Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38332e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3132392e38332e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          MrqAfdfNCuM5pRh0JHDZhxTDq8bCJsCP2eNVmq2LRWY=
Subject key identifier:   CB:4D:B7:1F:C9:88:61:62:14:8B:84:39:CF:33:49:52:F1:03:29:92
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       68FDCFD0C6D3C3E126CF2BEF01A34E5076E72A08
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38332e302f32342d3234203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:02 +0000
ROA not before:           Thu 03 Mar 2022 18:47:02 +0000
ROA not after:            Thu 02 Mar 2023 18:52:02 +0000
asID:                     262393
IP address blocks:        177.129.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:fd:cf:d0:c6:d3:c3:e1:26:cf:2b:ef:01:a3:4e:50:76:e7:2a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:02 2022 GMT
            Not After : Mar  2 18:52:02 2023 GMT
        Subject: CN=3082010A0282010100BC910B00AF3B27B390E5D84E8E3ADD99EB8D71B32E4B71D13C8FCFE3C415F0FFA7ABE2421B28A6902AD328FFA8868A8D19B9151059C609847F2591F099A2FF5DA2386D0F5847F699998D312B1F09562C477D75D4BCC24C21A1F866374F0296BC712B797A41A73CB0C022B2EBBAF3813B350E0DF7E65062D6A2A185EFFBC0D90C8C0618711475FF823F1BDC115F4FF36AF83AF563094E4F9D97780DFACEAB18394F7A618AD10D390FF69559DAE96861E64230C2E6C24597CE1D7229E4193D4B6A9FEC4DA40C7275DA08ECA06218CA58CFB35A7142481AE3802217B349CB46579A31878060B0380AA7AA1DAD67F7C03485304110F952F80EE7698D803355EFFD310203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:0b:00:af:3b:27:b3:90:e5:d8:4e:8e:3a:
                    dd:99:eb:8d:71:b3:2e:4b:71:d1:3c:8f:cf:e3:c4:
                    15:f0:ff:a7:ab:e2:42:1b:28:a6:90:2a:d3:28:ff:
                    a8:86:8a:8d:19:b9:15:10:59:c6:09:84:7f:25:91:
                    f0:99:a2:ff:5d:a2:38:6d:0f:58:47:f6:99:99:8d:
                    31:2b:1f:09:56:2c:47:7d:75:d4:bc:c2:4c:21:a1:
                    f8:66:37:4f:02:96:bc:71:2b:79:7a:41:a7:3c:b0:
                    c0:22:b2:eb:ba:f3:81:3b:35:0e:0d:f7:e6:50:62:
                    d6:a2:a1:85:ef:fb:c0:d9:0c:8c:06:18:71:14:75:
                    ff:82:3f:1b:dc:11:5f:4f:f3:6a:f8:3a:f5:63:09:
                    4e:4f:9d:97:78:0d:fa:ce:ab:18:39:4f:7a:61:8a:
                    d1:0d:39:0f:f6:95:59:da:e9:68:61:e6:42:30:c2:
                    e6:c2:45:97:ce:1d:72:29:e4:19:3d:4b:6a:9f:ec:
                    4d:a4:0c:72:75:da:08:ec:a0:62:18:ca:58:cf:b3:
                    5a:71:42:48:1a:e3:80:22:17:b3:49:cb:46:57:9a:
                    31:87:80:60:b0:38:0a:a7:aa:1d:ad:67:f7:c0:34:
                    85:30:41:10:f9:52:f8:0e:e7:69:8d:80:33:55:ef:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4D:B7:1F:C9:88:61:62:14:8B:84:39:CF:33:49:52:F1:03:29:92
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38332e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:a3:9d:a3:2b:48:cd:8b:ba:34:39:ac:86:d0:d6:7d:15:b5:
         ef:10:4c:30:70:28:ab:7b:d0:06:ff:32:5c:a2:d5:13:49:f9:
         a5:e4:79:21:ca:a5:bc:73:4e:7c:ac:cc:ce:b1:25:4f:93:a3:
         3a:83:e7:a0:c8:53:fe:b7:c8:9d:8b:c4:de:84:23:c3:6e:cd:
         a8:89:ab:c9:a6:b3:6e:cd:56:e7:61:a2:9d:82:91:b6:d4:c7:
         2f:e2:4c:18:67:e1:bd:40:6f:44:66:08:4a:5e:9f:82:c1:2e:
         a2:0e:a0:79:bb:73:20:0b:fa:6f:93:f2:cd:eb:ba:31:4f:ab:
         3f:48:ea:a6:54:6d:f2:8e:34:d7:73:c8:ff:4b:39:f4:37:11:
         7b:55:63:66:41:6e:03:51:ea:20:5c:1a:0c:14:e3:05:ce:6b:
         0d:4c:f4:54:5c:5c:f1:5f:39:92:86:c2:1f:fa:80:2c:96:78:
         94:d0:65:90:d0:7e:99:3e:a8:c6:73:bb:01:93:fa:d6:02:53:
         fa:19:7b:9b:03:b2:e1:5a:57:ef:9a:2d:c1:d4:47:5b:7b:fa:
         1e:c9:89:d0:2a:a5:9e:ef:ce:d3:b7:bc:e9:24:85:f8:cc:45:
         3b:5e:9f:44:12:1c:6b:13:ac:54:cc:3b:14:bd:cb:90:06:1b:
         98:fc:16:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org