Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3139302e3234312e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3139302e3234312e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          YdDRlvojpJ6EjBl6qIvPpsaLlNCM4x2FckjLokkJxek=
Subject key identifier:   04:2A:4A:E7:5C:5A:DB:85:9D:9B:E2:4A:2D:48:82:F4:12:51:EC:81
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       680D6EE6FBCD156AF345BBDFB5D4CECAEB7294C8
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3139302e3234312e302f32342d3234203d3e20323632333933.roa
Signing time:             Sat 06 Jan 2024 17:26:27 +0000
ROA not before:           Sat 06 Jan 2024 17:21:27 +0000
ROA not after:            Sat 04 Jan 2025 17:26:27 +0000
asID:                     262393
IP address blocks:        177.190.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0d:6e:e6:fb:cd:15:6a:f3:45:bb:df:b5:d4:ce:ca:eb:72:94:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Jan  6 17:21:27 2024 GMT
            Not After : Jan  4 17:26:27 2025 GMT
        Subject: CN=042A4AE75C5ADB859D9BE24A2D4882F41251EC81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:69:4b:8e:ff:b4:8f:72:0f:9a:53:64:28:7a:
                    fe:8f:56:70:53:4d:78:95:3e:39:5b:18:79:0f:11:
                    83:8c:af:9c:b8:99:c8:b2:b7:8c:5a:ff:87:e5:d2:
                    8b:78:b4:2d:49:71:57:13:c7:75:a1:41:e4:11:92:
                    11:f4:69:08:8d:64:ba:56:73:12:44:8a:a6:69:48:
                    8c:e1:51:59:3a:48:3d:8c:f9:2d:b7:f2:af:5b:cd:
                    4b:d8:ed:f5:db:d6:94:9b:2e:dc:fd:ae:f7:d2:27:
                    88:c8:e4:43:82:b7:64:65:19:86:6d:88:7b:d1:9b:
                    80:6c:5b:0e:af:63:6b:f8:fa:16:57:58:ab:e0:a7:
                    66:5b:a0:c9:e4:8b:48:a8:1c:2d:79:b7:c1:e0:f5:
                    50:e6:20:53:d6:5c:9b:6f:7b:f2:48:d3:2b:dd:a9:
                    06:bf:64:95:4f:b5:b7:20:1f:60:ee:5b:48:83:71:
                    84:2b:0e:ee:33:14:2c:97:bf:a2:96:8a:14:12:0d:
                    47:84:10:65:a4:2c:50:a7:70:e1:67:f5:11:82:a3:
                    f5:e7:26:cd:c2:75:9e:4b:85:24:52:f2:fb:51:4f:
                    af:a1:d9:cb:ef:37:1f:f6:29:31:ff:ac:6e:a4:e3:
                    df:a4:5a:f0:94:db:b5:12:2e:e8:3d:0d:91:45:a1:
                    4e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2A:4A:E7:5C:5A:DB:85:9D:9B:E2:4A:2D:48:82:F4:12:51:EC:81
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3139302e3234312e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:63:3e:6b:e8:8d:e3:fd:6c:94:e1:4e:3f:4e:f4:73:70:bf:
         f5:80:5a:aa:6f:88:1a:e6:df:01:7a:b4:f3:f1:80:3c:51:35:
         d6:41:63:1f:8d:89:71:d1:87:1b:de:e5:78:25:8b:0c:9d:6f:
         26:63:bc:47:e1:da:10:20:12:fb:23:5a:9a:6e:cb:2f:ab:67:
         bd:12:4f:a8:0f:11:21:44:1e:91:c9:38:91:62:f8:93:52:3a:
         b4:43:c5:42:a8:07:c3:d5:a2:4a:de:cb:71:51:0c:4e:2b:0d:
         b9:2a:27:dd:e3:53:3b:5c:a6:2f:16:58:f6:18:0a:88:32:81:
         47:90:5a:76:6b:bc:53:ba:ba:f3:5e:09:1d:1c:88:67:6a:76:
         81:55:d2:5b:11:4a:81:5c:4b:01:de:de:0e:77:0f:94:33:49:
         2f:e0:a0:ec:47:e0:cd:f5:38:cc:f6:b3:d9:2b:24:b1:6c:5b:
         67:ec:f6:40:5e:f9:99:4a:ea:7e:7e:82:58:e4:c8:59:3a:04:
         41:8f:77:c4:65:c7:9b:24:b6:42:ba:b1:b9:47:14:34:f6:f6:
         f4:2e:1c:d7:f2:7f:1e:85:8a:8b:0f:ab:23:4a:0f:92:c1:d6:
         3b:03:c1:75:23:62:84:85:b0:64:ce:9e:50:8b:d4:0b:b7:08:
         31:91:33:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org