Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38302e302f32322d3232203d3e20323632333933.roa
File:                     3137372e3132392e38302e302f32322d3232203d3e20323632333933.roa (raw, json)
Hash identifier:          KQl7z58Uvw1x5Rg4YmixR7C7R+Jt6IAyGZ3IL62PATo=
Subject key identifier:   BB:D9:02:77:3F:5F:E4:11:5D:EF:23:0E:AD:F5:76:66:20:2C:45:18
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       22CFF59840D0F6AA1C4081FFD003C4FF14C00758
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38302e302f32322d3232203d3e20323632333933.roa
Signing time:             Sat 05 Mar 2022 15:38:39 +0000
ROA not before:           Sat 05 Mar 2022 15:33:39 +0000
ROA not after:            Sat 04 Mar 2023 15:38:39 +0000
asID:                     262393
IP address blocks:        177.129.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cf:f5:98:40:d0:f6:aa:1c:40:81:ff:d0:03:c4:ff:14:c0:07:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Mar  5 15:33:39 2022 GMT
            Not After : Mar  4 15:38:39 2023 GMT
        Subject: CN=BBD902773F5FE4115DEF230EADF57666202C4518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:90:82:ce:83:96:b1:db:a7:97:6a:ab:51:e1:
                    1c:97:a1:5f:1a:51:21:98:23:54:9d:dc:ee:95:4d:
                    75:5c:a5:68:db:02:31:90:6c:48:3d:d6:34:98:e0:
                    04:a7:5e:1b:69:b0:4a:8a:5b:8e:53:24:ec:3b:ba:
                    3e:00:de:bb:36:fc:c7:60:3c:a7:5e:be:79:c4:2c:
                    43:7a:ed:18:d8:c7:48:c1:58:af:16:cb:10:e3:93:
                    9e:8c:4b:d0:ad:8c:b3:d5:ae:74:3c:a9:3b:2f:07:
                    46:44:0f:63:29:f9:53:ca:29:30:13:31:42:47:fe:
                    25:d0:eb:f2:4c:df:86:a0:5e:0c:5a:1e:e5:f1:c2:
                    95:c2:8c:d8:0a:57:11:4e:68:7a:7d:db:dd:68:43:
                    45:ce:99:ea:67:fa:31:05:97:5f:20:fe:1c:d8:93:
                    c7:2b:33:a1:1c:17:b3:17:04:fa:7f:e8:38:b4:47:
                    e2:86:6d:35:71:2a:b8:ea:f9:80:bc:22:86:90:2b:
                    26:17:7c:fb:dc:48:f1:c6:07:be:a0:d4:97:13:cc:
                    8b:6f:16:bb:8e:bd:c5:8b:cc:87:44:0e:42:fb:88:
                    d7:ab:e4:de:bb:70:7b:ec:cb:08:11:18:eb:21:49:
                    15:25:98:e9:cc:86:bb:9e:c0:aa:56:72:32:23:df:
                    67:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D9:02:77:3F:5F:E4:11:5D:EF:23:0E:AD:F5:76:66:20:2C:45:18
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38302e302f32322d3232203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:3d:df:40:c9:dc:49:ae:92:aa:cc:20:4c:b4:0c:ce:11:20:
         21:3e:6c:0c:19:0c:47:35:b9:8c:52:34:fa:62:cc:44:e2:6c:
         74:1f:b5:e8:22:63:75:40:d9:bb:4c:78:8d:25:9a:8f:ad:30:
         36:9a:3c:92:85:40:3f:fc:dc:3c:6d:b5:4c:a4:e9:64:fc:db:
         8a:0e:2f:c5:78:5b:e4:54:8b:f9:aa:f2:a5:f6:66:64:54:f8:
         9d:fe:f7:86:5e:85:28:5e:1f:e5:e4:90:b7:cf:a9:bc:b0:a2:
         ee:b7:39:46:16:35:c0:00:08:49:b0:8d:0c:15:a8:f1:d2:74:
         99:7c:7f:46:66:83:4f:04:8a:73:bf:70:94:28:b1:06:a3:f9:
         4d:ea:0a:ff:5d:36:2c:58:c8:39:36:b5:2d:a3:ad:a0:7f:69:
         d4:60:12:45:c4:f1:03:c0:04:58:51:86:f1:9b:2c:be:26:82:
         1f:b9:63:44:5b:42:21:6b:ee:97:2d:2b:13:c7:c7:8c:fa:ad:
         60:13:6d:f7:62:fe:ff:f9:cc:9a:97:19:51:7e:b6:6e:ac:35:
         6a:c2:e5:10:93:80:3b:e8:9b:5c:53:01:b6:3f:94:22:92:ac:
         85:dd:ac:59:68:aa:63:f9:ba:79:36:c9:fd:ba:bf:7c:a7:f5:
         41:3a:48:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org