Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3133372e302f32342d3234203d3e203532353438.roa
File:                     3137372e38352e3133372e302f32342d3234203d3e203532353438.roa (raw, json)
Hash identifier:          Js+o//TdEeXCmqFwQ/cJ/9NdpoZtz8Nf+Z39oJrwqFw=
Subject key identifier:   00:F1:EF:78:9B:75:EA:5A:6B:3A:BB:EE:C6:16:EF:92:A9:00:2A:C5
Certificate issuer:       /CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Certificate serial:       59DBDCBBD493112A89DD367533CA267C09021BF7
Authority key identifier: EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3133372e302f32342d3234203d3e203532353438.roa
Signing time:             Tue 25 Jul 2023 21:14:49 +0000
ROA not before:           Tue 25 Jul 2023 21:09:49 +0000
ROA not after:            Tue 23 Jul 2024 21:14:49 +0000
asID:                     52548
IP address blocks:        177.85.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:db:dc:bb:d4:93:11:2a:89:dd:36:75:33:ca:26:7c:09:02:1b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0DD34006E37436756618ADA322C16C0AFC6970
        Validity
            Not Before: Jul 25 21:09:49 2023 GMT
            Not After : Jul 23 21:14:49 2024 GMT
        Subject: CN=00F1EF789B75EA5A6B3ABBEEC616EF92A9002AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:93:01:59:21:5b:87:1c:2e:a3:73:ab:77:d3:
                    48:67:5b:dc:bd:7b:a7:5b:54:ac:db:f6:3f:64:c5:
                    99:f7:3a:3f:ae:63:b4:55:26:59:4c:29:55:20:53:
                    56:2f:fe:66:a3:14:64:27:cb:d0:0b:ba:4e:ec:be:
                    b8:62:bd:64:73:21:7e:2a:54:d8:db:52:a8:cd:77:
                    59:ce:ec:ee:92:7d:0c:4c:50:0e:d2:0e:dd:70:fd:
                    0f:ae:ab:70:38:d9:b2:63:4b:9d:25:16:61:e2:ad:
                    d2:b6:c8:61:38:14:13:37:44:36:47:68:a8:28:97:
                    28:e1:08:de:30:18:13:cf:33:92:21:48:09:e1:19:
                    e5:ea:9a:fc:00:8a:68:00:4a:1e:fe:0b:f8:69:0a:
                    d6:57:c8:3f:32:a6:48:e2:67:c6:e7:ae:7c:2e:d1:
                    92:f7:f3:ce:22:0c:fe:e6:01:21:d4:18:8f:08:c5:
                    64:03:95:02:60:56:ab:21:a9:bb:7a:80:d0:de:05:
                    f6:a9:fd:9e:3b:8d:52:3a:10:07:40:53:f5:0c:4a:
                    ac:f1:2a:8a:ba:ae:28:56:ee:9e:a1:2d:54:4a:58:
                    bb:9c:c4:fa:0b:02:80:ff:b1:8c:c0:3e:7a:9e:d8:
                    64:e5:93:32:fe:1f:b5:ee:a6:69:3a:06:8a:47:fb:
                    bf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F1:EF:78:9B:75:EA:5A:6B:3A:BB:EE:C6:16:EF:92:A9:00:2A:C5
            X509v3 Authority Key Identifier:
                keyid:EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/EE0DD34006E37436756618ADA322C16C0AFC6970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3133372e302f32342d3234203d3e203532353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:22:e0:8b:80:39:61:47:b1:f7:ab:6d:03:96:60:4e:b8:a6:
         7e:8f:3b:c3:bd:df:aa:f2:4e:3a:98:83:f6:e8:d1:54:b8:87:
         32:fe:99:ac:f2:a1:9a:b4:66:22:60:44:e3:c4:c9:6f:af:54:
         fc:41:f9:68:5c:f7:26:a8:cb:57:0e:84:9a:be:d0:d1:98:e5:
         c5:4a:11:07:e3:b6:b6:f6:29:01:2a:f2:20:ad:6b:ee:48:ad:
         c1:a3:55:88:18:36:35:7b:4f:85:27:f8:b1:c8:00:da:bb:70:
         0f:a1:86:c8:44:48:11:3b:24:93:5e:e0:79:f3:31:09:a3:f5:
         5d:d2:95:21:e9:1b:eb:b5:5d:ae:89:56:65:a4:52:3b:81:cd:
         9f:cd:7e:fb:82:7f:b3:9d:9c:24:43:98:85:54:5b:0e:50:5d:
         8c:a9:00:74:2f:94:11:cc:85:f2:09:f5:73:44:d4:60:1f:f3:
         6e:3c:bc:4b:aa:f4:fe:03:63:fa:aa:72:20:73:08:9c:3a:96:
         f6:5e:6f:82:6c:25:da:0d:77:c4:8f:f0:72:1c:6a:28:fe:3f:
         a4:65:8b:0e:2e:38:97:ca:63:8f:53:f6:b8:f3:3f:de:fc:ef:
         39:3f:15:be:35:da:65:15:81:cb:4c:87:27:8c:d1:35:7c:cb:
         3d:ef:26:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org