Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38302e302f32312d3231203d3e20323632333933.roa
File:                     3137372e3132392e38302e302f32312d3231203d3e20323632333933.roa (raw, json)
Hash identifier:          mGsD0mG+lYGb4cJxID0Df/M5vVE7cnxf6kyPvCYCER8=
Subject key identifier:   F4:D2:5C:8F:0B:99:4E:92:80:58:B4:D7:79:87:66:F2:8E:C6:FE:95
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       2DA2478C9349D89C6C9F42D953051C8BDC03BF94
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38302e302f32312d3231203d3e20323632333933.roa
Signing time:             Wed 03 Jan 2024 20:26:26 +0000
ROA not before:           Wed 03 Jan 2024 20:21:26 +0000
ROA not after:            Wed 01 Jan 2025 20:26:26 +0000
asID:                     262393
IP address blocks:        177.129.80.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a2:47:8c:93:49:d8:9c:6c:9f:42:d9:53:05:1c:8b:dc:03:bf:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Jan  3 20:21:26 2024 GMT
            Not After : Jan  1 20:26:26 2025 GMT
        Subject: CN=F4D25C8F0B994E928058B4D7798766F28EC6FE95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:af:44:2c:69:7d:6f:3a:f9:7d:4f:ad:f6:
                    bb:46:da:25:fa:04:25:a4:cd:99:3f:7d:fd:65:6f:
                    b9:b0:d9:12:c9:d1:4b:bc:4c:3b:4f:50:60:43:e8:
                    4b:54:a3:ef:57:17:e0:d7:04:02:02:23:9e:27:80:
                    07:d1:5f:27:f4:3e:0a:66:5b:7f:2b:ee:9d:00:ec:
                    87:6a:0a:5b:59:00:02:2a:8c:c5:5c:6a:4a:b2:44:
                    29:94:47:72:5b:9a:01:10:c4:e0:36:8c:56:ff:e6:
                    06:85:ca:63:11:1d:2e:f6:d2:21:fd:80:a8:f3:83:
                    15:3e:d7:08:2f:9f:64:95:17:8f:44:ed:95:71:97:
                    73:19:57:da:17:34:21:2b:6b:ab:e5:d1:8f:88:b5:
                    22:f9:19:73:01:e7:a1:ad:5a:1c:f5:fe:82:20:aa:
                    03:98:07:5d:f6:43:40:47:36:b6:ae:bb:29:93:c6:
                    91:8e:42:ab:4a:54:c3:1e:fa:76:18:db:17:af:54:
                    21:08:10:68:05:fc:3c:05:54:0a:74:4c:83:66:1c:
                    c3:37:a6:ac:45:f6:13:e1:c6:b9:c4:fc:0f:17:9e:
                    cf:9a:74:dc:24:8a:48:2f:89:36:39:d4:ef:27:a9:
                    a1:ce:e4:40:bd:b4:9d:79:a2:7e:22:58:77:a8:05:
                    84:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D2:5C:8F:0B:99:4E:92:80:58:B4:D7:79:87:66:F2:8E:C6:FE:95
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38302e302f32312d3231203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:ff:23:6e:41:92:8b:23:04:53:1f:bd:43:e3:6a:13:f1:cc:
         68:53:a1:7a:8e:ff:cf:14:a7:64:fd:d6:63:18:43:22:3f:4d:
         67:93:9d:fb:f2:ca:ae:eb:7f:cb:26:bc:54:c7:84:29:b1:08:
         08:41:0e:83:52:2a:63:df:d5:05:37:7a:70:14:92:1b:a3:e5:
         54:4e:b5:86:62:9a:bb:29:80:1f:2b:4e:2f:00:f4:2c:27:6f:
         a1:34:55:2a:30:7a:98:8a:e3:b7:3e:34:c0:ff:e9:88:e6:73:
         18:d7:11:18:e0:93:75:5e:a4:46:4b:5a:fb:cb:45:21:be:fd:
         3b:a0:04:ce:fb:b9:56:bd:ba:4a:01:23:64:5b:23:c3:80:37:
         45:99:47:d8:7f:53:6e:c6:56:bc:ee:5c:a6:21:df:ed:00:80:
         d8:3b:15:98:a3:23:ab:b8:74:95:a2:58:ad:64:da:64:5e:04:
         bc:33:bc:65:d2:30:bd:7e:86:f8:08:09:d5:ab:c5:a6:88:22:
         82:99:fd:89:4f:42:68:80:d8:98:16:47:9f:5c:25:43:5a:db:
         12:94:59:36:ea:8c:96:97:b7:fe:58:b0:c8:bd:e2:86:e8:70:
         61:05:72:db:c6:07:22:9c:ae:b4:46:fa:da:aa:d2:b4:9f:2a:
         31:68:ac:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org