Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134302e302f32342d3234203d3e203532353438.roa
File:                     3137372e38352e3134302e302f32342d3234203d3e203532353438.roa (raw, json)
Hash identifier:          LAKnU4+tE0FwgNlwVi9qcaNw+tel2a6t1e4ZWfQZctA=
Subject key identifier:   A9:B8:34:52:FB:FE:EB:4C:E9:E4:70:69:98:EA:42:68:50:FC:8D:37
Certificate issuer:       /CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Certificate serial:       1114C18F851FB0CB8B17C0FDB4ADFBD0C7F3B55E
Authority key identifier: EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134302e302f32342d3234203d3e203532353438.roa
Signing time:             Tue 25 Jul 2023 21:14:50 +0000
ROA not before:           Tue 25 Jul 2023 21:09:50 +0000
ROA not after:            Tue 23 Jul 2024 21:14:50 +0000
asID:                     52548
IP address blocks:        177.85.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:14:c1:8f:85:1f:b0:cb:8b:17:c0:fd:b4:ad:fb:d0:c7:f3:b5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0DD34006E37436756618ADA322C16C0AFC6970
        Validity
            Not Before: Jul 25 21:09:50 2023 GMT
            Not After : Jul 23 21:14:50 2024 GMT
        Subject: CN=A9B83452FBFEEB4CE9E4706998EA426850FC8D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:30:69:8c:d8:02:cb:0a:f1:6e:98:31:44:
                    b6:26:71:53:62:b4:75:71:fe:c3:9a:72:0f:4b:14:
                    66:1f:a6:19:e4:b7:a9:89:e9:1d:ee:f9:9d:64:d3:
                    d4:8b:17:b4:34:da:87:61:77:49:36:e0:ac:5a:93:
                    c0:3b:bf:a1:b2:69:eb:73:f3:c4:04:14:2e:a1:5a:
                    98:7f:ad:79:28:84:7b:9c:f9:3f:f0:97:02:32:78:
                    44:57:11:bc:6d:ae:44:0d:85:5a:31:1c:3c:8c:42:
                    34:d6:70:b2:de:3c:6c:01:ee:7c:87:80:7a:b6:e9:
                    96:94:2a:2d:3f:66:27:5c:bc:4b:44:90:95:62:04:
                    fd:b9:70:5c:25:b0:c6:78:50:09:9b:80:59:6f:e9:
                    51:4f:fb:40:28:d9:5d:60:3d:4b:ea:38:d5:45:1e:
                    a4:fb:4f:f3:d4:6f:a2:f8:0e:10:39:ed:d0:87:aa:
                    55:2d:33:a0:c8:78:3c:50:38:77:cf:dd:ee:f3:aa:
                    97:14:0a:75:6d:5d:fd:23:5e:96:27:bf:29:26:ae:
                    8b:f7:bb:76:b3:ac:a4:f1:58:cb:8d:a7:9f:dc:11:
                    58:0b:d9:a6:e9:75:46:d5:dc:8c:14:0d:e5:57:ea:
                    8a:a1:2d:f9:6b:aa:56:cf:54:75:28:8b:05:0e:d1:
                    a5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B8:34:52:FB:FE:EB:4C:E9:E4:70:69:98:EA:42:68:50:FC:8D:37
            X509v3 Authority Key Identifier:
                keyid:EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/EE0DD34006E37436756618ADA322C16C0AFC6970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134302e302f32342d3234203d3e203532353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:6b:01:55:b3:42:69:6b:1e:96:cb:23:2b:9c:ef:76:57:18:
         45:a7:09:9a:42:13:24:d3:0d:dd:78:02:1b:37:e9:d6:32:15:
         63:2f:f9:40:42:e2:9a:44:91:1f:9b:f0:e0:ec:90:a7:3d:f6:
         80:c5:aa:68:0c:9f:c3:8b:e0:8e:fd:7a:e7:c8:55:f4:30:53:
         8e:51:40:06:1c:e1:07:be:8d:09:d7:82:cc:ed:ec:dd:4b:63:
         bd:0b:26:11:27:0d:ab:4c:3e:01:ef:90:2a:7a:90:96:4d:5c:
         67:ee:dd:05:c1:d7:e8:fa:c5:e6:e2:a8:23:14:42:3d:3b:8e:
         3b:18:25:a3:3c:6b:4f:1f:c8:9e:e0:22:5a:94:02:57:de:3a:
         eb:20:e7:96:bf:22:e5:e2:29:68:24:b4:af:89:c9:57:4b:9b:
         72:49:19:4e:27:a0:49:0d:c9:2a:03:88:6d:8e:25:d7:0a:98:
         87:77:cf:ac:ef:a0:19:68:c7:99:e9:cd:06:af:da:8b:5c:56:
         92:80:c0:15:fd:d5:2d:10:21:ff:19:85:4f:a5:d3:41:7f:bc:
         8f:84:d9:ff:98:a3:9f:86:d6:36:c0:4c:69:98:68:79:ce:8e:
         c3:7e:4a:da:21:0a:a4:fc:57:16:35:22:1b:2a:f2:79:94:1f:
         e4:aa:bb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org