Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38302e302f32332d3233203d3e20323632333933.roa
File:                     3137372e3132392e38302e302f32332d3233203d3e20323632333933.roa (raw, json)
Hash identifier:          Wn4vJKht/OcI8PxKTtVmJCKY3Op09ON8modQLX/lLI0=
Subject key identifier:   B8:F3:6E:03:A8:C5:41:48:16:0D:20:07:CB:75:AD:6D:3B:A6:1E:AC
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       3DD8322616C4389906DC245C4CBBE89861690B03
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38302e302f32332d3233203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:05 +0000
ROA not before:           Thu 03 Mar 2022 18:47:05 +0000
ROA not after:            Thu 02 Mar 2023 18:52:05 +0000
asID:                     262393
IP address blocks:        177.129.80.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d8:32:26:16:c4:38:99:06:dc:24:5c:4c:bb:e8:98:61:69:0b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:05 2022 GMT
            Not After : Mar  2 18:52:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:05:27:89:63:f9:67:5b:cc:f5:bf:e3:5d:0b:
                    81:0d:bf:bb:be:dc:75:e4:3b:5d:1b:a6:64:49:a6:
                    d1:39:25:35:e1:57:bc:13:80:99:b3:31:67:7e:b3:
                    97:85:e5:91:47:5a:d8:b4:5c:df:00:ff:ef:40:e2:
                    53:74:56:d9:74:29:cd:90:35:bf:76:2d:ef:7b:39:
                    4f:3f:f5:fa:f9:d5:08:e1:a4:70:4d:77:d7:d1:a5:
                    9f:6e:39:95:70:4c:7c:0f:73:35:21:f5:c6:fb:28:
                    3a:24:e4:da:89:37:27:29:84:77:87:23:e0:e7:c1:
                    43:64:c2:66:4b:af:4c:e7:58:f5:1d:78:48:7e:96:
                    30:ad:f3:02:4a:8f:a6:fd:f8:16:60:b3:d7:80:4d:
                    ff:7f:32:db:53:8e:30:0d:38:02:a6:3a:b5:a7:74:
                    e5:9b:0e:34:5e:3d:64:ce:4e:c4:5f:5f:3f:56:50:
                    06:a1:f0:f8:e0:43:84:a1:1f:47:f5:34:2e:70:a2:
                    ce:5f:aa:44:4e:ce:c3:e5:75:36:6c:80:24:d2:9a:
                    03:ad:40:80:08:a6:1e:55:81:44:57:f1:22:75:0d:
                    ca:ec:39:5c:30:ac:e3:7b:3f:c6:cb:c1:a0:fe:34:
                    24:c6:eb:f9:4b:9f:3c:03:6b:c8:40:ea:af:9b:e4:
                    05:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F3:6E:03:A8:C5:41:48:16:0D:20:07:CB:75:AD:6D:3B:A6:1E:AC
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38302e302f32332d3233203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:42:30:14:d4:02:9b:f5:d2:72:af:cb:1c:33:d0:f0:72:a8:
         5c:fb:65:08:5f:1d:e2:9d:54:5d:21:5c:46:3d:e9:06:fd:e9:
         93:c8:66:75:3f:48:ba:6d:b0:6e:8f:11:07:7f:b4:53:31:af:
         a4:a3:8c:b1:e1:d4:62:3d:b5:87:50:43:02:a9:bc:6d:77:30:
         23:16:5b:00:0d:3a:8d:7c:4c:f2:94:1c:d0:26:1a:9f:30:6a:
         ee:43:11:91:41:7b:ab:8e:3d:18:d9:12:ba:63:d6:f5:73:53:
         db:df:4a:f9:ea:87:4a:94:78:4f:b5:7b:c4:6e:c5:9c:b8:30:
         44:8d:4f:70:2c:20:99:2d:89:9a:33:e4:e2:ea:de:cd:80:82:
         06:f8:4f:b3:25:1e:ee:49:36:a8:4c:92:8e:d0:be:85:64:15:
         f0:3a:25:0a:60:67:49:3e:22:a2:e7:3c:93:34:d3:02:3a:f3:
         b1:f4:c4:1e:42:cc:b1:1c:4c:a6:be:fc:40:f0:a2:76:a0:68:
         af:46:52:68:a9:8d:73:86:13:89:20:3a:10:9e:4f:32:a4:96:
         4a:7e:7f:d8:d8:72:73:97:b0:7e:20:0c:ed:93:14:e6:b2:17:
         8f:38:ac:bc:0b:5b:a6:84:43:86:ed:47:25:3f:6f:61:92:5d:
         5a:57:23:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org