Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38302e302f32322d3234203d3e20323632333933.roa
File:                     3137372e3132392e38302e302f32322d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          1mblmgdY6Zm0cu+nkA4rzIhDc6oX+1UNoQHpq6cUvfY=
Subject key identifier:   F1:0E:88:0E:86:93:B9:44:FA:96:40:F0:C3:8D:AD:9E:E1:27:C9:65
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       6DB6E3610B35E6C2598BE71963203FBDADBEA8FD
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38302e302f32322d3234203d3e20323632333933.roa
Signing time:             Tue 09 Jan 2024 19:26:27 +0000
ROA not before:           Tue 09 Jan 2024 19:21:27 +0000
ROA not after:            Tue 07 Jan 2025 19:26:27 +0000
asID:                     262393
IP address blocks:        177.129.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b6:e3:61:0b:35:e6:c2:59:8b:e7:19:63:20:3f:bd:ad:be:a8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Jan  9 19:21:27 2024 GMT
            Not After : Jan  7 19:26:27 2025 GMT
        Subject: CN=F10E880E8693B944FA9640F0C38DAD9EE127C965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b2:36:7e:d1:0b:be:78:19:d6:8a:7e:ba:47:
                    8c:8e:9c:b1:56:a3:fe:fd:18:15:d3:98:b9:00:0b:
                    e9:63:02:4d:2c:e0:1d:81:d5:66:3e:00:d7:7a:d4:
                    ca:64:b9:f4:75:f5:ae:a3:4e:4d:3e:f5:50:6f:3b:
                    6a:dc:cb:d2:66:70:24:9e:e4:2d:ff:a9:36:ce:bf:
                    e9:22:ed:02:ff:72:a7:dd:ad:0c:d4:de:6f:9e:a6:
                    42:f6:81:1b:5c:2b:81:f9:30:ab:3c:de:fd:9f:a7:
                    e2:d1:fc:97:62:52:56:47:43:3f:d1:5f:52:f8:09:
                    17:be:f6:0b:47:25:5c:9f:a0:ca:c8:3c:54:ad:7f:
                    d8:75:a7:5c:f8:4a:0b:82:dc:aa:76:e1:c2:3f:4e:
                    e6:09:7a:ee:58:62:41:2c:4f:19:6d:05:09:d6:05:
                    8c:0f:40:2a:76:2b:ca:29:59:f3:f2:3c:70:b4:22:
                    cc:f8:97:d2:3f:04:84:71:56:48:19:30:bd:46:23:
                    6a:aa:56:32:7a:96:70:ff:bb:d7:3f:9a:5a:17:22:
                    30:f1:bf:4c:c7:f9:d5:ff:27:26:a1:86:a6:83:ce:
                    d7:a1:cc:94:f9:9c:ca:a7:cc:9a:95:05:c9:bb:e2:
                    d1:11:ee:46:7b:09:1e:ce:1f:49:ef:99:9f:1a:7d:
                    5c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0E:88:0E:86:93:B9:44:FA:96:40:F0:C3:8D:AD:9E:E1:27:C9:65
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38302e302f32322d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:10:a6:46:f1:e4:32:de:88:6f:e9:23:15:bb:8d:a5:5b:0e:
         39:38:d0:78:ec:4b:49:12:3e:64:d5:4c:17:19:56:ea:9e:95:
         6f:e4:d8:de:3b:e6:8f:7e:94:b1:d7:61:af:9a:cc:e9:5a:51:
         47:b3:7d:4d:d0:9d:42:75:02:f7:03:5c:13:82:b3:57:56:f8:
         21:90:e9:a0:fa:f0:ee:19:3f:f2:eb:5a:98:d3:ce:10:fa:27:
         1f:14:10:73:cf:75:0c:b1:83:b9:d5:7d:45:8b:14:6f:ae:3c:
         c9:8d:3f:c4:5c:d0:fd:b1:3c:f5:25:cc:c9:54:1f:df:ee:bd:
         f6:4a:48:be:99:85:32:b3:1a:15:1a:bd:44:9c:23:ed:da:2e:
         06:f7:23:06:82:81:31:e0:b8:1b:b5:ed:33:d4:26:0c:d4:d5:
         7f:d1:28:85:e7:85:ef:c9:74:50:af:4f:3d:d7:d0:fd:48:38:
         85:93:9f:3c:a4:ca:b1:50:48:73:9f:41:25:35:06:c7:98:0d:
         38:79:3a:1e:25:f2:95:7a:76:5f:63:cb:dc:82:12:d4:04:4e:
         78:d1:1e:76:90:92:3b:4f:cf:c0:de:94:af:63:78:f6:36:fd:
         28:5e:69:ce:a3:9a:07:68:5d:33:9e:b8:f3:89:4d:13:e7:6a:
         0f:18:73:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org