Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133312e37322e3234342e302f32322d3232203d3e20323632333933.roa
File:                     3133312e37322e3234342e302f32322d3232203d3e20323632333933.roa (raw, json)
Hash identifier:          LMtkYce62yyoZ1wOExYWtD1Y7pKUfYvKghG6Q9znFgc=
Subject key identifier:   80:5A:0A:FA:20:69:80:15:B0:45:BA:F6:B2:05:CB:B2:33:8F:FD:C4
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       4DD48EBBC8952070E975C55A52186ACF1D2A95BE
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133312e37322e3234342e302f32322d3232203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:03 +0000
ROA not before:           Thu 03 Mar 2022 18:47:03 +0000
ROA not after:            Thu 02 Mar 2023 18:52:03 +0000
asID:                     262393
IP address blocks:        131.72.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d4:8e:bb:c8:95:20:70:e9:75:c5:5a:52:18:6a:cf:1d:2a:95:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:03 2022 GMT
            Not After : Mar  2 18:52:03 2023 GMT
        Subject: CN=3082010A0282010100CCB0D7C35C95FDABE2DE349BCA496390C6579C6A59E57AE127C1994C0C7DC7594BB0B9E9FB924361F78D193DB36EE4759C13D6FBF1BF3D03F2E75638D53057567B162317731275E3CE7D3E562C788704AC9EA21FE600AB55C015C156269F5C06C4FDC606B6BDE3E2EA0450BFB8C5B2C8D32C1AD5B9F1FB0C6F256B26C2635C3DCF72F017873E9268D65C8D2B819AE44CA27996C05055FFA00707E22F691EE892D32EDF4E790981304083A49C18DE9BC753E706B919399A3C8297CA51ACAD72259B21E0ABFC0DF7F6F6E90603D622066FE9EFBEEDE4900822A7A6FD28996E44DCEFF52AE2C164FA432E7CA53D062D2C21D7006E910C116567D40B0971CC975C3F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b0:d7:c3:5c:95:fd:ab:e2:de:34:9b:ca:49:
                    63:90:c6:57:9c:6a:59:e5:7a:e1:27:c1:99:4c:0c:
                    7d:c7:59:4b:b0:b9:e9:fb:92:43:61:f7:8d:19:3d:
                    b3:6e:e4:75:9c:13:d6:fb:f1:bf:3d:03:f2:e7:56:
                    38:d5:30:57:56:7b:16:23:17:73:12:75:e3:ce:7d:
                    3e:56:2c:78:87:04:ac:9e:a2:1f:e6:00:ab:55:c0:
                    15:c1:56:26:9f:5c:06:c4:fd:c6:06:b6:bd:e3:e2:
                    ea:04:50:bf:b8:c5:b2:c8:d3:2c:1a:d5:b9:f1:fb:
                    0c:6f:25:6b:26:c2:63:5c:3d:cf:72:f0:17:87:3e:
                    92:68:d6:5c:8d:2b:81:9a:e4:4c:a2:79:96:c0:50:
                    55:ff:a0:07:07:e2:2f:69:1e:e8:92:d3:2e:df:4e:
                    79:09:81:30:40:83:a4:9c:18:de:9b:c7:53:e7:06:
                    b9:19:39:9a:3c:82:97:ca:51:ac:ad:72:25:9b:21:
                    e0:ab:fc:0d:f7:f6:f6:e9:06:03:d6:22:06:6f:e9:
                    ef:be:ed:e4:90:08:22:a7:a6:fd:28:99:6e:44:dc:
                    ef:f5:2a:e2:c1:64:fa:43:2e:7c:a5:3d:06:2d:2c:
                    21:d7:00:6e:91:0c:11:65:67:d4:0b:09:71:cc:97:
                    5c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5A:0A:FA:20:69:80:15:B0:45:BA:F6:B2:05:CB:B2:33:8F:FD:C4
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133312e37322e3234342e302f32322d3232203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:19:b4:43:e4:ef:4f:ea:b7:9f:69:63:94:f4:da:74:8d:a8:
         96:01:a8:dc:d8:b8:10:41:2b:4d:26:a1:31:5a:a8:66:0a:49:
         91:52:f2:9c:b4:58:7d:38:75:71:44:b3:9e:8d:1c:dd:76:20:
         0d:e8:90:09:e5:21:80:99:97:7e:0b:a4:fb:13:c1:f0:61:78:
         69:a4:bf:29:22:3e:06:04:4a:48:19:95:b1:b9:93:13:53:74:
         ac:b2:8b:9b:b3:15:d1:46:0c:6d:49:6a:70:2b:77:64:e6:e8:
         6a:01:ba:49:03:cc:02:58:f1:28:60:7f:f1:cd:18:64:8b:8d:
         2c:10:ac:cd:fd:16:86:21:b7:97:0c:bc:e4:28:88:c8:92:89:
         a8:a0:ac:02:66:83:a5:9b:0c:9f:78:7c:86:09:25:f2:f3:98:
         73:91:3b:34:de:ef:20:5c:07:54:b0:ac:fd:14:87:05:3b:01:
         59:f0:97:aa:cf:c2:b2:cb:68:7b:29:ed:42:f3:b0:3a:de:03:
         c0:e0:ab:0b:9b:a8:3e:0a:54:6a:88:d5:9d:17:78:28:67:cc:
         b7:23:60:6d:69:92:e8:34:ef:27:0b:fe:df:04:c8:2a:38:b7:
         9c:ae:74:0e:21:f0:1d:2c:67:58:72:43:4c:32:f4:b2:99:b4:
         e7:2c:ec:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org