Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3139302e3234302e302f32322d3232203d3e20323632333933.roa
File:                     3137372e3139302e3234302e302f32322d3232203d3e20323632333933.roa (raw, json)
Hash identifier:          T9+hIGPmXpqi1fm10O/QPRdzUaVic+Ext5Sy7WVWO60=
Subject key identifier:   F7:28:DB:73:79:63:7E:A1:62:1C:27:F1:3B:D3:EC:F7:51:5F:D1:BF
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       797EAE596F4F84A2C098F08FF307303B88207B93
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3139302e3234302e302f32322d3232203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:03 +0000
ROA not before:           Thu 03 Mar 2022 18:47:03 +0000
ROA not after:            Thu 02 Mar 2023 18:52:03 +0000
asID:                     262393
IP address blocks:        177.190.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7e:ae:59:6f:4f:84:a2:c0:98:f0:8f:f3:07:30:3b:88:20:7b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:03 2022 GMT
            Not After : Mar  2 18:52:03 2023 GMT
        Subject: CN=3082010A0282010100A38069D1103DEFEA4517C30FB2B5456478AA5AB367B949AC3660E656D331B7B11EB95A7F10DC23F032F6202CACE35E76AD3FD8D3DB3E81F3ED301480453C1651A377FA37151EBDAE1401024F1B4E17C8346F39A01AA10DCC9221BC1AD98A3536734894C921EBBC3EEC10F868F08D6AD18AFF707A5A5D0BE3A42D23BA53C10519E3B1E2F280C1CD9C9F6579828AB582856C8D885578E18673279FC5D8556987EEF6291688C7883D92C57186CEF0D3C2589B74BF3AD2EE108D34F5BA34CBE107D6A4F4D39C620A9C607BE76AC53BA855749EF935AD315B90CCC5F373053B92079F43416D5984CD640DBEC017F10665CF356459664B1693E4EB0E5C1DFB51D6D2910203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:80:69:d1:10:3d:ef:ea:45:17:c3:0f:b2:b5:
                    45:64:78:aa:5a:b3:67:b9:49:ac:36:60:e6:56:d3:
                    31:b7:b1:1e:b9:5a:7f:10:dc:23:f0:32:f6:20:2c:
                    ac:e3:5e:76:ad:3f:d8:d3:db:3e:81:f3:ed:30:14:
                    80:45:3c:16:51:a3:77:fa:37:15:1e:bd:ae:14:01:
                    02:4f:1b:4e:17:c8:34:6f:39:a0:1a:a1:0d:cc:92:
                    21:bc:1a:d9:8a:35:36:73:48:94:c9:21:eb:bc:3e:
                    ec:10:f8:68:f0:8d:6a:d1:8a:ff:70:7a:5a:5d:0b:
                    e3:a4:2d:23:ba:53:c1:05:19:e3:b1:e2:f2:80:c1:
                    cd:9c:9f:65:79:82:8a:b5:82:85:6c:8d:88:55:78:
                    e1:86:73:27:9f:c5:d8:55:69:87:ee:f6:29:16:88:
                    c7:88:3d:92:c5:71:86:ce:f0:d3:c2:58:9b:74:bf:
                    3a:d2:ee:10:8d:34:f5:ba:34:cb:e1:07:d6:a4:f4:
                    d3:9c:62:0a:9c:60:7b:e7:6a:c5:3b:a8:55:74:9e:
                    f9:35:ad:31:5b:90:cc:c5:f3:73:05:3b:92:07:9f:
                    43:41:6d:59:84:cd:64:0d:be:c0:17:f1:06:65:cf:
                    35:64:59:66:4b:16:93:e4:eb:0e:5c:1d:fb:51:d6:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:28:DB:73:79:63:7E:A1:62:1C:27:F1:3B:D3:EC:F7:51:5F:D1:BF
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3139302e3234302e302f32322d3232203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:23:85:08:49:f3:dc:10:bf:f5:2c:b9:08:13:17:10:b0:c8:
         48:2f:fb:cb:6b:cb:19:12:b0:46:29:19:f6:7f:f3:8c:db:b9:
         02:4a:da:61:75:01:5a:7a:c7:45:6a:37:b7:2c:45:7e:ed:21:
         c9:39:b9:3d:e2:b6:dc:1a:52:cd:44:68:62:17:e0:9e:c2:62:
         8f:f4:9b:53:47:dd:cf:25:6a:82:32:8a:d3:be:39:2d:0e:33:
         9b:3d:2e:09:07:3a:2d:e5:ae:9a:e6:24:0a:41:5a:85:af:2c:
         4e:e8:dc:39:f7:89:7e:fa:c8:53:86:23:1e:24:05:78:ba:24:
         8e:ca:d5:a4:83:2b:6a:6d:19:94:22:50:18:1c:4f:bc:ad:ea:
         31:86:3b:43:ad:21:8a:8e:63:cb:d7:80:af:7b:53:e4:10:c7:
         33:57:86:33:68:b5:a1:5d:0f:90:00:eb:33:92:96:61:f9:d2:
         ae:19:b8:a7:d9:ca:6f:8c:d7:ef:3d:6d:47:ea:59:0a:4f:a5:
         27:ff:b7:c2:e0:aa:85:ac:3c:b3:48:5b:7e:de:65:89:62:aa:
         ed:05:e6:c4:6a:fc:81:72:64:3b:28:3d:fd:55:71:5e:38:2d:
         94:23:52:1d:3a:dd:60:8f:3b:b6:d7:cb:71:7b:cb:fc:f0:e3:
         9d:77:8c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org