Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3139302e3234302e302f32332d3233203d3e20323632333933.roa
File:                     3137372e3139302e3234302e302f32332d3233203d3e20323632333933.roa (raw, json)
Hash identifier:          0VtAjkh9dEDBSEtHz0kFAYoaacWFSRVzlEiALx1aO84=
Subject key identifier:   FA:2D:F1:1E:98:FE:C4:59:4C:83:51:B8:E5:6B:43:17:EE:A1:AE:BA
Certificate issuer:       /CN=E2A45668FE3BB932268BC99FB671531A9047D610
Certificate serial:       4175A617B66D45897CEA6D5F4BA3A373958D018A
Authority key identifier: E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3139302e3234302e302f32332d3233203d3e20323632333933.roa
Signing time:             Thu 03 Mar 2022 18:52:01 +0000
ROA not before:           Thu 03 Mar 2022 18:47:01 +0000
ROA not after:            Thu 02 Mar 2023 18:52:01 +0000
asID:                     262393
IP address blocks:        177.190.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:75:a6:17:b6:6d:45:89:7c:ea:6d:5f:4b:a3:a3:73:95:8d:01:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A45668FE3BB932268BC99FB671531A9047D610
        Validity
            Not Before: Mar  3 18:47:01 2022 GMT
            Not After : Mar  2 18:52:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:c0:ca:8d:2b:d7:be:51:51:e0:77:9a:b6:b9:
                    ff:89:e6:d3:10:0c:46:d5:c9:83:26:75:f2:a0:cb:
                    9b:34:8f:4e:a8:52:58:21:29:8c:dd:05:80:f8:e1:
                    f7:5d:d6:5f:cb:04:14:09:ac:ef:34:74:db:30:07:
                    84:87:e7:37:77:4c:94:29:66:e3:42:3b:c4:52:91:
                    07:c9:b3:09:43:5e:fc:9e:92:1c:b6:4b:ed:6a:3f:
                    2c:92:20:31:cf:96:bd:23:b5:7c:e2:f3:97:08:1c:
                    d7:58:6b:82:b2:6b:30:1d:8d:dc:6e:f9:8f:49:12:
                    4d:c5:98:c7:8c:e2:5c:7d:3f:79:d0:ff:f0:cc:98:
                    cf:5e:52:35:77:a7:af:f7:bf:52:81:9f:a7:0c:0e:
                    7c:25:ca:0c:7f:88:98:99:a9:9c:77:4f:72:39:c7:
                    35:fe:fe:12:7b:76:c5:f8:74:37:b0:a6:79:67:ac:
                    af:df:58:1e:86:ae:bf:83:26:25:2f:58:f4:55:e8:
                    d8:97:2f:14:fd:41:bc:6f:c5:45:45:d4:0e:08:48:
                    38:b1:14:58:fe:f6:78:00:1b:ca:af:0b:c7:bd:eb:
                    83:b4:42:cd:b4:e3:37:1f:fe:91:57:13:76:5d:f5:
                    6e:af:4c:09:3e:15:c0:7a:25:91:77:35:56:71:b9:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2D:F1:1E:98:FE:C4:59:4C:83:51:B8:E5:6B:43:17:EE:A1:AE:BA
            X509v3 Authority Key Identifier:
                keyid:E2:A4:56:68:FE:3B:B9:32:26:8B:C9:9F:B6:71:53:1A:90:47:D6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/E2A45668FE3BB932268BC99FB671531A9047D610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E2A45668FE3BB932268BC99FB671531A9047D610.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3139302e3234302e302f32332d3233203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:f5:bc:f0:52:47:d5:10:f3:d5:49:30:db:8d:a4:a1:52:18:
         ec:14:b0:a5:db:2d:9e:13:f9:b2:b7:de:b2:d5:ec:5f:b8:85:
         9d:e5:83:43:a4:9d:ac:cd:74:f1:18:ce:16:4e:bc:db:12:77:
         a8:91:ae:27:50:29:e4:bd:2b:70:69:0a:63:94:81:11:cb:34:
         73:70:9d:08:9e:17:ab:87:bb:ac:63:c0:6d:1a:d3:c1:51:ed:
         08:70:a9:a4:f7:74:d0:2a:b0:54:28:b8:f9:c9:07:4b:62:03:
         da:1a:8c:7a:39:96:83:78:05:22:67:1b:ae:a6:92:b4:d5:79:
         cd:48:c8:3b:a7:0e:75:7e:89:7e:2a:51:f6:e3:6d:53:8a:10:
         3e:04:3c:97:d6:2a:6c:39:d6:c9:f9:2f:4c:32:d2:8c:d3:f7:
         52:3f:86:be:ea:e2:f3:13:cf:e9:54:bb:3c:79:56:f6:3d:87:
         6f:df:62:6e:8f:88:a4:eb:b1:db:8d:9c:a1:c4:46:1b:23:da:
         1b:f0:26:9b:57:50:49:5a:8d:5f:ed:6f:9e:6d:a5:b1:ce:ff:
         5b:c8:b1:b8:80:ed:21:0c:2e:47:8a:da:d9:8d:9d:cd:8a:0c:
         f2:52:04:8c:8d:33:63:01:38:6c:d5:d9:c2:cc:72:c7:b9:c3:
         49:41:78:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org