Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38312e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3132392e38312e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          9ukYnOZXRR8KLMWe1doofR/Sc3oELFJx//qZNV9z5Y4=
Subject key identifier:   5A:C2:95:42:1D:65:82:8C:A9:41:1C:2C:9F:1A:07:F8:10:D7:F7:5C
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       0A1C41680FD5DBB80D99AE7B470D3867B19315A4
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38312e302f32342d3234203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:05 +0000
ROA not before:           Thu 03 Mar 2022 18:47:05 +0000
ROA not after:            Thu 02 Mar 2023 18:52:05 +0000
asID:                     262393
IP address blocks:        177.129.81.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:1c:41:68:0f:d5:db:b8:0d:99:ae:7b:47:0d:38:67:b1:93:15:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:05 2022 GMT
            Not After : Mar  2 18:52:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:24:03:44:e0:a5:c9:60:3a:67:74:9f:8a:
                    a1:3b:43:84:71:be:a6:69:6a:43:f5:d7:60:5a:a9:
                    fa:d1:54:87:f6:eb:b9:6c:d7:c9:19:30:81:69:90:
                    dd:ae:08:43:5f:1a:67:31:92:82:33:86:60:70:bb:
                    46:ab:73:62:28:f9:07:3e:14:21:2c:fb:21:53:47:
                    ad:7a:b1:6c:a3:6b:77:53:de:3c:22:84:66:4a:3b:
                    43:99:c3:c8:42:a8:f2:8d:5f:62:88:a8:d1:ca:f4:
                    7d:7c:0b:67:e9:3b:0e:3c:91:3c:3c:f2:02:99:ef:
                    56:bf:5d:98:d3:12:b0:b7:34:75:1c:af:08:54:19:
                    59:70:cc:5b:9f:e3:ce:22:cf:b9:d7:09:28:e6:9b:
                    a8:f3:c4:c9:8d:aa:a8:a1:9b:ad:91:7a:89:b8:db:
                    22:82:e6:88:17:3b:52:fb:bc:bc:39:8d:28:7d:9a:
                    79:fd:01:cc:21:2f:ba:2d:01:41:74:19:3b:66:c0:
                    d3:fb:c9:35:99:47:3d:1f:0f:b8:e8:cc:b7:4f:3a:
                    19:fe:91:96:a2:ac:2c:70:98:61:56:c5:ab:35:fa:
                    99:c1:83:9a:1c:00:a5:d0:fb:e6:b8:22:e6:29:f0:
                    80:e5:67:df:5e:f0:cb:21:20:16:a2:79:eb:f2:b7:
                    4a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C2:95:42:1D:65:82:8C:A9:41:1C:2C:9F:1A:07:F8:10:D7:F7:5C
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38312e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:fc:d8:94:5c:2c:33:80:d1:aa:69:22:7e:9a:21:f9:e8:cf:
         68:ce:73:10:71:ab:9b:88:80:2b:af:35:85:e5:94:dc:7e:e3:
         1b:10:34:88:43:19:31:99:e7:3f:e3:58:de:ea:4f:c4:e3:a8:
         11:28:52:0b:5f:ae:3b:32:0a:af:30:5e:03:df:d0:50:37:a6:
         af:d5:65:fb:82:79:81:d3:be:b2:0a:13:68:e2:5e:32:6b:19:
         e3:ca:9f:51:6c:21:82:54:3a:19:a7:a5:fc:81:74:4e:f7:2a:
         17:03:5a:24:03:87:57:71:f4:78:f1:f6:45:92:b2:73:c0:50:
         3e:8f:4f:31:38:8c:74:3c:69:e2:07:a6:9c:cd:ad:6a:3f:aa:
         a6:63:5c:73:58:db:5d:c1:a4:2f:f6:2c:d9:75:1d:48:fe:ca:
         3a:ac:3c:86:a8:2b:cb:bd:fd:2b:0a:45:8c:24:5c:58:74:54:
         a4:d3:da:d7:66:16:8b:6b:c6:c1:e8:d9:2e:0f:2f:0a:81:e6:
         97:0b:dc:3c:8a:4e:9b:4e:0e:5e:e0:5b:8c:08:5c:a9:db:6b:
         0f:1e:16:0b:e9:e4:ee:af:85:aa:fe:59:cc:78:a5:c8:fe:90:
         cd:0b:89:36:28:f3:3a:b2:84:c7:8a:40:b3:5a:d4:a8:b2:f4:
         93:f0:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org