Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/3137372e38352e3136352e302f32342d3234203d3e203532373433.roa
File:                     3137372e38352e3136352e302f32342d3234203d3e203532373433.roa (raw, json)
Hash identifier:          wl7/wyI14kO3ARX/MoOThltYGDOCzqD4iz11gAJjlx4=
Subject key identifier:   A4:0D:18:73:3B:EE:DC:CC:41:7F:B5:BA:54:8C:CA:E9:A7:29:4D:AC
Certificate issuer:       /CN=E9FEBF829E2ECB5541D2087C87590E86CC57C518
Certificate serial:       6EBC8CE5D8FCACE8FFE158FFA9212230BA9E6560
Authority key identifier: E9:FE:BF:82:9E:2E:CB:55:41:D2:08:7C:87:59:0E:86:CC:57:C5:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9FEBF829E2ECB5541D2087C87590E86CC57C518.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/3137372e38352e3136352e302f32342d3234203d3e203532373433.roa
Signing time:             Tue 06 Feb 2024 11:35:22 +0000
ROA not before:           Tue 06 Feb 2024 11:30:22 +0000
ROA not after:            Tue 04 Feb 2025 11:35:22 +0000
asID:                     52743
IP address blocks:        177.85.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:bc:8c:e5:d8:fc:ac:e8:ff:e1:58:ff:a9:21:22:30:ba:9e:65:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9FEBF829E2ECB5541D2087C87590E86CC57C518
        Validity
            Not Before: Feb  6 11:30:22 2024 GMT
            Not After : Feb  4 11:35:22 2025 GMT
        Subject: CN=A40D18733BEEDCCC417FB5BA548CCAE9A7294DAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:6e:a7:b6:1c:0a:6b:82:f8:a3:b4:94:52:
                    dc:24:16:cf:53:af:4c:65:ba:71:e2:1d:33:cd:04:
                    30:19:e5:27:98:13:e3:ec:21:5d:4f:a0:b5:9e:78:
                    5e:21:42:c7:af:85:cd:41:9d:dc:e2:a0:aa:f6:d4:
                    42:5b:db:5e:73:ff:5c:6f:87:c7:c0:e2:8a:18:0e:
                    94:ea:41:10:0d:87:65:3d:03:32:e2:66:1d:5c:29:
                    cf:ca:ff:c7:d8:a4:28:09:71:03:36:d3:c4:2d:79:
                    34:f2:e2:44:da:f0:05:67:ae:b2:25:d3:73:e0:65:
                    e2:d6:cf:3c:73:a5:3c:3f:c6:ce:82:1b:c7:81:c7:
                    f5:79:57:e1:8a:53:70:ed:0b:d2:a2:b8:f3:0d:c9:
                    37:50:c2:40:3c:f6:5a:3c:ae:14:89:6f:c6:dd:0d:
                    b1:09:f1:29:af:62:a5:72:27:f1:11:d0:9f:99:e2:
                    4a:74:bf:19:43:96:d2:89:20:5f:4f:cc:84:72:83:
                    ef:88:10:61:93:57:81:ee:a9:2c:cb:0b:f6:7a:33:
                    93:92:e8:0a:db:d1:84:d9:40:7e:1a:d2:79:01:70:
                    29:38:0a:1c:3f:3a:ed:49:2d:94:96:8b:df:8e:b2:
                    9c:95:e3:98:20:92:5d:92:dd:58:78:8d:8d:69:6a:
                    c4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0D:18:73:3B:EE:DC:CC:41:7F:B5:BA:54:8C:CA:E9:A7:29:4D:AC
            X509v3 Authority Key Identifier:
                keyid:E9:FE:BF:82:9E:2E:CB:55:41:D2:08:7C:87:59:0E:86:CC:57:C5:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/E9FEBF829E2ECB5541D2087C87590E86CC57C518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9FEBF829E2ECB5541D2087C87590E86CC57C518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/3137372e38352e3136352e302f32342d3234203d3e203532373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:bf:2a:d0:0e:c3:37:8d:de:fd:03:c3:72:5b:d0:45:07:fd:
         d7:71:fa:67:ff:26:a3:b4:0b:2f:2e:3e:d6:94:2d:e2:2c:b0:
         de:0e:08:84:37:66:3d:e8:a3:f9:ad:24:9c:a4:3b:3b:99:11:
         92:7c:64:f4:4c:bc:66:92:53:f9:34:6a:d1:4c:06:46:69:b1:
         4e:f4:8e:f7:d0:8a:bf:27:61:0c:94:e3:19:41:70:0f:ad:a3:
         67:96:4e:9d:cd:2d:7d:b6:52:19:c1:cd:88:be:60:23:11:7d:
         47:e2:34:95:35:9b:95:98:db:47:36:ce:64:05:b8:05:8b:49:
         d0:74:35:82:62:f6:2a:89:03:75:0d:bf:00:fa:40:ee:b3:ee:
         e7:ba:e4:b4:4a:a0:c7:44:9e:b3:d6:d1:b5:f6:8f:4d:26:ed:
         d6:e5:b9:36:e4:87:f5:08:07:5a:e5:cb:69:de:3b:27:e5:1d:
         a4:27:e9:9b:6f:3f:fc:c5:61:d2:c8:04:e1:61:45:17:dc:48:
         60:30:85:f5:fa:b5:43:3f:bf:ae:60:2a:72:4c:1d:5b:ae:32:
         74:64:67:9c:a9:2c:4f:d5:bb:e2:2b:bf:79:32:a7:36:bd:da:
         e8:4f:6e:4e:8d:50:88:0f:72:d8:51:af:6c:23:1f:0c:31:64:
         79:eb:13:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org