Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3133382e302f32342d3234203d3e203532353438.roa
File:                     3137372e38352e3133382e302f32342d3234203d3e203532353438.roa (raw, json)
Hash identifier:          QD0nk4v7L59dAuTCykJBVjXHQC55kdLNEz9t2fo4wFE=
Subject key identifier:   12:BD:7D:A6:F3:9F:21:52:BB:89:B2:35:01:D5:2D:48:4F:36:2F:E1
Certificate issuer:       /CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Certificate serial:       42735A6655697AB17B04DC3806652DFB92A875FD
Authority key identifier: EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3133382e302f32342d3234203d3e203532353438.roa
Signing time:             Tue 25 Jul 2023 21:14:49 +0000
ROA not before:           Tue 25 Jul 2023 21:09:49 +0000
ROA not after:            Tue 23 Jul 2024 21:14:49 +0000
asID:                     52548
IP address blocks:        177.85.138.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:73:5a:66:55:69:7a:b1:7b:04:dc:38:06:65:2d:fb:92:a8:75:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0DD34006E37436756618ADA322C16C0AFC6970
        Validity
            Not Before: Jul 25 21:09:49 2023 GMT
            Not After : Jul 23 21:14:49 2024 GMT
        Subject: CN=12BD7DA6F39F2152BB89B23501D52D484F362FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0f:d5:91:52:58:6b:6e:9d:23:e8:4e:d5:eb:
                    4b:29:24:83:f1:02:a6:ea:bb:f4:5a:a9:d5:8f:7b:
                    ee:8f:31:2b:b2:07:c8:17:6f:f9:55:4e:5c:bb:c1:
                    e2:b3:06:70:bd:10:a0:e3:7b:90:47:24:66:ad:24:
                    c6:2a:30:e9:dd:b5:03:94:ab:40:d6:3c:e4:0c:4d:
                    91:d3:38:a0:13:f2:32:30:fc:f7:d1:d3:06:66:23:
                    e3:83:f6:38:e0:27:7c:a1:df:73:5b:5d:dd:d5:25:
                    3a:d3:81:89:e6:c0:15:b4:6d:cf:56:75:78:fb:b9:
                    4e:82:4f:13:28:0d:51:ae:f4:dc:b4:e7:ac:0d:37:
                    c9:e8:ad:6e:ca:f8:f6:8a:36:64:5c:c5:8e:a8:25:
                    ce:8a:9d:6f:09:37:52:eb:21:db:87:ba:3b:79:c6:
                    c3:d1:47:f4:21:67:81:6f:2e:0f:a0:72:ed:63:a6:
                    13:c0:72:00:19:a7:8b:17:2d:8a:89:c7:b6:b0:48:
                    71:e3:88:9e:39:63:3a:86:41:28:56:ad:14:b7:ea:
                    fa:81:41:28:80:5f:60:f5:94:ee:7a:96:28:1f:83:
                    b8:28:f3:42:01:3a:55:50:da:fd:65:08:55:7d:74:
                    f4:ef:db:e9:64:13:7a:e9:e7:54:91:3a:40:a8:ac:
                    09:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BD:7D:A6:F3:9F:21:52:BB:89:B2:35:01:D5:2D:48:4F:36:2F:E1
            X509v3 Authority Key Identifier:
                keyid:EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/EE0DD34006E37436756618ADA322C16C0AFC6970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3133382e302f32342d3234203d3e203532353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:b6:98:ab:9d:96:e9:c4:7e:41:a2:bb:4f:fc:21:24:68:9b:
         d6:b5:0a:5a:5d:5f:43:c0:8f:1e:17:9f:76:e5:61:4b:77:6c:
         06:d9:80:cf:57:2b:69:0b:6e:56:bf:fa:18:4d:8b:38:c0:ec:
         09:d5:3b:33:88:83:08:dd:08:a8:39:06:54:14:19:dc:b8:04:
         88:ac:13:12:64:d1:8f:c9:c0:1e:ac:0b:03:1b:ec:bd:5c:46:
         e0:52:6b:89:03:f8:f6:c0:39:0d:d9:b7:dc:03:fe:cd:01:e3:
         7c:94:04:2e:c4:41:74:57:16:5c:3d:19:c2:18:65:5e:6a:f8:
         bf:63:48:f5:ff:a6:3d:b3:d4:77:c3:25:e4:d8:83:7f:1c:3d:
         e1:d5:57:f6:38:d3:82:71:d1:3b:03:5d:00:71:f9:11:50:c7:
         19:34:3e:8f:b1:85:a1:53:05:86:25:e0:ab:94:59:a4:07:8a:
         9e:38:75:e6:55:9e:b5:78:40:07:34:9d:9d:ab:ea:65:ae:a0:
         23:2c:2b:2d:07:a5:89:83:a4:6d:8a:bb:66:f0:64:fe:82:f2:
         e3:44:c5:95:b7:91:3e:0d:71:12:97:fd:65:dc:44:55:53:2d:
         ee:06:20:29:c4:23:77:33:93:c4:14:9b:04:ec:a0:33:0a:de:
         e2:f8:66:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:41:41 2025 by rpki-client