Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134312e302f32342d3332203d3e203532353438.roa
File:                     3137372e38352e3134312e302f32342d3332203d3e203532353438.roa (raw, json)
Hash identifier:          YuVSIbdj9LrbI9ShdES89Jo8yXrX4aSdC+Tv2hUROdE=
Subject key identifier:   D8:76:2D:6A:1A:4A:BE:0E:45:66:D0:C6:01:CE:06:BF:3F:C2:5E:05
Certificate issuer:       /CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Certificate serial:       6215C6DBC72900912708BF110FBE6BC01304299D
Authority key identifier: EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134312e302f32342d3332203d3e203532353438.roa
Signing time:             Fri 28 Jul 2023 14:34:53 +0000
ROA not before:           Fri 28 Jul 2023 14:29:53 +0000
ROA not after:            Fri 26 Jul 2024 14:34:53 +0000
asID:                     52548
IP address blocks:        177.85.141.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:15:c6:db:c7:29:00:91:27:08:bf:11:0f:be:6b:c0:13:04:29:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0DD34006E37436756618ADA322C16C0AFC6970
        Validity
            Not Before: Jul 28 14:29:53 2023 GMT
            Not After : Jul 26 14:34:53 2024 GMT
        Subject: CN=D8762D6A1A4ABE0E4566D0C601CE06BF3FC25E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7b:e5:06:ec:37:e2:27:be:cc:02:d9:ab:c8:
                    68:0f:17:88:99:09:50:c8:e5:3f:cf:8a:d5:e9:8a:
                    11:c8:dc:f2:34:49:93:f3:86:0d:3d:37:90:cc:45:
                    cf:1f:f3:94:66:d1:63:ba:d4:2c:1a:ae:36:3b:3a:
                    d6:bb:42:8e:26:f2:eb:3a:06:61:e3:50:bf:e5:b4:
                    f9:8e:e5:18:3b:76:f1:7b:71:04:58:e8:52:c9:51:
                    7b:c4:e3:86:c9:fd:85:77:a7:17:35:03:a3:3d:b4:
                    05:14:14:82:b7:69:22:7b:6e:63:95:9f:2f:9d:35:
                    db:f5:2d:71:40:67:63:ac:07:65:f6:1a:e2:b5:be:
                    01:40:78:0f:6e:3a:b1:cd:c1:7b:87:6b:6e:15:2b:
                    96:a0:4f:91:36:44:ee:3c:70:e8:bd:ee:80:ac:75:
                    73:e8:df:ed:d0:19:eb:94:34:1d:aa:42:62:0d:d6:
                    6a:7f:26:92:a6:e4:0d:f7:5e:02:32:af:b5:b1:11:
                    d1:58:26:a7:ca:97:b1:dc:78:af:5e:94:07:50:f5:
                    79:51:2f:6e:41:5e:22:c6:d1:b5:c2:82:12:f4:ae:
                    50:de:07:d4:de:f3:01:7b:f8:14:46:2f:03:c6:d0:
                    d9:25:f9:5b:64:b8:5c:c8:11:18:93:58:3d:09:00:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:76:2D:6A:1A:4A:BE:0E:45:66:D0:C6:01:CE:06:BF:3F:C2:5E:05
            X509v3 Authority Key Identifier:
                keyid:EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/EE0DD34006E37436756618ADA322C16C0AFC6970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134312e302f32342d3332203d3e203532353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:ef:f1:ca:a8:d4:e5:26:7c:c2:52:23:cf:4e:f1:bd:81:cd:
         75:6e:a7:16:68:71:b2:79:46:2f:65:bd:e3:f5:c1:2f:75:f2:
         aa:bb:ce:a0:23:91:26:e0:cb:7b:bf:19:46:bb:70:e0:42:a3:
         78:9d:49:bb:1f:b5:0a:22:31:44:80:59:da:eb:5b:39:5b:1f:
         d6:bb:97:22:81:a5:8f:c8:3f:c9:fa:b3:18:1d:0d:c6:77:ea:
         9d:f6:95:cf:b2:3e:db:b2:26:1c:04:28:17:f8:59:1e:60:f1:
         87:3b:99:bd:de:df:f2:27:1c:17:ab:12:de:2a:e1:f9:f1:33:
         61:68:fd:c8:3a:b2:2b:5c:47:1b:c1:90:d7:96:71:21:c4:d4:
         01:9d:2b:86:03:77:a7:0e:89:1d:df:cb:2c:95:72:33:da:ba:
         48:a7:46:ee:6e:4e:53:9b:33:3c:6d:cc:c2:cf:e3:5a:e6:b0:
         b6:ce:c1:45:15:01:d2:be:db:4b:99:01:3d:d3:21:fe:b6:a5:
         9e:2d:34:ab:94:73:0c:c5:0e:ac:4e:39:6e:b8:02:39:4e:8c:
         a1:73:51:90:00:69:bc:bf:e3:78:3c:84:2f:de:1b:03:96:b1:
         94:a5:a0:06:c6:cc:6f:d8:9e:19:d6:b4:52:42:12:21:1a:83:
         b3:ee:08:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org