Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38322e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3132392e38322e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          13dg8dxMmosTLBboQ5hPoi/0yHfey1x4din/XeqCzaw=
Subject key identifier:   EF:E4:88:1B:3C:D7:05:F2:AD:77:54:45:58:AE:83:C0:19:DB:60:F2
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       1F499155E4E7864ABAEE5D72B859391CAE6C4FB0
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38322e302f32342d3234203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:05 +0000
ROA not before:           Thu 03 Mar 2022 18:47:05 +0000
ROA not after:            Thu 02 Mar 2023 18:52:05 +0000
asID:                     262393
IP address blocks:        177.129.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:49:91:55:e4:e7:86:4a:ba:ee:5d:72:b8:59:39:1c:ae:6c:4f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:05 2022 GMT
            Not After : Mar  2 18:52:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:c2:da:aa:a1:ec:c0:63:43:88:fb:7b:8f:
                    da:41:9d:7b:91:fc:7b:4b:34:3d:f6:85:ce:b9:b5:
                    21:f9:fe:23:37:55:ff:38:a8:86:e5:c3:4f:be:d6:
                    4e:16:84:13:ce:91:eb:40:f7:b4:c6:f1:fb:03:e1:
                    8b:51:fc:4a:4b:35:3d:a7:cc:b0:77:b7:0e:f1:b7:
                    a0:04:7c:07:b4:81:4f:53:fe:77:07:37:d7:62:6d:
                    94:c6:fe:40:50:1a:34:5f:2b:9b:d1:2f:19:49:5d:
                    e6:5d:6f:2f:b5:d7:6a:b3:0a:f4:ed:35:be:36:6d:
                    15:bd:e5:ea:86:fb:68:3d:df:4b:f9:52:93:02:3a:
                    71:0e:36:db:8d:a9:ed:6c:05:93:fe:9c:dc:bb:b5:
                    42:c0:46:1c:6f:e9:ec:ad:14:87:37:66:c3:d8:49:
                    24:8c:5b:3a:cf:0d:04:77:e4:b0:88:58:d5:0b:c8:
                    e3:ee:99:2c:bf:af:ab:da:97:26:9a:7a:18:32:0e:
                    a9:53:65:07:f5:7d:fc:2f:43:e4:34:90:08:b5:1e:
                    fc:29:75:79:3c:0d:ff:43:28:09:c5:a1:b3:c1:20:
                    76:f8:e8:f6:54:7c:7e:8e:12:c1:2f:b2:f6:f2:1a:
                    62:68:6a:71:a5:83:90:52:95:d0:5f:8e:24:bf:2b:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E4:88:1B:3C:D7:05:F2:AD:77:54:45:58:AE:83:C0:19:DB:60:F2
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38322e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:4e:11:91:b6:98:4c:69:a5:92:16:81:ce:e9:a4:de:4a:d9:
         09:eb:08:c0:2c:4f:7c:4f:cf:f9:c4:08:9a:e1:7b:ec:0a:10:
         f5:a5:95:8a:bb:a0:b6:a4:d6:95:0d:61:51:2f:89:08:21:79:
         a0:a8:e0:87:1a:32:bd:8d:18:ef:ae:00:21:47:71:f3:2d:61:
         1e:f9:ae:8a:65:71:07:11:f2:60:8b:d1:cc:9b:60:82:3a:51:
         a4:a0:9e:aa:83:5c:58:d6:f3:5d:4d:b8:91:57:f1:98:3b:3a:
         8e:7d:a6:4e:d4:d5:37:eb:b1:c7:d3:5d:69:81:65:e6:88:c7:
         09:b1:ae:9c:bb:6a:e5:b3:b6:dd:b8:6b:3f:75:e1:a1:fd:10:
