Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133382e3132312e3234392e302f32342d3234203d3e20323632333933.roa
File:                     3133382e3132312e3234392e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          GJgtdkexdTshTM9eNiLNhvmGpM4QEN7HM2odxFk4XYA=
Subject key identifier:   98:F9:A6:DD:D6:75:0D:BA:2B:71:3F:8D:0D:CA:FC:65:26:C5:93:E7
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       7D204587FBA3164257025DACD585E86C5D7A96EB
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133382e3132312e3234392e302f32342d3234203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:05 +0000
ROA not before:           Thu 03 Mar 2022 18:47:05 +0000
ROA not after:            Thu 02 Mar 2023 18:52:05 +0000
asID:                     262393
IP address blocks:        138.121.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:20:45:87:fb:a3:16:42:57:02:5d:ac:d5:85:e8:6c:5d:7a:96:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:05 2022 GMT
            Not After : Mar  2 18:52:05 2023 GMT
        Subject: CN=3082010A0282010100E8B3CB07CE3D362024FA730E6A6206E94B4A43B219C295160A2C41E1C1754AC1F13374686ADA343AF1DAA0B63A3DCBCEA36D85B7726A931EC0F097B1464DA16C0FE293BC961B9C0C86E97CE25CA748D388C3202EAC7B1EE66DAB716D1C3AE73983C51B68166BC0058F81E52B508500602A9FA98024D46A75EC6C482149857B627EC7C3AEA9E3B0E67BE1F60839D32A096CF2E6E9282C286B963268A8DA36DE9B8C672B66C0760064CC10EA4A88A8A23E5C2E8CFC832AD7C653C5EEAE9CA644868CEAD9FBF0DFD84B6CBA7FAEB524872F0E3BAFB57D15B602A202F36BAB4D7E8ECDF38754F9D4310587EE97762F56648069C8FD95FA10BA9A5A00FB1B7D7FCA310203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b3:cb:07:ce:3d:36:20:24:fa:73:0e:6a:62:
                    06:e9:4b:4a:43:b2:19:c2:95:16:0a:2c:41:e1:c1:
                    75:4a:c1:f1:33:74:68:6a:da:34:3a:f1:da:a0:b6:
                    3a:3d:cb:ce:a3:6d:85:b7:72:6a:93:1e:c0:f0:97:
                    b1:46:4d:a1:6c:0f:e2:93:bc:96:1b:9c:0c:86:e9:
                    7c:e2:5c:a7:48:d3:88:c3:20:2e:ac:7b:1e:e6:6d:
                    ab:71:6d:1c:3a:e7:39:83:c5:1b:68:16:6b:c0:05:
                    8f:81:e5:2b:50:85:00:60:2a:9f:a9:80:24:d4:6a:
                    75:ec:6c:48:21:49:85:7b:62:7e:c7:c3:ae:a9:e3:
                    b0:e6:7b:e1:f6:08:39:d3:2a:09:6c:f2:e6:e9:28:
                    2c:28:6b:96:32:68:a8:da:36:de:9b:8c:67:2b:66:
                    c0:76:00:64:cc:10:ea:4a:88:a8:a2:3e:5c:2e:8c:
                    fc:83:2a:d7:c6:53:c5:ee:ae:9c:a6:44:86:8c:ea:
                    d9:fb:f0:df:d8:4b:6c:ba:7f:ae:b5:24:87:2f:0e:
                    3b:af:b5:7d:15:b6:02:a2:02:f3:6b:ab:4d:7e:8e:
                    cd:f3:87:54:f9:d4:31:05:87:ee:97:76:2f:56:64:
                    80:69:c8:fd:95:fa:10:ba:9a:5a:00:fb:1b:7d:7f:
                    ca:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F9:A6:DD:D6:75:0D:BA:2B:71:3F:8D:0D:CA:FC:65:26:C5:93:E7
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3133382e3132312e3234392e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:06:8a:fa:2e:96:0d:22:c3:70:bb:89:b5:9b:05:ff:67:00:
         80:2e:97:65:d2:a4:1d:0e:c3:e2:e8:c5:7e:1a:df:ee:e9:39:
         1f:ca:f7:f1:2a:fb:42:6c:04:08:84:00:6d:a3:57:6e:7e:88:
         a0:95:e4:d3:16:7a:99:c7:5f:5c:ff:e0:08:aa:d7:51:71:3f:
         09:24:ec:ca:4e:c0:e4:79:f9:33:f3:81:06:61:d6:e6:70:69:
         86:45:83:f2:b0:cc:53:45:29:91:a3:33:c9:5a:5b:e2:be:ce:
         ac:51:b9:e2:a1:e2:0a:dc:46:3e:3e:b2:3f:64:3f:bc:4a:bf:
         92:b5:b7:2e:bc:ef:3c:a0:c0:a7:4c:a0:eb:07:f3:75:5d:33:
         df:d6:1d:2c:9d:7b:4b:d9:70:c2:e2:f0:71:2c:f4:e3:5d:5f:
         37:6c:90:3d:eb:ba:c8:2c:73:42:d3:c3:bd:1f:fd:1b:9e:10:
         06:4a:50:7f:2e:26:7e:12:07:16:aa:12:22:53:b8:17:28:78:
         da:f3:83:87:a7:d8:45:f1:ab:2c:92:8c:74:ba:e1:d1:2c:ae:
         f4:79:73:4f:4e:4c:d5:02:f9:ce:28:9f:08:79:3a:73:78:c6:
         2a:ce:27:2e:8a:bf:ba:2d:89:95:ce:b4:c5:14:70:ee:7a:f2:
         67:79:02:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org