Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134322e302f32342d3234203d3e203532353438.roa
File:                     3137372e38352e3134322e302f32342d3234203d3e203532353438.roa (raw, json)
Hash identifier:          F/axu/rnmb/KzKj35+V0Cx8FMNnp+XC3qbvL3wmzNe8=
Subject key identifier:   B3:6D:3A:88:64:66:98:97:23:1C:7C:AB:8E:4F:06:51:29:E2:64:2D
Certificate issuer:       /CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Certificate serial:       77924D6289494CB945A44792D7D41320539911DB
Authority key identifier: EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134322e302f32342d3234203d3e203532353438.roa
Signing time:             Tue 25 Jul 2023 21:14:51 +0000
ROA not before:           Tue 25 Jul 2023 21:09:51 +0000
ROA not after:            Tue 23 Jul 2024 21:14:51 +0000
asID:                     52548
IP address blocks:        177.85.142.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:92:4d:62:89:49:4c:b9:45:a4:47:92:d7:d4:13:20:53:99:11:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0DD34006E37436756618ADA322C16C0AFC6970
        Validity
            Not Before: Jul 25 21:09:51 2023 GMT
            Not After : Jul 23 21:14:51 2024 GMT
        Subject: CN=B36D3A8864669897231C7CAB8E4F065129E2642D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3e:3b:ed:5c:19:09:fb:bf:39:25:98:79:ba:
                    26:34:f8:5a:01:dc:a8:d1:25:31:9c:c6:9e:fd:48:
                    69:6a:11:4f:10:00:d3:ec:6d:92:57:4b:9b:a1:c8:
                    80:d9:a2:f4:e0:86:cd:22:29:72:76:11:5c:0d:1a:
                    59:09:2b:af:85:47:0a:52:24:bc:8a:68:7a:a8:22:
                    3b:c5:0b:fb:32:02:b5:83:77:56:c9:2c:2a:73:95:
                    d0:0d:4d:b3:14:d7:da:f0:4c:a6:c7:7b:5e:c3:7b:
                    3d:90:ab:41:df:2f:9d:83:49:ce:a2:dd:0e:8e:f3:
                    97:99:40:51:fd:d2:d6:37:07:b3:8d:7a:ab:f1:bb:
                    3d:60:e6:32:b7:c8:60:82:cf:b5:fb:65:1d:0d:5e:
                    f6:12:6f:a6:b0:c6:ad:15:a5:58:99:c6:c4:ab:e7:
                    2f:aa:d7:8b:d7:4a:20:48:26:df:81:14:f0:d3:72:
                    54:f8:ed:fc:b6:37:f7:64:16:6e:84:18:03:b6:e8:
                    f4:34:bd:e2:1e:91:38:d0:09:e6:a1:a9:f3:de:40:
                    e9:8c:b9:86:fa:46:dd:db:ec:33:38:6d:c5:f0:6b:
                    19:b8:6e:71:af:b1:91:eb:69:8b:d8:ff:9b:e5:4a:
                    33:47:36:68:65:03:fa:34:02:a0:2b:de:81:3e:60:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:6D:3A:88:64:66:98:97:23:1C:7C:AB:8E:4F:06:51:29:E2:64:2D
            X509v3 Authority Key Identifier:
                keyid:EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/EE0DD34006E37436756618ADA322C16C0AFC6970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134322e302f32342d3234203d3e203532353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:f5:83:d3:1f:50:84:37:cf:60:56:09:79:3f:d2:fc:f4:df:
         e5:76:bd:e8:48:65:7c:3d:31:9f:bc:84:95:74:55:7a:a9:43:
         42:08:2f:b5:e5:b9:07:dd:5d:e8:4e:d4:9d:4b:72:d8:2d:f8:
         86:c3:22:7f:39:07:54:90:56:8f:3b:92:73:bd:2d:d7:90:30:
         c5:8f:68:33:cd:fe:81:a3:99:88:3e:b1:4d:22:5b:f6:0a:66:
         32:3a:7a:d1:ee:58:6c:3b:be:5d:ff:2b:4e:40:65:83:72:31:
         00:ea:cf:e2:b1:b5:01:a2:75:07:e9:15:db:0a:42:1a:d5:96:
         d4:84:02:7a:f4:aa:b5:9c:e3:8a:73:2d:6c:96:3d:03:e5:8d:
         17:92:6b:3f:6a:92:5a:5c:1f:80:98:fa:21:a3:13:61:65:37:
         48:08:ee:f8:76:48:fd:1b:82:2c:3b:b0:ae:c1:59:c6:03:22:
         56:fe:58:3f:ec:ed:32:ac:26:e8:27:9a:ee:97:6c:ad:fd:87:
         83:30:0d:7b:19:09:8d:04:b4:ea:21:56:7e:42:54:ed:ba:f2:
         ee:f0:87:53:01:f5:d2:9a:d9:cd:8e:7e:08:f7:50:81:6e:e5:
         50:99:c7:55:24:c1:3d:03:8c:8c:dc:c5:ba:f2:2e:1b:29:e7:
         fc:e9:a7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org