Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38362e302f32332d3233203d3e20323632333933.roa
File:                     3137372e3132392e38362e302f32332d3233203d3e20323632333933.roa (raw, json)
Hash identifier:          /qoCVqJ7f83bJWwJs1gQrcA308iwfluQ0IZoVAMve1A=
Subject key identifier:   17:96:8F:1B:12:15:94:FD:76:BB:BC:1F:65:5D:D6:F6:14:06:75:5F
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       706355D0AF515CA170B4609AAA0DB1B083009F63
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38362e302f32332d3233203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:05 +0000
ROA not before:           Thu 03 Mar 2022 18:47:05 +0000
ROA not after:            Thu 02 Mar 2023 18:52:05 +0000
asID:                     262393
IP address blocks:        177.129.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:63:55:d0:af:51:5c:a1:70:b4:60:9a:aa:0d:b1:b0:83:00:9f:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:05 2022 GMT
            Not After : Mar  2 18:52:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ff:5b:d0:ca:08:68:f9:75:00:d3:41:23:27:
                    e0:70:47:f5:14:ee:97:b3:4c:31:0f:0e:a6:11:89:
                    99:c5:3d:7d:51:d3:80:ae:01:d4:c1:bb:d5:3a:5a:
                    34:5c:b1:97:33:59:70:a3:92:90:2e:c7:03:5f:f1:
                    ad:57:f9:7f:7f:95:57:80:ff:ae:cc:51:00:23:f3:
                    f0:bd:6c:33:06:ac:17:3e:7f:ae:2a:97:80:92:e7:
                    c8:ad:93:24:c5:28:e4:45:31:79:2e:16:d7:f3:01:
                    07:1d:86:7d:12:82:e1:ae:74:c8:20:ff:94:f5:d2:
                    9f:f1:d1:60:88:6a:76:ce:3d:35:2c:eb:f7:c4:d8:
                    36:71:8d:ae:42:e8:fd:d4:43:53:64:6b:71:cc:bf:
                    dc:bd:91:78:3c:cc:a1:bd:56:81:5e:ed:27:67:20:
                    e9:ee:e6:2f:17:4b:5b:bf:7d:32:6b:b0:5a:43:e5:
                    7d:58:60:4b:98:c0:fc:e7:50:16:1f:d8:56:0b:3b:
                    79:48:84:49:bc:a1:2a:1a:f4:7f:4b:fc:5a:d3:3f:
                    8e:93:57:13:17:01:ac:8c:18:5c:38:10:fa:ec:b5:
                    30:d8:41:49:ea:2c:54:0c:9f:29:d9:36:af:f7:f6:
                    ef:8e:24:b2:c2:c9:79:1f:06:c1:01:b1:a4:60:1b:
                    f0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:96:8F:1B:12:15:94:FD:76:BB:BC:1F:65:5D:D6:F6:14:06:75:5F
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38362e302f32332d3233203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:50:ff:8f:37:3b:38:e1:31:c2:75:c4:6d:66:8c:85:72:cc:
         de:31:b3:4a:ae:88:16:dd:03:89:ad:30:63:88:b2:7e:4a:d5:
         79:c6:77:fa:8b:82:08:fa:98:46:05:a6:f2:ea:fd:6f:f2:b0:
         47:56:5f:2b:fb:16:ba:14:dc:c7:b6:e8:07:8e:64:82:f1:c1:
         6b:0e:14:fa:a7:30:e3:b8:b0:eb:66:62:67:50:b7:b2:a1:cb:
         d0:a3:34:c4:60:41:77:f3:6b:e4:7f:5e:7b:3a:10:e4:9e:d2:
         94:29:f1:96:38:86:ca:fa:cc:65:3b:6c:1d:dc:a3:8e:52:b5:
         a0:40:9f:4e:d0:17:11:d3:bb:76:d0:26:47:8c:69:bb:4b:5c:
