Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38322e302f32332d3233203d3e20323632333933.roa
File:                     3137372e3132392e38322e302f32332d3233203d3e20323632333933.roa (raw, json)
Hash identifier:          VzjTRQr6Xka/972I1W082+bn9d4VfdyHiqJR96uo9Vk=
Subject key identifier:   72:E9:79:7D:CA:B6:B2:13:5B:6A:40:D4:7B:73:E5:A0:7C:7B:A7:82
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       49E8358DC737460BE1022B31CA721D9F1CD8C000
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38322e302f32332d3233203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:03 +0000
ROA not before:           Thu 03 Mar 2022 18:47:03 +0000
ROA not after:            Thu 02 Mar 2023 18:52:03 +0000
asID:                     262393
IP address blocks:        177.129.82.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e8:35:8d:c7:37:46:0b:e1:02:2b:31:ca:72:1d:9f:1c:d8:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:03 2022 GMT
            Not After : Mar  2 18:52:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:ac:38:02:3c:7c:7e:86:eb:60:c9:43:b8:
                    57:a3:c9:26:b6:47:33:fd:09:b6:0e:7d:36:36:1d:
                    df:b3:60:01:37:e2:c7:75:23:de:4a:0b:e5:f8:07:
                    8d:56:4d:13:28:7f:9f:e7:6b:9d:90:b7:ac:12:a7:
                    a2:c9:ac:81:dd:64:6b:f9:c0:77:c5:7d:43:58:c5:
                    f5:d2:a3:8f:93:bf:65:36:e4:90:a9:bc:d1:a9:0d:
                    48:5b:d0:ce:e9:b7:33:bf:11:76:36:c2:64:66:92:
                    d9:0d:95:6f:d9:1d:f3:d1:9c:90:4d:b6:82:9f:52:
                    cf:6e:04:44:77:5a:35:d7:82:c6:cb:78:37:c2:2d:
                    90:65:13:7d:0f:bb:d7:93:79:e5:39:c7:d4:37:be:
                    4c:12:8a:67:7e:df:4b:5e:07:c5:13:af:9d:d8:6c:
                    e7:3c:74:bf:d9:87:b9:a0:c0:82:0e:48:26:d2:85:
                    b4:f4:8f:55:9d:55:8f:fc:a5:fa:38:77:ba:a6:0d:
                    39:ea:b8:75:43:8f:9e:ce:27:00:fb:45:6f:d9:37:
                    f8:9e:a8:76:f8:c9:59:e9:93:ce:2e:47:26:f2:2a:
                    da:0e:9b:83:fa:f6:76:b8:ba:68:00:7d:9a:5a:39:
                    19:2e:ee:2e:ca:a9:3f:2b:32:15:f8:74:13:cc:d3:
                    89:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:E9:79:7D:CA:B6:B2:13:5B:6A:40:D4:7B:73:E5:A0:7C:7B:A7:82
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38322e302f32332d3233203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:45:89:ff:01:ef:86:e9:7e:f8:bf:b2:35:2a:25:6e:34:9d:
         07:95:5b:ce:23:b1:12:ee:b4:9f:d9:33:a3:80:54:02:3a:b1:
         9b:13:14:c3:78:76:5b:75:c9:60:8e:f0:bc:cb:ad:cd:17:c2:
         31:7d:45:c8:d4:9f:59:49:a4:e7:14:2b:a8:4e:fd:3a:69:0b:
         95:69:76:6f:b8:bb:9e:9c:f5:59:38:44:83:01:fb:ce:fc:5a:
         ef:e5:8c:d1:c1:cb:7a:1c:ea:1c:aa:2e:c5:9a:30:d2:e2:23:
         6a:46:bb:41:8e:08:29:aa:3e:c6:7a:10:59:d2:50:27:30:17:
         d6:c0:f9:a6:d1:be:a3:b6:c7:0e:c8:bc:35:ec:5a:4f:d3:44:
         aa:9e:b7:6c:45:12:ab:6d:28:3c:a9:50:0d:dc:71:8b:8d:97:
         c0:5d:5b:4b:73:b6:53:eb:6d:82:65:3e:87:82:22:ee:6b:f4:
         76:4d:71:26:9f:78:ef:72:52:df:f5:38:e5:17:b0:ad:a8:f8:
         ab:5e:6e:49:13:7d:c3:f4:19:b0:4e:15:26:03:e5:b9:ec:94:
         c3:7a:a8:69:7a:ac:a0:bd:e2:48:1d:e7:d6:75:30:1a:e5:1c:
         7d:11:8e:28:a5:32:46:db:48:5d:25:7c:01:a2:94:7f:81:e2:
         de:6d:17:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org