Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          klLzSQeMkm6XYWIV1/Pp7LMd829ugad6hjBWIPbJh4k=
Subject key identifier:   7E:37:AE:EF:76:D9:D7:4B:3F:85:65:DE:E0:DC:72:57:57:E5:66:4A
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       3643FFA1D98CBECC5A97589CF73B4B48DCCC5B98
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa
Signing time:             Sat 06 Jan 2024 17:26:27 +0000
ROA not before:           Sat 06 Jan 2024 17:21:27 +0000
ROA not after:            Sat 04 Jan 2025 17:26:27 +0000
asID:                     262393
IP address blocks:        177.190.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:43:ff:a1:d9:8c:be:cc:5a:97:58:9c:f7:3b:4b:48:dc:cc:5b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Jan  6 17:21:27 2024 GMT
            Not After : Jan  4 17:26:27 2025 GMT
        Subject: CN=7E37AEEF76D9D74B3F8565DEE0DC725757E5664A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:aa:15:1f:2b:4c:94:b9:30:7a:ba:b2:6f:
                    ae:46:0f:48:a9:48:8e:31:5b:ff:75:a6:41:24:f6:
                    99:c4:44:9f:0b:91:2e:f1:3b:fb:45:18:05:11:c7:
                    37:97:a3:62:1d:0b:e5:e7:32:76:94:1e:24:33:6a:
                    d8:64:b3:35:55:4c:7c:d5:d8:37:47:9b:d1:a7:74:
                    7d:aa:53:25:72:6f:b9:33:0f:b9:31:80:f3:45:29:
                    14:86:99:bb:b1:49:94:85:d2:cb:34:43:5d:f3:b4:
                    d2:80:ea:a0:41:9e:b8:d8:21:a5:ea:c6:e8:1f:7c:
                    9d:18:43:ef:2f:c1:8b:1f:d6:86:bf:49:75:7b:b0:
                    a4:1a:b8:7e:42:56:48:9d:52:9c:77:18:7f:0d:a7:
                    fc:95:91:7a:72:88:cd:e0:79:4c:35:f9:8f:45:25:
                    2c:f4:a0:42:00:6c:f5:61:81:a8:99:e5:6b:9a:46:
                    36:81:74:a5:76:a2:e6:84:e0:bb:6e:bd:6b:e4:a5:
                    20:3e:d3:13:a9:3a:3f:76:57:e3:c6:ab:85:22:3b:
                    26:fa:c4:be:34:f1:d8:eb:b2:86:f8:e6:4f:2b:8d:
                    eb:7f:7b:41:50:49:3f:c0:0f:9d:29:a5:62:9c:83:
                    e6:d3:b1:74:5a:f9:e0:11:9b:d0:20:28:b9:0b:9e:
                    1b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:37:AE:EF:76:D9:D7:4B:3F:85:65:DE:E0:DC:72:57:57:E5:66:4A
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3139302e3234302e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:7b:ca:43:9a:a2:90:b4:dc:df:67:da:3e:a5:10:5b:52:a2:
         d9:a2:a9:66:a6:2a:dd:01:0e:3f:ba:f4:b8:2d:7a:38:ce:ce:
         f7:e7:f8:88:c6:0b:3f:ad:5e:3a:fe:30:40:1a:0c:e0:ea:4c:
         73:9c:02:94:fe:1c:56:ab:02:4e:56:f2:8d:3c:04:4d:5c:86:
         3b:47:18:92:5a:e8:da:4a:b3:e2:36:08:8e:86:30:5f:56:f9:
         b1:3e:87:43:7b:57:c6:63:f9:97:38:e5:b2:92:e8:9e:89:18:
         6b:73:91:46:19:dd:b4:ce:2b:1e:58:5b:34:fc:6f:d5:db:9b:
         71:66:ea:58:1f:07:71:b6:62:0c:11:1d:6a:24:d2:17:0a:6e:
         ef:cc:b6:5a:29:43:2c:32:a7:64:b8:3d:a0:35:fe:89:55:12:
         bd:2b:f3:4d:d2:d6:09:89:91:38:d4:ea:74:6c:e6:06:84:c2:
         4e:5c:2d:5a:fb:bd:0a:f6:dc:0c:a0:08:4a:14:b7:1b:dd:fd:
         ed:96:c7:4c:31:f2:7f:8b:5d:15:0f:ff:c6:48:34:68:1e:bf:
         3e:12:9c:f5:d7:1b:f1:62:d4:fc:ed:e9:68:21:86:f9:a8:ec:
         43:09:53:b5:ee:8e:50:be:c1:f1:e6:60:c1:a2:18:14:29:22:
         59:84:b0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org