         a0:66:32:54:f5:fa:20:02:d0:22:83:0c:44:80:06:70:ea:d0:
         8f:28:9d:8f:ad:45:c4:b2:ca:e8:28:fa:80:bf:4a:f7:67:80:
         38:db:d6:93:2c:76:38:8a:13:e5:a3:46:98:37:cd:d4:5f:d0:
         9e:5c:de:bb:d3:ed:ab:39:ca:e7:89:50:59:74:22:45:cd:ac:
         e2:0c:44:66:77:10:2c:9d:69:25:bc:41:51:40:13:95:b2:4b:
         93:d4:79:39:6c:cf:41:52:e4:25:c9:f2:dd:26:db:04:79:d8:
         79:95:aa:1b
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUcGNV0K9RXKFwtGCaqg2xsIMAn2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJBNDU2NjhGRTNCQjkzMjI2OEJDOTlGQjY3MTUzMUE5
MDQ3RDYxMDAeFw0yMjAzMDMxODQ3MDVaFw0yMzAzMDIxODUyMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjRGRjVCRDBDQTA4NjhGOTc1
MDBEMzQxMjMyN0UwNzA0N0Y1MTRFRTk3QjM0QzMxMEYwRUE2MTE4OTk5QzUzRDdE
NTFEMzgwQUUwMUQ0QzFCQkQ1M0E1QTM0NUNCMTk3MzM1OTcwQTM5MjkwMkVDNzAz
NUZGMUFENTdGOTdGN0Y5NTU3ODBGRkFFQ0M1MTAwMjNGM0YwQkQ2QzMzMDZBQzE3
M0U3RkFFMkE5NzgwOTJFN0M4QUQ5MzI0QzUyOEU0NDUzMTc5MkUxNkQ3RjMwMTA3
MUQ4NjdEMTI4MkUxQUU3NEM4MjBGRjk0RjVEMjlGRjFEMTYwODg2QTc2Q0UzRDM1
MkNFQkY3QzREODM2NzE4REFFNDJFOEZERDQ0MzUzNjQ2QjcxQ0NCRkRDQkQ5MTc4
M0NDQ0ExQkQ1NjgxNUVFRDI3NjcyMEU5RUVFNjJGMTc0QjVCQkY3RDMyNkJCMDVB
NDNFNTdENTg2MDRCOThDMEZDRTc1MDE2MUZEODU2MEIzQjc5NDg4NDQ5QkNBMTJB
MUFGNDdGNEJGQzVBRDMzRjhFOTM1NzEzMTcwMUFDOEMxODVDMzgxMEZBRUNCNTMw
RDg0MTQ5RUEyQzU0MEM5RjI5RDkzNkFGRjdGNkVGOEUyNEIyQzJDOTc5MUYwNkMx
MDFCMUE0NjAxQkYwOEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtP9b0MoIaPl1ANNBIyfgcEf1FO6Xs0wxDw6mEYmZxT19UdOArgHU
wbvVOlo0XLGXM1lwo5KQLscDX/GtV/l/f5VXgP+uzFEAI/PwvWwzBqwXPn+uKpeA
kufIrZMkxSjkRTF5LhbX8wEHHYZ9EoLhrnTIIP+U9dKf8dFgiGp2zj01LOv3xNg2
cY2uQuj91ENTZGtxzL/cvZF4PMyhvVaBXu0nZyDp7uYvF0tbv30ya7BaQ+V9WGBL
mMD851AWH9hWCzt5SIRJvKEqGvR/S/xa0z+Ok1cTFwGsjBhcOBD67LUw2EFJ6ixU
DJ8p2Tav9/bvjiSywsl5HwbBAbGkYBvwiwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FBeWjxsSFZT9dru8H2Vd1vYUBnVfMB8GA1UdIwQYMBaAFOKkVmj+O7kyJovJn7Zx
UxqQR9YQMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJNVHU4eWhGTHJvR05H
Q3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzAvRTJBNDU2NjhGRTNCQjkz
MjI2OEJDOTlGQjY3MTUzMUE5MDQ3RDYxMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMkE0NTY2OEZFM0JCOTMyMjY4QkM5OUZCNjcxNTMxQTkwNDdE
NjEwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yTVR1OHloRkxyb0dOR0NxVmtT
MmlUOWE4aE40cVN5OVlkczQ1cmFmQUtVNi8wLzMxMzczNzJlMzEzMjM5MmUzODM2
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzMzOTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
sYFWMA0GCSqGSIb3DQEBCwUAA4IBAQAIUP+PNzs44THCdcRtZoyFcszeMbNKrogW
3QOJrTBjiLJ+StV5xnf6i4II+phGBaby6v1v8rBHVl8r+xa6FNzHtugHjmSC8cFr
DhT6pzDjuLDrZmJnULeyocvQozTEYEF382vkf157OhDkntKUKfGWOIbK+sxlO2wd
3KOOUrWgQJ9O0BcR07t20CZHjGm7S1ygZjJU9fogAtAigwxEgAZw6tCPKJ2PrUXE
ssroKPqAv0r3Z4A429aTLHY4ihPlo0aYN83UX9CeXN670+2rOcrniVBZdCJFzazi
DERmdxAsnWklvEFRQBOVskuT1Hk5bM9BUuQlyfLdJtsEedh5laob
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org