Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38362e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3132392e38362e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          0TYgA04TaBhqPFir5YcCy0USiQHwfe2nGPyOr/FxUXs=
Subject key identifier:   BB:57:5E:55:2E:68:42:E9:EE:98:A7:E8:56:90:01:E4:BE:59:87:F2
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       31EE5F99F53CF1F479826E32E0172B52B45B69FB
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38362e302f32342d3234203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:05 +0000
ROA not before:           Thu 03 Mar 2022 18:47:05 +0000
ROA not after:            Thu 02 Mar 2023 18:52:05 +0000
asID:                     262393
IP address blocks:        177.129.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ee:5f:99:f5:3c:f1:f4:79:82:6e:32:e0:17:2b:52:b4:5b:69:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:05 2022 GMT
            Not After : Mar  2 18:52:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:41:0f:fb:42:e8:a7:5c:e2:3a:61:38:57:
                    80:3d:28:86:9f:a4:1c:a6:ab:48:e7:ae:a4:fe:68:
                    30:17:aa:8a:28:c9:45:03:74:ba:bf:41:90:42:2c:
                    76:ff:22:ee:a6:20:5e:de:9a:1f:51:2d:21:78:2f:
                    3b:fd:b2:b8:0d:80:76:9d:c5:f4:b9:20:da:4f:13:
                    2b:49:f6:cf:76:18:fe:7b:32:f5:58:6d:08:19:ec:
                    58:92:c1:72:02:c7:65:b5:9c:1a:3d:fa:fe:eb:21:
                    c6:d4:d9:69:87:c0:11:4c:1c:51:54:b3:63:2e:d4:
                    ec:47:9e:8a:e1:07:c9:56:44:27:7b:9e:1b:a5:3c:
                    3d:f1:54:0f:99:56:86:24:df:8b:a2:c7:4a:f7:f3:
                    e1:39:55:4d:68:65:d5:f7:64:64:07:5d:5b:df:ed:
                    90:d7:2c:9b:ef:fe:70:4e:88:53:4e:4b:9c:6e:f9:
                    98:a7:ae:af:93:c8:fc:6a:b0:31:76:ea:88:3a:f3:
                    63:03:ec:e6:ee:80:62:b4:9c:1e:c7:76:ad:23:7c:
                    ef:80:78:b0:29:d1:72:82:aa:42:db:14:80:30:ca:
                    e4:0a:ad:50:e4:71:ad:09:6b:9a:e0:c5:05:73:7b:
                    7f:1b:a4:4a:25:24:cd:d0:51:8f:ec:6a:a1:60:1e:
                    14:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:57:5E:55:2E:68:42:E9:EE:98:A7:E8:56:90:01:E4:BE:59:87:F2
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38362e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:c3:22:d8:2f:9c:91:34:e0:77:7d:e7:eb:bc:a9:9e:4c:d4:
         91:23:01:b6:6d:bd:f4:50:6b:7b:92:05:2e:71:fb:d9:1f:4e:
         76:55:c9:1c:e2:ad:d8:ba:80:12:18:44:6a:c7:32:9c:aa:72:
         68:8f:91:95:f4:72:aa:bf:77:c9:2e:93:fa:7d:f5:14:2a:d1:
         62:40:f0:00:f2:41:45:b5:52:4b:3e:57:b6:05:29:10:e9:a5:
         e6:b3:51:bc:9a:28:1d:7a:0b:d1:dd:10:84:8a:7a:ca:0c:9c:
         23:d0:64:e8:5d:49:fe:51:49:5d:cd:6b:9d:41:64:f5:ef:e9:
         c3:51:f9:37:67:33:66:00:2e:81:4b:59:e4:ad:2b:3d:aa:aa:
