ed:88:90:de:26:c6:59:e0:5f:68:af:18:b4:bf:1e:4e:bf:8e:
         8f:48:11:a1:6a:10:30:db:d1:ea:6b:e9:65:b6:40:85:54:41:
         57:56:85:f6:ff:b1:34:0b:f4:80:35:57:fc:bd:d5:57:ee:3f:
         9c:b4:31:bb:77:c6:50:37:ed:a3:b3:d8:12:07:80:26:fe:4f:
         70:a9:b4:48:54:57:f2:20:4e:1c:6f:23:79:0c:44:2a:d0:b7:
         be:f7:2d:42:5b:93:d4:e3:06:d6:7f:2f:fa:5e:5b:e6:02:ad:
         84:00:7b:05:2e:9b:62:84:8c:f5:e7:8f:f9:45:0d:7b:4b:b0:
         42:cc:87:74:e5:6a:09:ad:74:bc:f1:de:cf:94:19:72:7d:e0:
         f1:42:48:7c:04:08:bb:5b:ee:e6:b9:7a:6f:a1:c9:f9:72:58:
         18:9a:cd:94:9b:27:84:89:7b:d1:1d:74:16:ea:74:db:7b:4c:
         99:e1:67:9f:eb:8b:fa:3d:7a:ab:cf:67:40:c6:4c:5d:4f:82:
         78:58:cd:fc:d2:3c:d1:2e:84:d4:20:4c:31:dc:1d:bc:3f:8b:
         1b:5e:4b:57:5e:cc:50:18:f2:ae:e0:6b:4a:f9:88:33:90:df:
         b6:f9:3d:76
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUEctJ32J2zj494sRrVdu0Br1+WhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI2REU4N0NFRUQ1Qjg4MkVENUZFQTQzMjY1Q0I2QUY0
OEYyNThGMjAeFw0yMzA4MzEwOTAxMzdaFw0yNDA4MjkwOTA2MzdaMDMxMTAvBgNV
BAMTKEQ5OEUyQzVDMTIzOERGOUZBOTVDMkM0QTU2QzA3NjAyM0M3OUE4QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfpmCQwWxJLmqjR5qwp+mUMyo1
gXYM7wg+JbmU66FKcj39UaHJW/pQ9SyPJd4X4ubarOSrxlFewhdOumcKoTdTyLcQ
ZsCn17/BlpXIyz9S5Ads8AFZU+1jV5jZTpIMfJXZzZHo8TrNUeSSL36wi1FD2JZh
QZSqUK7P1kTn6bDmLupQ1ImVpx4I2J14I0aDwpW2nmcwI04kATbdWt+yJBNZp6gK
fiXy6OPaT0d3LiRli/AwG31FnUu5+8Qh/ZlDXakpBfD3JCKn9j0MTtY3EJ3+E4eu
xHdK77NJk7N5PZ8FELc6ZO1sbHCZTAqyueYAaxNFgZw2o3g+XaYicC66TNDXAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU2Y4sXBI435+pXCxKVsB2Ajx5qKYwHwYDVR0j
BBgwFoAUEm3ofO7VuILtX+pDJly2r0jyWPIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0tpMnpZUHZWQ3ZVcGFLOFRSSFZhODhZa2RLUWk3d0J6S2d3am15TDRS
Q3EvMS8xMjZERTg3Q0VFRDVCODgyRUQ1RkVBNDMyNjVDQjZBRjQ4RjI1OEYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEyNkRFODdDRUVENUI4ODJF
RDVGRUE0MzI2NUNCNkFGNDhGMjU4RjIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLaTJ6WVB2VkN2VXBhSzhUUkhWYTg4WWtkS1FpN3dCektnd2pteUw0UkNxLzEv
MzEzNzM3MmUzMTMyMzkyZTMxMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM1MzgzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALGBjjANBgkqhkiG9w0BAQsFAAOCAQEAmVKo
kDzsU+sGFLRvUkA1xzTN7YiQ3ibGWeBfaK8YtL8eTr+Oj0gRoWoQMNvR6mvpZbZA
hVRBV1aF9v+xNAv0gDVX/L3VV+4/nLQxu3fGUDfto7PYEgeAJv5PcKm0SFRX8iBO
HG8jeQxEKtC3vvctQluT1OMG1n8v+l5b5gKthAB7BS6bYoSM9eeP+UUNe0uwQsyH
dOVqCa10vPHez5QZcn3g8UJIfAQIu1vu5rl6b6HJ+XJYGJrNlJsnhIl70R10Fup0
23tMmeFnn+uL+j16q89nQMZMXU+CeFjN/NI80S6E1CBMMdwdvD+LG15LV17MUBjy
ruBrSvmIM5Dftvk9dg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org