Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa
File:                     3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          gPK/lKriVYBmREGVI3YTKw1eXBOsnLjjf7i6L0EEQnA=
Subject key identifier:   C5:98:A9:D2:75:C6:8C:A4:97:8C:D8:07:81:2C:AE:8D:49:91:39:28
Certificate issuer:       /CN=126DE87CEED5B882ED5FEA43265CB6AF48F258F2
Certificate serial:       775B02BC19C94BCB83E7A6FD2F808ECB62491FA4
Authority key identifier: 12:6D:E8:7C:EE:D5:B8:82:ED:5F:EA:43:26:5C:B6:AF:48:F2:58:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa
Signing time:             Thu 31 Aug 2023 09:06:41 +0000
ROA not before:           Thu 31 Aug 2023 09:01:41 +0000
ROA not after:            Thu 29 Aug 2024 09:06:41 +0000
asID:                     263584
IP address blocks:        177.129.143.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5b:02:bc:19:c9:4b:cb:83:e7:a6:fd:2f:80:8e:cb:62:49:1f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126DE87CEED5B882ED5FEA43265CB6AF48F258F2
        Validity
            Not Before: Aug 31 09:01:41 2023 GMT
            Not After : Aug 29 09:06:41 2024 GMT
        Subject: CN=C598A9D275C68CA4978CD807812CAE8D49913928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:77:a5:51:62:4c:c5:30:4b:25:4e:2d:a8:ff:
                    e3:8b:e9:32:b1:9f:41:6c:97:3f:92:c1:2a:78:09:
                    9a:e3:a3:0e:ba:3d:1a:5f:35:84:11:68:b9:43:6e:
                    99:a7:28:87:40:5c:c6:c5:03:d3:91:40:4e:10:79:
                    61:fa:c9:db:b5:65:bd:e9:fb:ca:54:6c:93:31:6e:
                    79:95:a4:4e:b1:f7:bf:f7:46:e3:20:28:9b:fe:14:
                    65:dc:c5:69:6f:ca:77:53:6b:7b:2d:27:74:38:18:
                    b5:fd:5e:e5:55:60:de:02:93:b9:42:6d:7e:c1:86:
                    aa:e0:f0:dd:3e:8a:a2:d5:34:37:c0:0f:db:0f:18:
                    fa:2f:56:a1:fb:73:55:4b:2b:aa:1c:55:62:1f:62:
                    98:9f:33:28:c8:58:45:da:0f:24:2a:2d:ce:2a:bc:
                    03:be:bf:70:ba:48:a8:ed:41:98:e7:a1:12:a9:02:
                    e8:06:9b:d5:64:4f:76:5f:b7:fe:cf:d1:93:ba:4a:
                    a5:81:30:cf:dc:6f:b4:c9:34:a5:27:8b:92:55:17:
                    4b:b0:01:2b:fe:75:df:a7:a0:7e:c7:83:f6:92:55:
                    a4:43:92:1d:92:d0:e7:bb:66:1d:50:9f:fc:2f:1c:
                    6a:a9:fb:3b:d0:37:b0:92:c4:78:55:eb:b8:33:59:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:98:A9:D2:75:C6:8C:A4:97:8C:D8:07:81:2C:AE:8D:49:91:39:28
            X509v3 Authority Key Identifier:
                keyid:12:6D:E8:7C:EE:D5:B8:82:ED:5F:EA:43:26:5C:B6:AF:48:F2:58:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/126DE87CEED5B882ED5FEA43265CB6AF48F258F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/1/3137372e3132392e3134332e302f32342d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:27:8c:72:8f:4f:e0:23:59:c8:da:1f:54:ae:5d:fa:f2:ee:
         6a:9d:9e:05:85:c1:77:44:11:a8:61:00:69:9f:45:35:f3:58:
         39:83:44:ff:e0:07:87:7b:5d:64:8f:b5:4a:24:32:07:3a:ff:
         23:31:88:95:c7:1a:4f:81:32:f0:d0:bb:d9:c2:8b:b7:67:93:
         09:99:10:fe:da:5c:0a:a2:36:60:3d:c0:00:5a:62:41:3a:b2:
         33:2c:e6:25:37:b7:76:5b:36:cf:6b:89:05:f4:3e:0f:ff:c0:
         1d:fc:3a:96:48:50:5b:8f:c0:9b:47:d1:8a:d4:10:51:a9:09:
         4c:34:45:ab:b6:6d:70:a2:5e:6d:c2:96:d4:75:d5:b5:b0:84:
         d2:63:07:88:63:97:3d:3b:e1:5c:56:5e:c3:b0:76:2a:cd:36:
         77:27:61:d2:9e:19:71:0e:70:8a:b9:85:52:d3:e2:5f:71:d5:
         61:9b:3b:a2:06:7f:cb:63:51:f9:ff:54:e8:f8:b2:34:3e:b7:
         d8:3c:c7:3c:18:8e:42:de:6f:4b:35:4f:5d:4d:02:e0:20:95:
         5c:88:4d:7a:02:00:9a:33:c7:59:ba:14:28:03:d8:d5:f1:09:
         2f:eb:08:30:19:ff:d6:52:9a:f4:a7:30:fe:f0:93:ba:84:d7:
         56:6c:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:24 2024 by rpki-client on console-ams.rpki-client.org