         b4:cb:57:ca:0c:8f:43:3c:bb:19:a3:02:bc:b1:c7:61:20:87:
         58:03:e9:23:3c:83:35:7a:d8:2e:0b:7c:ac:13:3f:d9:32:05:
         cc:ea:14:39:38:80:a1:03:f6:81:2e:ff:44:7c:a1:e9:b3:54:
         17:76:c7:cd:50:58:00:07:f3:2b:ba:ac:ae:8a:d9:9a:c2:a3:
         c9:02:4d:ea:24:55:f4:5a:b0:b8:39:41:07:39:c2:6d:2a:5c:
         6c:c9:22:a3:38:e9:29:d3:24:4e:f7:a9:43:08:c6:db:95:f6:
         b0:5c:1c:ce
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUH0mRVeTnhkq67l1yuFk5HK5sT7AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJBNDU2NjhGRTNCQjkzMjI2OEJDOTlGQjY3MTUzMUE5
MDQ3RDYxMDAeFw0yMjAzMDMxODQ3MDVaFw0yMzAzMDIxODUyMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUI2REMyREFBQUExRUNDMDYz
NDM4OEZCN0I4RkRBNDE5RDdCOTFGQzdCNEIzNDNERjY4NUNFQjlCNTIxRjlGRTIz
Mzc1NUZGMzhBODg2RTVDMzRGQkVENjRFMTY4NDEzQ0U5MUVCNDBGN0I0QzZGMUZC
MDNFMThCNTFGQzRBNEIzNTNEQTdDQ0IwNzdCNzBFRjFCN0EwMDQ3QzA3QjQ4MTRG
NTNGRTc3MDczN0Q3NjI2RDk0QzZGRTQwNTAxQTM0NUYyQjlCRDEyRjE5NDk1REU2
NUQ2RjJGQjVENzZBQjMwQUY0RUQzNUJFMzY2RDE1QkRFNUVBODZGQjY4M0RERjRC
Rjk1MjkzMDIzQTcxMEUzNkRCOERBOUVENkMwNTkzRkU5Q0RDQkJCNTQyQzA0NjFD
NkZFOUVDQUQxNDg3Mzc2NkMzRDg0OTI0OEM1QjNBQ0YwRDA0NzdFNEIwODg1OEQ1
MEJDOEUzRUU5OTJDQkZBRkFCREE5NzI2OUE3QTE4MzIwRUE5NTM2NTA3RjU3REZD
MkY0M0U0MzQ5MDA4QjUxRUZDMjk3NTc5M0MwREZGNDMyODA5QzVBMUIzQzEyMDc2
RjhFOEY2NTQ3QzdFOEUxMkMxMkZCMkY2RjIxQTYyNjg2QTcxQTU4MzkwNTI5NUQw
NUY4RTI0QkYyQjNDMEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAm23C2qqh7MBjQ4j7e4/aQZ17kfx7SzQ99oXOubUh+f4jN1X/OKiG
5cNPvtZOFoQTzpHrQPe0xvH7A+GLUfxKSzU9p8ywd7cO8begBHwHtIFPU/53BzfX
Ym2Uxv5AUBo0Xyub0S8ZSV3mXW8vtddqswr07TW+Nm0VveXqhvtoPd9L+VKTAjpx
DjbbjantbAWT/pzcu7VCwEYcb+nsrRSHN2bD2EkkjFs6zw0Ed+SwiFjVC8jj7pks
v6+r2pcmmnoYMg6pU2UH9X38L0PkNJAItR78KXV5PA3/QygJxaGzwSB2+Oj2VHx+
jhLBL7L28hpiaGpxpYOQUpXQX44kvys8DQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FO/kiBs81wXyrXdURViug8AZ22DyMB8GA1UdIwQYMBaAFOKkVmj+O7kyJovJn7Zx
UxqQR9YQMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJNVHU4eWhGTHJvR05H
Q3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzAvRTJBNDU2NjhGRTNCQjkz
MjI2OEJDOTlGQjY3MTUzMUE5MDQ3RDYxMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMkE0NTY2OEZFM0JCOTMyMjY4QkM5OUZCNjcxNTMxQTkwNDdE
NjEwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yTVR1OHloRkxyb0dOR0NxVmtT
MmlUOWE4aE40cVN5OVlkczQ1cmFmQUtVNi8wLzMxMzczNzJlMzEzMjM5MmUzODMy
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzMzOTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sYFSMA0GCSqGSIb3DQEBCwUAA4IBAQCZThGRtphMaaWSFoHO6aTeStkJ6wjALE98
T8/5xAia4XvsChD1pZWKu6C2pNaVDWFRL4kIIXmgqOCHGjK9jRjvrgAhR3HzLWEe
+a6KZXEHEfJgi9HMm2CCOlGkoJ6qg1xY1vNdTbiRV/GYOzqOfaZO1NU367HH011p
gWXmiMcJsa6cu2rls7bduGs/deGh/RC0y1fKDI9DPLsZowK8scdhIIdYA+kjPIM1
etguC3ysEz/ZMgXM6hQ5OIChA/aBLv9EfKHps1QXdsfNUFgAB/MruqyuitmawqPJ
Ak3qJFX0WrC4OUEHOcJtKlxsySKjOOkp0yRO96lDCMbblfawXBzO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org