Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3139302e3234332e302f32342d3234203d3e20323632333933.roa
File:                     3137372e3139302e3234332e302f32342d3234203d3e20323632333933.roa (raw, json)
Hash identifier:          Fc+ohETYJZU0nRLDgYek1Q22oDikiRlIvfqPD1ge52A=
Subject key identifier:   BF:78:40:78:40:BB:5B:20:B8:DB:C0:F8:52:CF:D7:96:C9:6B:96:39
Certificate issuer:       /CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
Certificate serial:       15D570C02AB6DC70BFBE6D5B73522AC470011801
Authority key identifier: F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3139302e3234332e302f32342d3234203d3e20323632333933.roa
Signing time:             Thu 05 Oct 2023 15:59:29 +0000
ROA not before:           Thu 05 Oct 2023 15:54:29 +0000
ROA not after:            Thu 03 Oct 2024 15:59:29 +0000
asID:                     262393
IP address blocks:        177.190.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d5:70:c0:2a:b6:dc:70:bf:be:6d:5b:73:52:2a:c4:70:01:18:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F02BC790AE3419CEAAFC219E1C769DE7290215AC
        Validity
            Not Before: Oct  5 15:54:29 2023 GMT
            Not After : Oct  3 15:59:29 2024 GMT
        Subject: CN=BF78407840BB5B20B8DBC0F852CFD796C96B9639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ef:42:c2:5f:b4:58:12:a4:f3:0c:f2:d9:bc:
                    8f:26:a3:78:78:84:f9:51:e0:72:41:eb:23:36:1c:
                    0f:ba:1c:e4:da:d9:9d:f6:1c:e9:ae:c2:1f:0a:f5:
                    95:c5:56:e3:03:f2:b9:a7:a2:15:99:3c:96:95:17:
                    26:2e:b8:91:95:83:4e:83:ee:59:52:cd:15:a2:f8:
                    ca:b9:15:08:a4:fc:0a:96:a0:80:29:c3:91:0d:6d:
                    fc:6a:0a:3a:f4:6d:b2:31:fd:11:d1:8e:d0:b2:91:
                    b9:3d:22:5a:a3:79:31:b3:f3:a2:3f:1b:00:c6:70:
                    2c:13:4b:58:25:b0:73:28:d4:05:8e:8b:8e:65:7b:
                    cc:2b:4c:05:e8:74:46:52:ef:94:ba:95:4f:6c:26:
                    c7:09:d3:19:67:15:6a:3c:1b:15:cd:c9:0d:4c:5e:
                    c2:3d:c7:33:35:ff:e7:ba:ec:3f:96:cd:1e:41:a5:
                    aa:a2:08:bb:f5:a3:8c:6c:cd:c5:1e:0a:57:11:48:
                    da:98:47:53:de:1c:af:70:d0:a2:05:b3:08:c5:65:
                    93:0a:7c:a1:da:7e:ca:3e:14:5e:58:c7:fe:f5:f3:
                    f5:d0:f2:6e:0b:58:95:38:29:eb:74:52:d5:a8:81:
                    11:5e:11:94:f7:49:f7:97:48:78:0f:0f:18:f9:91:
                    1a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:78:40:78:40:BB:5B:20:B8:DB:C0:F8:52:CF:D7:96:C9:6B:96:39
            X509v3 Authority Key Identifier:
                keyid:F0:2B:C7:90:AE:34:19:CE:AA:FC:21:9E:1C:76:9D:E7:29:02:15:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F02BC790AE3419CEAAFC219E1C769DE7290215AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2MTu8yhFLroGNGCqVkS2iT9a8hN4qSy9Yds45rafAKU6/0/3137372e3139302e3234332e302f32342d3234203d3e20323632333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.190.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:0a:99:2d:b0:1d:34:a8:45:cd:e5:b6:fa:fb:34:94:eb:46:
         8e:c9:c3:a8:a5:ec:19:6c:5d:4c:79:b9:2e:6f:12:80:81:0e:
         ee:9c:cc:93:f2:b0:35:32:3e:ad:c6:4a:06:86:1c:f6:34:2b:
         d6:23:21:89:15:ed:26:fb:82:fc:32:fd:ed:97:0d:5f:ca:39:
         31:0b:33:7a:ea:09:cf:83:40:a7:d7:e4:83:89:b6:60:02:d2:
         be:c3:0c:bf:66:9f:65:2d:a3:03:f1:97:5a:fc:0a:47:89:6c:
         fa:3c:a6:b8:fb:6b:9e:c8:d7:89:e6:c5:2a:6b:dd:11:73:1a:
         99:b8:b8:96:bb:92:f4:ed:b4:6d:27:ad:ab:29:d2:bc:66:b4:
         b9:f8:13:17:3d:63:4e:e2:2b:b6:e0:7c:90:d1:f1:f0:5d:c9:
         23:d5:5b:2e:8e:90:00:f4:c8:99:b0:8c:de:20:ab:05:42:1f:
         4f:c5:0f:98:94:59:0d:c7:b4:d1:e3:f1:b4:e0:4d:1e:69:bb:
         8f:f8:43:77:fc:83:0c:06:af:5b:b7:f3:06:b5:16:5e:a0:ee:
         e4:35:ee:ad:6c:84:6a:12:26:e9:8d:a9:1e:9e:69:56:57:14:
         ef:89:3b:ad:03:bd:8b:f2:65:0d:d0:e8:ef:bd:f9:65:25:4e:
         7e:8c:91:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org