Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38352e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3132392e38352e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          8UPzVzOEVjA16AOspFUo5Sxp+5cWQ57vRp9VoKKdKio=
Subject key identifier:   2B:43:C4:BD:CB:2B:A0:18:A5:94:90:2F:20:40:58:DA:1A:C4:96:F8
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       49D9025EA7C9A71B29A25B0C4EEFC2C614109DE6
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38352e302f32342d3234203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:05 +0000
ROA not before:           Thu 03 Mar 2022 18:47:05 +0000
ROA not after:            Thu 02 Mar 2023 18:52:05 +0000
asID:                     262393
IP address blocks:        177.129.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d9:02:5e:a7:c9:a7:1b:29:a2:5b:0c:4e:ef:c2:c6:14:10:9d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:05 2022 GMT
            Not After : Mar  2 18:52:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:e6:da:48:31:b9:ca:17:76:04:ae:e1:c5:
                    e8:09:23:d1:12:83:11:95:f3:a5:9f:ec:d6:ca:36:
                    72:e6:a1:a7:90:70:4b:88:2d:cf:a3:27:85:35:62:
                    03:9f:77:ac:28:aa:05:a3:f5:d3:e3:c7:9d:d7:00:
                    8c:7d:b7:8d:e2:66:14:86:0b:53:99:f3:b6:a8:21:
                    34:66:b6:29:c1:e4:4f:2a:fe:ae:dd:b8:c5:3d:5c:
                    0b:91:91:d3:5c:b1:a8:bc:a2:48:47:05:21:d0:e0:
                    66:2c:04:aa:d8:7d:c6:95:c8:cb:90:a8:c9:9f:56:
                    59:41:7a:ab:bc:55:0a:4b:a1:20:12:b6:eb:64:ce:
                    cc:f3:23:26:90:e4:10:3f:21:11:4a:0f:d6:23:eb:
                    ad:d1:fb:f7:2d:6d:2e:f6:b7:13:48:ab:5b:1a:30:
                    89:8c:77:1b:77:47:0e:d8:d0:eb:4a:3a:68:ca:ab:
                    4a:c4:c0:49:28:1a:bd:74:30:31:5d:89:8d:8d:d0:
                    18:77:7b:c8:33:46:48:8d:0c:23:54:0f:7e:18:dc:
                    85:09:ea:fd:5b:2e:d1:40:67:28:7b:b1:14:f2:c2:
                    ff:32:24:a5:81:4a:08:6e:b6:0f:c2:01:28:1e:52:
                    03:95:18:f4:c2:84:00:8c:ff:38:4a:0f:15:8d:92:
                    96:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:43:C4:BD:CB:2B:A0:18:A5:94:90:2F:20:40:58:DA:1A:C4:96:F8
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38352e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:cf:b3:84:35:70:6c:f1:e3:1c:7d:48:f3:dc:d1:00:3a:25:
         5c:1e:fb:6c:bd:4d:95:e5:65:37:ee:9e:86:8b:c2:e6:47:15:
         98:b4:c8:72:77:2b:45:9c:41:24:43:70:1c:23:d6:93:34:33:
         47:ff:a9:5e:37:2a:6a:5a:5c:ce:01:9e:10:62:5f:00:a7:b6:
         4a:9a:94:bd:7c:4f:05:8d:c7:1b:96:95:be:ba:4f:cb:f2:11:
         66:f1:89:f0:07:ed:c6:99:61:30:47:eb:38:1e:27:b5:14:41:
         ec:e8:80:77:7d:fe:75:32:82:17:4f:e2:f4:7e:fc:32:d1:08:
         be:e9:4d:54:bd:77:ed:bc:0c:bb:15:c8:4d:99:c2:a6:4e:98:
         91:3d:71:77:6b:4e:bd:ab:c5:67:4c:db:3c:a2:32:17:53:f3:
         67:ae:79:ce:0a:5a:f4:9a:58:2a:fb:25:94:3a:87:04:1b:bd:
         22:6f:9d:d8:16:cf:6c:39:8a:97:42:45:66:55:a8:28:4a:c4:
         9e:1f:d0:fa:80:a9:a4:dd:71:65:33:e9:6e:34:bf:54:63:d7:
         fa:4b:3a:99:6a:35:40:89:89:4f:21:7c:4a:59:6b:31:df:84:
         a1:e7:41:01:ed:d2:29:2e:36:01:e6:cd:59:55:21:3e:a3:b0:
         ec:40:e2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org