Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38372e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3132392e38372e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          G28VOQMbfj2z7z+1A4mhbXv6MJiS1f46GjOw7S45qV4=
Subject key identifier:   3C:E0:62:60:28:26:BD:92:D1:60:A2:5F:92:6D:B9:96:F4:0F:6C:62
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       2F1C040806DD27ADA43AB2DD6B614AE016C0E6B1
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38372e302f32342d3234203d3e20323632333933.roa
Signing time:             Sat 05 Mar 2022 15:38:44 +0000
ROA not before:           Sat 05 Mar 2022 15:33:44 +0000
ROA not after:            Sat 04 Mar 2023 15:38:44 +0000
asID:                     262393
IP address blocks:        177.129.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1c:04:08:06:dd:27:ad:a4:3a:b2:dd:6b:61:4a:e0:16:c0:e6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Mar  5 15:33:44 2022 GMT
            Not After : Mar  4 15:38:44 2023 GMT
        Subject: CN=3CE062602826BD92D160A25F926DB996F40F6C62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a8:52:bd:ab:2a:67:ab:93:e9:88:41:8c:8c:
                    b7:da:36:49:29:18:26:bf:00:19:15:b4:59:a2:c7:
                    81:b7:eb:a0:6d:fa:e1:37:50:b5:26:57:32:4d:5f:
                    cb:a3:fb:7e:7d:04:ac:6d:ae:64:28:9d:83:d4:96:
                    c8:40:bd:32:0d:ad:a7:20:a9:39:0c:0a:32:98:50:
                    92:98:c8:18:ad:3c:c1:c2:61:d1:7b:c0:1c:24:3f:
                    e3:eb:0a:94:89:2a:d4:b0:88:94:8a:71:bb:e8:32:
                    06:5b:b4:2d:6f:94:35:57:f6:48:b7:d2:07:cc:dd:
                    b3:65:6d:89:ac:8e:51:0c:8e:26:e5:e3:64:00:2f:
                    74:b7:f0:b9:2b:5d:b7:89:53:90:c9:e3:61:3b:12:
                    29:5b:05:06:06:a0:4b:51:92:79:7c:4f:9d:7c:cb:
                    f9:61:f1:21:57:d4:55:2c:9b:57:8a:6d:63:4f:9b:
                    87:6f:f9:32:77:8c:21:20:6f:bd:c5:66:f1:ba:0d:
                    b7:c0:03:18:72:e9:37:de:cf:dc:62:e8:61:b3:47:
                    bc:c4:96:00:88:a5:ff:4f:5b:ff:70:69:34:b7:83:
                    5a:fe:26:e8:16:a3:a3:69:dc:02:5a:f3:29:bd:69:
                    24:38:ed:94:0b:95:cf:af:7a:63:10:f0:c1:9d:20:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E0:62:60:28:26:BD:92:D1:60:A2:5F:92:6D:B9:96:F4:0F:6C:62
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3132392e38372e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ca:ad:fa:83:36:a0:ac:c3:7c:36:29:f2:b7:b7:4e:60:91:
         e0:79:0e:07:6e:1f:2c:e0:13:d1:ab:46:61:35:6a:f8:72:3c:
         55:9f:54:e6:5c:29:72:a0:75:12:c4:5c:c2:44:e4:19:e4:0b:
         5c:c2:2b:fb:d3:65:e9:3a:4c:1a:f8:5b:1a:0c:d3:b1:f5:98:
         d2:7b:3a:a5:9e:e6:28:f3:93:4c:6f:46:7f:12:1b:2d:21:3b:
         84:c5:68:45:89:b0:b2:15:52:36:b4:41:28:6a:d1:e5:81:d2:
         fc:dd:a8:da:af:28:31:e7:56:18:bf:fb:8d:c3:32:ea:b3:8e:
         99:1e:cf:2d:35:2d:e0:5f:9d:31:31:52:f7:14:fc:23:1d:e4:
         67:a1:6c:92:72:23:c7:0d:28:90:93:ae:0a:b1:88:5e:1d:fa:
         dd:92:4a:18:64:51:46:3d:9c:d3:7d:f4:37:49:5f:09:a2:cc:
         16:f3:aa:ee:7d:b9:50:09:c3:69:13:de:c6:17:60:17:3f:7c:
         af:e2:0f:9c:36:77:ab:f3:64:f3:53:c2:61:e3:a0:54:32:76:
         c0:59:7e:a3:a2:1a:d1:46:c9:14:17:86:94:ab:dd:12:5d:ef:
         dc:48:66:72:a9:ba:5b:20:04:f2:94:c8:a6:48:3b:f5:10:7f:
         fe:bf:9a:26
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULxwECAbdJ62kOrLda2FK4BbA5rEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjAyQkM3OTBBRTM0MTlDRUFBRkMyMTlFMUM3NjlERTcy
OTAyMTVBQzAeFw0yMjAzMDUxNTMzNDRaFw0yMzAzMDQxNTM4NDRaMDMxMTAvBgNV
BAMTKDNDRTA2MjYwMjgyNkJEOTJEMTYwQTI1RjkyNkRCOTk2RjQwRjZDNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkqFK9qypnq5PpiEGMjLfaNkkp
GCa/ABkVtFmix4G366Bt+uE3ULUmVzJNX8uj+359BKxtrmQonYPUlshAvTINracg
qTkMCjKYUJKYyBitPMHCYdF7wBwkP+PrCpSJKtSwiJSKcbvoMgZbtC1vlDVX9ki3
0gfM3bNlbYmsjlEMjibl42QAL3S38LkrXbeJU5DJ42E7EilbBQYGoEtRknl8T518
y/lh8SFX1FUsm1eKbWNPm4dv+TJ3jCEgb73FZvG6DbfAAxhy6Tfez9xi6GGzR7zE
lgCIpf9PW/9waTS3g1r+JugWo6Np3AJa8ym9aSQ47ZQLlc+vemMQ8MGdIFFBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUPOBiYCgmvZLRYKJfkm25lvQPbGIwHwYDVR0j
BBgwFoAU8CvHkK40Gc6q/CGeHHad5ykCFawwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk1UdTh5aEZMcm9HTkdDcVZrUzJpVDlhOGhONHFTeTlZZHM0NXJhZkFL
VTYvMC9GMDJCQzc5MEFFMzQxOUNFQUFGQzIxOUUxQzc2OURFNzI5MDIxNUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YwMkJDNzkwQUUzNDE5Q0VB
QUZDMjE5RTFDNzY5REU3MjkwMjE1QUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJNVHU4eWhGTHJvR05HQ3FWa1MyaVQ5YThoTjRxU3k5WWRzNDVyYWZBS1U2LzAv
MzEzNzM3MmUzMTMyMzkyZTM4MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxgVcwDQYJKoZIhvcNAQELBQADggEBADfKrfqD
NqCsw3w2KfK3t05gkeB5DgduHyzgE9GrRmE1avhyPFWfVOZcKXKgdRLEXMJE5Bnk
C1zCK/vTZek6TBr4WxoM07H1mNJ7OqWe5ijzk0xvRn8SGy0hO4TFaEWJsLIVUja0
QShq0eWB0vzdqNqvKDHnVhi/+43DMuqzjpkezy01LeBfnTExUvcU/CMd5GehbJJy
I8cNKJCTrgqxiF4d+t2SShhkUUY9nNN99DdJXwmizBbzqu59uVAJw2kT3sYXYBc/
fK/iD5w2d6vzZPNTwmHjoFQydsBZfqOiGtFGyRQXhpSr3RJd79xIZnKpulsgBPKU
yKZIO/UQf/6/miY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org