Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3133392e302f32342d3332203d3e203532353438.roa
File:                     3137372e38352e3133392e302f32342d3332203d3e203532353438.roa (raw, json)
Hash identifier:          eXtN+/9v4pgUT2KMYlwsenNLWNz4GXOnaMKHzDp+IJk=
Subject key identifier:   36:02:A4:0C:D9:FD:43:86:56:ED:F4:D1:F2:48:CD:49:34:11:88:98
Certificate issuer:       /CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Certificate serial:       06F3D769F122917BA45A28FC7FD3A5FBCF438953
Authority key identifier: EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3133392e302f32342d3332203d3e203532353438.roa
Signing time:             Fri 28 Jul 2023 14:34:26 +0000
ROA not before:           Fri 28 Jul 2023 14:29:26 +0000
ROA not after:            Fri 26 Jul 2024 14:34:26 +0000
asID:                     52548
IP address blocks:        177.85.139.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f3:d7:69:f1:22:91:7b:a4:5a:28:fc:7f:d3:a5:fb:cf:43:89:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0DD34006E37436756618ADA322C16C0AFC6970
        Validity
            Not Before: Jul 28 14:29:26 2023 GMT
            Not After : Jul 26 14:34:26 2024 GMT
        Subject: CN=3602A40CD9FD438656EDF4D1F248CD4934118898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ef:8f:35:68:e9:19:aa:13:a8:9e:57:45:b0:
                    87:5f:ea:c5:bc:81:e7:bf:13:83:fa:c3:35:d6:49:
                    de:23:f5:62:93:84:2d:6f:49:00:cc:d3:45:2e:5d:
                    6a:c7:33:c1:6a:be:b8:3b:29:b4:65:04:ca:a0:e1:
                    71:0d:23:bf:5c:6e:a7:2f:cc:a4:2f:8e:41:ad:63:
                    da:78:77:18:81:5f:f9:04:ad:73:e2:80:18:74:49:
                    57:5e:94:dd:de:d3:1a:b7:74:ad:a5:c0:ef:12:03:
                    43:3e:ab:b8:40:dc:c4:7b:07:cf:f0:90:9f:c9:9e:
                    e2:2f:f1:eb:8a:1c:5f:27:c3:2c:0c:bd:37:93:4c:
                    ba:28:01:4f:00:29:5a:db:66:88:0a:02:02:0e:cc:
                    32:82:59:3b:cb:89:37:b3:9c:e6:9c:8d:28:65:e0:
                    09:bf:79:32:86:50:5d:9b:d0:42:ef:0c:0b:8f:17:
                    26:b3:33:f2:6f:7b:0a:5a:32:ce:41:40:0c:d2:d6:
                    24:ed:86:d1:39:6f:1f:6c:e1:fb:8a:0b:bd:26:c1:
                    f1:c1:c5:a2:93:3b:ba:1b:21:51:cb:02:59:b9:1c:
                    4e:2f:df:05:86:e2:dc:12:75:a4:91:ea:65:ea:f1:
                    31:b4:70:bb:37:a6:f9:d8:aa:5b:c3:00:46:f1:04:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:02:A4:0C:D9:FD:43:86:56:ED:F4:D1:F2:48:CD:49:34:11:88:98
            X509v3 Authority Key Identifier:
                keyid:EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/EE0DD34006E37436756618ADA322C16C0AFC6970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3133392e302f32342d3332203d3e203532353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ec:41:cd:03:b0:c4:ec:46:1d:80:b7:c4:33:48:c2:ea:1b:
         2c:40:01:49:b1:5b:76:b7:07:32:92:9f:ae:b8:ce:70:c9:1e:
         de:26:80:f9:00:a6:60:86:65:a7:4d:af:8b:2b:14:83:6e:e7:
         7e:e6:32:86:c3:1c:f9:2e:0d:ce:67:83:12:e6:29:35:3b:8d:
         1a:bf:dd:1e:a6:d9:9e:1d:45:c8:8f:43:26:45:05:ca:a9:26:
         3e:f9:db:bf:08:37:01:5d:4f:77:84:88:75:7a:47:df:ec:5b:
         35:31:22:5b:30:a2:ce:1c:1b:37:92:0c:c3:40:71:dc:c0:3f:
         44:b2:18:b0:5f:4b:a7:87:01:67:28:90:6c:ee:61:24:82:fd:
         87:7b:73:f0:0a:b0:6e:a8:a3:ea:33:92:80:13:46:ee:06:7e:
         ef:2a:b8:32:6f:c6:42:c8:a3:ae:d3:54:f8:ca:bf:37:b0:f9:
         3f:8b:a1:a9:c9:22:c1:ae:2b:09:f5:8c:f8:f9:d8:fc:e6:88:
         b6:f2:31:5c:f3:19:57:34:46:2b:4b:33:9f:79:f5:6d:3d:e5:
         d9:3b:7d:d5:ad:cd:0b:9c:95:26:4c:f0:9f:10:eb:9b:a4:46:
         b5:1c:5e:f7:d9:e1:29:19:d6:05:9e:65:17:1b:ca:5b:dd:f3:
         6c:6d:61:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:59 2025 by rpki-client