Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38342e302f32332d3233203d3e20323632333933.roa
File:                     3137372e3132392e38342e302f32332d3233203d3e20323632333933.roa (raw, json)
Hash identifier:          UZRdaGotngFHDSrXPLl/V3hdGVdqfxPTqwsapQpZ5bg=
Subject key identifier:   51:C5:18:04:4D:65:EF:B9:57:6F:E7:36:72:CF:9A:CE:E8:3E:D6:02
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       08EF76F3957F63487E6C6977CAF44FF8342D0919
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38342e302f32332d3233203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:04 +0000
ROA not before:           Thu 03 Mar 2022 18:47:04 +0000
ROA not after:            Thu 02 Mar 2023 18:52:04 +0000
asID:                     262393
IP address blocks:        177.129.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ef:76:f3:95:7f:63:48:7e:6c:69:77:ca:f4:4f:f8:34:2d:09:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:04 2022 GMT
            Not After : Mar  2 18:52:04 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:09:53:b1:7a:89:b1:6b:3a:66:82:70:78:
                    e0:eb:56:35:46:24:92:13:a9:bc:13:a6:02:92:e1:
                    5c:8b:1c:58:f7:64:72:45:13:b8:a0:f6:da:5c:97:
                    0e:84:7e:a0:ac:2e:26:7d:c8:a9:54:c0:17:50:03:
                    71:07:34:90:9d:27:39:12:de:94:5f:1c:2c:21:87:
                    8d:7a:72:1e:f8:d5:7a:15:01:b6:da:2e:92:60:2d:
                    9a:ab:ca:82:9f:1a:c1:fa:ab:5d:cf:56:35:e1:da:
                    e9:26:2d:13:85:60:01:0e:2f:d0:36:f4:e9:03:73:
                    36:e2:8c:0c:03:3e:df:07:c8:0b:fb:cc:20:bf:8e:
                    db:c2:c9:88:d6:99:7b:cf:c4:02:71:e1:de:4f:31:
                    5a:e7:e0:ec:32:00:7c:c9:f3:d8:09:56:3e:ea:46:
                    4a:ea:9c:1f:9c:ad:b2:52:95:a4:7c:14:d0:ab:11:
                    fb:75:18:19:0c:1e:c2:6e:b2:b9:cf:59:b8:3f:9d:
                    5e:bf:df:d1:5e:58:1b:19:eb:2f:b0:99:c4:8c:05:
                    32:df:5f:b9:3b:7e:87:13:b8:8a:88:66:1a:14:e8:
                    60:d1:e7:23:8d:c3:33:b6:e7:3c:d3:33:67:77:0f:
                    45:20:c0:1a:7f:f1:8d:1e:87:a0:b7:a3:f0:34:b5:
                    5e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C5:18:04:4D:65:EF:B9:57:6F:E7:36:72:CF:9A:CE:E8:3E:D6:02
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38342e302f32332d3233203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:aa:d1:af:23:ec:09:4a:83:db:81:cf:5e:93:77:94:ac:d0:
         e7:c3:93:15:97:6f:e8:90:f0:89:6d:5e:49:f2:86:ec:f3:78:
         db:2d:34:36:ba:a0:98:cb:e0:71:41:f6:58:f9:64:20:c8:80:
         2b:ae:78:4a:a9:3e:3f:e0:04:e0:58:ee:53:74:42:9c:d5:1c:
         92:25:49:ba:31:ad:ad:ee:c5:92:0b:8f:fc:9a:66:b7:b0:f7:
         04:26:1b:44:2b:6d:5b:9a:c1:92:06:27:e3:da:6b:e8:f8:9f:
         38:29:46:db:8f:97:15:37:81:ba:68:c8:10:74:ab:fc:ff:09:
         30:a6:de:59:8b:5c:8b:38:98:4e:17:31:68:67:2d:88:22:13:
         45:8b:1b:9d:67:f1:c6:2b:fa:f6:4d:47:be:88:6c:cb:e6:98:
         92:99:95:e0:a9:2f:72:e1:54:bb:d3:20:2b:ae:46:fa:c5:9a:
         ca:41:38:13:09:05:a0:73:4e:b2:1d:4a:1a:40:86:95:18:c8:
         ea:5e:2d:41:4c:94:d0:9c:39:e7:89:ed:96:01:ce:60:0a:cd:
         11:34:51:66:f6:59:d8:fc:bb:6d:c4:8d:0f:00:4b:5d:13:2c:
         bd:9a:6f:53:1d:e5:77:47:07:cb:a2:d4:85:d6:2b:68:0f:7f:
         c8:49:c1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org