         c0:97:97:74:e2:e5:fb:f5:d9:60:23:7a:40:05:02:2c:8f:55:
         69:b0:d9:97:3c:c2:7f:5e:7b:03:5f:71:18:6c:54:3a:92:02:
         9a:58:7a:e0:79:73:1c:23:a1:63:6c:09:64:11:bd:71:31:f7:
         b1:8c:70:84:e3:c6:c9:74:85:a6:59:f5:66:97:e7:5e:bc:6f:
         cc:d6:2f:4b:78:29:2b:15:cf:1d:f6:71:75:30:81:56:ae:86:
         7d:f5:24:c3:2d:f5:bd:9d:7d:59:83:2d:8b:de:b7:02:39:3b:
         90:a7:9f:2e
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUMe5fmfU88fR5gm4y4BcrUrRbafswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJBNDU2NjhGRTNCQjkzMjI2OEJDOTlGQjY3MTUzMUE5
MDQ3RDYxMDAeFw0yMjAzMDMxODQ3MDVaFw0yMzAzMDIxODUyMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUNEMDQxMEZGQjQyRThBNzVD
RTIzQTYxMzg1NzgwM0QyODg2OUZBNDFDQTZBQjQ4RTdBRUE0RkU2ODMwMTdBQThB
MjhDOTQ1MDM3NEJBQkY0MTkwNDIyQzc2RkYyMkVFQTYyMDVFREU5QTFGNTEyRDIx
NzgyRjNCRkRCMkI4MEQ4MDc2OURDNUY0QjkyMERBNEYxMzJCNDlGNkNGNzYxOEZF
N0IzMkY1NTg2RDA4MTlFQzU4OTJDMTcyMDJDNzY1QjU5QzFBM0RGQUZFRUIyMUM2
RDREOTY5ODdDMDExNEMxQzUxNTRCMzYzMkVENEVDNDc5RThBRTEwN0M5NTY0NDI3
N0I5RTFCQTUzQzNERjE1NDBGOTk1Njg2MjRERjhCQTJDNzRBRjdGM0UxMzk1NTRE
Njg2NUQ1Rjc2NDY0MDc1RDVCREZFRDkwRDcyQzlCRUZGRTcwNEU4ODUzNEU0QjlD
NkVGOTk4QTdBRUFGOTNDOEZDNkFCMDMxNzZFQTg4M0FGMzYzMDNFQ0U2RUU4MDYy
QjQ5QzFFQzc3NkFEMjM3Q0VGODA3OEIwMjlEMTcyODJBQTQyREIxNDgwMzBDQUU0
MEFBRDUwRTQ3MUFEMDk2QjlBRTBDNTA1NzM3QjdGMUJBNDRBMjUyNENERDA1MThG
RUM2QUExNjAxRTE0MjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArNBBD/tC6Kdc4jphOFeAPSiGn6QcpqtI566k/mgwF6qKKMlFA3S6
v0GQQix2/yLupiBe3pofUS0heC87/bK4DYB2ncX0uSDaTxMrSfbPdhj+ezL1WG0I
GexYksFyAsdltZwaPfr+6yHG1Nlph8ARTBxRVLNjLtTsR56K4QfJVkQne54bpTw9
8VQPmVaGJN+LosdK9/PhOVVNaGXV92RkB11b3+2Q1yyb7/5wTohTTkucbvmYp66v
k8j8arAxduqIOvNjA+zm7oBitJwex3atI3zvgHiwKdFygqpC2xSAMMrkCq1Q5HGt
CWua4MUFc3t/G6RKJSTN0FGP7GqhYB4UKQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLtXXlUuaELp7pin6FaQAeS+WYfyMB8GA1UdIwQYMBaAFOKkVmj+O7kyJovJn7Zx
UxqQR9YQMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvLzJNVHU4eWhGTHJvR05H
Q3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzAvRTJBNDU2NjhGRTNCQjkz
MjI2OEJDOTlGQjY3MTUzMUE5MDQ3RDYxMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9FMkE0NTY2OEZFM0JCOTMyMjY4QkM5OUZCNjcxNTMxQTkwNDdE
NjEwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby8yTVR1OHloRkxyb0dOR0NxVmtT
MmlUOWE4aE40cVN5OVlkczQ1cmFmQUtVNi8wLzMxMzczNzJlMzEzMjM5MmUzODM2
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzMzOTMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sYFWMA0GCSqGSIb3DQEBCwUAA4IBAQCkwyLYL5yRNOB3fefrvKmeTNSRIwG2bb30
UGt7kgUucfvZH052Vckc4q3YuoASGERqxzKcqnJoj5GV9HKqv3fJLpP6ffUUKtFi
QPAA8kFFtVJLPle2BSkQ6aXms1G8migdegvR3RCEinrKDJwj0GToXUn+UUldzWud
QWT17+nDUfk3ZzNmAC6BS1nkrSs9qqrAl5d04uX79dlgI3pABQIsj1VpsNmXPMJ/
XnsDX3EYbFQ6kgKaWHrgeXMcI6FjbAlkEb1xMfexjHCE48bJdIWmWfVml+devG/M
1i9LeCkrFc8d9nF1MIFWroZ99STDLfW9nX1Zgy2L3rcCOTuQp58u
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org