Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38342e302f32322d3234203d3e20323632333933.roa
File:                     3137372e3132392e38342e302f32322d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          aiEskrdY/6VVK4XgXzzo6JLqR/Oj21iKw5e7V+cJqQc=
Subject key identifier:   28:6F:D3:2F:19:6D:F2:3D:02:A9:86:47:EB:DA:A4:78:50:4D:B7:2B
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       0BEC72CB5DE850A0D648875942CC64CF3373A004
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38342e302f32322d3234203d3e20323632333933.roa
Signing time:             Tue 09 Jan 2024 19:26:27 +0000
ROA not before:           Tue 09 Jan 2024 19:21:27 +0000
ROA not after:            Tue 07 Jan 2025 19:26:27 +0000
asID:                     262393
IP address blocks:        177.129.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ec:72:cb:5d:e8:50:a0:d6:48:87:59:42:cc:64:cf:33:73:a0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Jan  9 19:21:27 2024 GMT
            Not After : Jan  7 19:26:27 2025 GMT
        Subject: CN=286FD32F196DF23D02A98647EBDAA478504DB72B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:e7:2c:3c:34:6b:66:9b:b2:6a:bd:87:5c:
                    67:f1:7e:db:77:c4:fa:40:89:d6:3e:3c:14:3e:2e:
                    4b:5c:51:71:ba:fa:49:bd:1b:d9:16:88:7c:05:4c:
                    51:41:1b:d2:6b:d2:da:09:60:14:7d:0f:4a:1c:78:
                    1e:5c:f8:a4:fa:84:5b:1f:53:50:19:53:43:8c:1e:
                    c9:76:69:c7:8c:b8:d6:37:ab:11:b5:4a:27:42:00:
                    67:48:ef:b6:b1:38:bc:e4:a4:e1:76:80:6e:65:07:
                    c9:c6:e6:7e:f7:85:36:45:93:53:0f:0c:25:9f:d6:
                    98:27:aa:6c:e3:95:85:34:05:0f:a1:a3:bd:7b:0b:
                    f8:c8:e1:8c:36:3d:8e:61:37:67:0c:6f:a5:8a:83:
                    88:e5:73:c0:cb:59:79:c5:cd:0d:9c:b8:e5:bd:5c:
                    4f:ae:41:ae:0b:6e:38:2f:94:e6:48:06:69:9c:e7:
                    81:01:8e:42:de:9e:bd:74:da:04:29:c7:b9:02:52:
                    48:9d:c1:12:6c:53:ae:5f:96:25:0a:a6:42:d8:9d:
                    e2:d7:49:5a:f1:e2:6b:c3:f5:91:48:b6:8e:49:25:
                    85:a3:a4:c7:da:ee:77:24:b6:f2:09:c7:f9:d0:54:
                    40:00:00:4a:9f:8f:cb:0d:eb:56:e3:77:62:c6:9f:
                    5d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6F:D3:2F:19:6D:F2:3D:02:A9:86:47:EB:DA:A4:78:50:4D:B7:2B
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38342e302f32322d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:a6:f4:ef:2f:aa:ce:fc:e8:76:22:b4:1d:44:fa:dd:62:a4:
         34:82:d0:2b:57:8e:24:4e:de:75:26:b6:5c:a3:81:2b:06:d8:
         97:b0:fa:c2:eb:8d:ef:a0:75:32:fb:a1:2d:15:25:19:f1:8e:
         e0:c1:59:37:73:b0:2f:1c:b6:d4:0f:2b:9a:79:4e:2e:8d:d3:
         d9:a4:c1:fc:ad:76:f1:f9:1c:b7:a0:a2:da:52:37:b4:b7:69:
         44:e7:61:79:71:d8:4d:61:2d:28:a5:78:da:04:b4:95:6c:89:
         f7:0a:7b:9e:0e:3d:78:ed:e6:0e:16:97:ab:73:c6:70:36:88:
         b9:08:ae:04:37:c3:3c:7f:85:41:ce:5e:e9:0b:57:7d:ed:1c:
         4f:0a:91:19:c9:b9:8a:c7:fd:ad:16:2f:be:d3:6a:a7:c3:53:
         72:6b:bd:d6:10:81:8f:7f:71:18:6c:52:9e:61:49:b0:31:62:
         a8:a4:09:11:a0:0b:98:4e:79:fe:e9:d4:ae:65:b6:7a:a1:80:
         66:a1:fb:45:ae:06:14:4e:c1:e0:b5:c8:35:43:97:14:28:77:
         1a:3d:98:0b:00:21:0c:8c:d5:e0:da:90:ce:cf:2e:29:95:b6:
         35:49:aa:3b:a6:a1:eb:e0:6a:c1:25:34:74:ba:d7:bc:98:64:
         0c:3f:3b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org