Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38342e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3132392e38342e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          /j2SQqQtf7VY8eD74ZqFUwYngp2JP05ueYaKhSmkWv4=
Subject key identifier:   18:CE:AB:ED:8D:C5:47:56:13:56:2B:F1:6F:65:A2:F3:3C:F9:90:79
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       75B7483B14B11C0D9A677463ED9936F83F21F313
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38342e302f32342d3234203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:05 +0000
ROA not before:           Thu 03 Mar 2022 18:47:05 +0000
ROA not after:            Thu 02 Mar 2023 18:52:05 +0000
asID:                     262393
IP address blocks:        177.129.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b7:48:3b:14:b1:1c:0d:9a:67:74:63:ed:99:36:f8:3f:21:f3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:05 2022 GMT
            Not After : Mar  2 18:52:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:27:0d:ae:fb:b7:59:01:a3:ea:c9:0b:48:fd:
                    80:1d:9f:ce:56:02:38:4c:8c:8c:a4:1d:4d:18:d9:
                    73:fc:89:b4:bc:41:6b:a9:3a:64:f5:4b:03:7f:5f:
                    eb:1f:89:42:6d:7f:c8:31:81:f4:5c:0e:2f:c5:0c:
                    22:cc:54:b5:92:9d:95:10:54:99:ec:c1:58:44:8d:
                    59:da:c7:d8:2d:8f:00:35:98:d6:c8:e6:c3:a8:10:
                    cc:06:1b:57:9b:a5:9b:c8:77:f6:61:55:5f:72:8d:
                    a7:90:d7:43:fc:ad:10:65:5e:2e:db:1a:e7:e1:10:
                    eb:29:ae:af:1d:1d:fc:7a:86:07:46:23:c6:c5:ab:
                    cb:eb:9f:57:8d:86:da:03:99:5e:31:df:56:ce:dd:
                    6f:cd:a8:03:9e:aa:bd:18:f2:52:0d:25:a4:ed:d5:
                    91:09:aa:17:40:34:28:b0:98:09:18:30:86:db:58:
                    b8:30:e2:d6:5f:19:c1:83:89:2b:40:76:cc:dd:e4:
                    bf:2e:49:1d:52:28:ce:3f:56:90:57:37:9d:e8:e6:
                    81:48:ee:bd:e1:c0:97:32:92:e6:d4:d9:9b:ce:72:
                    7a:28:dc:7e:f8:6e:48:3e:6d:c5:92:e1:52:e4:ff:
                    43:ae:bf:33:af:08:4d:38:97:04:18:83:7d:8d:2a:
                    1f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CE:AB:ED:8D:C5:47:56:13:56:2B:F1:6F:65:A2:F3:3C:F9:90:79
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38342e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:26:87:fb:ae:b8:2f:91:00:30:8d:29:3c:2e:ad:67:45:9e:
         61:55:4d:b1:9f:8b:94:4c:90:17:97:04:84:ea:24:cf:6c:9f:
         62:b9:f1:76:c3:31:ec:af:13:d6:2e:ee:53:04:05:e3:37:db:
         7a:92:c5:c5:ec:ce:26:a0:8c:54:3b:f6:8c:ad:16:05:c8:2e:
         0c:19:4e:10:5c:01:83:c4:c7:d9:1a:3c:17:46:12:6c:33:f4:
         14:c3:56:50:0d:fd:cb:d2:61:77:1d:d4:d2:3b:92:ff:79:96:
         b2:33:12:4d:2f:d7:b0:0f:84:ad:35:d2:e7:dc:32:f8:e1:53:
         79:2a:3a:7b:2f:e8:aa:1c:dd:8d:61:92:de:51:13:39:f0:72:
         f3:c9:a8:47:bb:87:7f:47:8a:a0:b4:36:57:31:b9:b8:e2:00:
         ec:58:aa:02:fc:e0:2b:26:a4:10:bf:48:29:31:d5:d2:61:36:
         4a:c4:38:3d:cf:05:e9:3b:bc:dd:e8:72:b7:21:a7:26:aa:35:
         4c:e3:79:e0:7f:82:28:7b:22:c5:cd:ad:c4:6e:93:92:e0:52:
         8b:b8:c8:ef:21:1b:a4:02:11:f7:2e:97:20:bd:26:9a:68:50:
         46:bf:ea:e0:0b:fe:49:ac:06:87:ea:39:59:5b:6b:7c:5b:56:
         f3:93:24:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org