Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134322e302f32342d3332203d3e203532353438.roa
File:                     3137372e38352e3134322e302f32342d3332203d3e203532353438.roa (raw, json)
Hash identifier:          UXy3w3EyDr5Oos73UdCU7eHXV0l/bhxqfW1Lp4jwfFU=
Subject key identifier:   98:0D:87:FF:77:80:23:66:2A:C9:DE:C8:1D:09:B2:03:97:87:AD:B7
Certificate issuer:       /CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Certificate serial:       631179B20C539BBCA692AF38C15042F192D89ADE
Authority key identifier: EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134322e302f32342d3332203d3e203532353438.roa
Signing time:             Fri 28 Jul 2023 14:35:13 +0000
ROA not before:           Fri 28 Jul 2023 14:30:13 +0000
ROA not after:            Fri 26 Jul 2024 14:35:13 +0000
asID:                     52548
IP address blocks:        177.85.142.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:11:79:b2:0c:53:9b:bc:a6:92:af:38:c1:50:42:f1:92:d8:9a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0DD34006E37436756618ADA322C16C0AFC6970
        Validity
            Not Before: Jul 28 14:30:13 2023 GMT
            Not After : Jul 26 14:35:13 2024 GMT
        Subject: CN=980D87FF778023662AC9DEC81D09B2039787ADB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:02:da:18:fa:21:e4:05:19:19:5e:2d:f5:
                    36:fc:21:d4:59:1b:de:52:65:63:5b:0d:fa:d8:22:
                    1a:a5:5b:1d:c2:53:5b:ae:c4:b4:cc:7a:bf:86:74:
                    59:97:13:a4:53:9c:2d:2a:55:6b:c2:51:83:39:4a:
                    b0:c5:cd:68:58:84:25:6e:4f:96:e4:e2:b6:20:c3:
                    27:fe:8f:41:ce:9c:a6:46:13:cc:60:c3:a8:f1:a4:
                    87:17:96:61:ab:e5:25:be:4f:48:93:75:0e:51:33:
                    c6:d2:8b:e3:5d:0d:26:b9:32:0c:e6:20:06:7e:30:
                    4f:6a:e3:31:1b:a0:9f:83:51:21:ea:4d:95:2b:4e:
                    ea:36:01:21:08:11:c2:c4:79:50:8d:04:93:e0:9d:
                    bf:9b:47:a9:e0:49:87:12:30:7d:a8:48:8d:c0:6e:
                    0b:62:f8:ca:09:1c:9e:99:8e:c9:49:bf:46:be:91:
                    53:ba:2d:0b:3f:ce:79:90:a2:42:e0:7a:76:1c:64:
                    c3:de:0b:94:d6:2a:2b:ed:1f:07:d5:74:da:6b:ec:
                    2b:e0:9f:66:06:84:8f:9a:d9:a8:6b:5d:20:4d:23:
                    1a:a2:25:d4:84:dc:cc:1d:96:f2:cc:da:55:57:8a:
                    1f:dc:41:7f:f3:58:01:35:51:0e:ea:9b:5c:0d:78:
                    7d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0D:87:FF:77:80:23:66:2A:C9:DE:C8:1D:09:B2:03:97:87:AD:B7
            X509v3 Authority Key Identifier:
                keyid:EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/EE0DD34006E37436756618ADA322C16C0AFC6970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134322e302f32342d3332203d3e203532353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:d2:a5:f3:e5:8d:73:48:20:06:9e:a9:65:46:0e:3f:d6:40:
         2c:64:1a:71:30:1b:1a:12:af:f5:01:67:20:c2:92:4a:b6:f0:
         49:47:10:2c:8f:32:30:f9:9a:f9:b1:2f:f5:e9:ff:84:ba:c8:
         3e:46:d6:e8:9a:55:2a:e7:b7:72:9b:3f:5a:e4:47:4d:b1:d2:
         6f:36:22:5e:b3:7c:68:0e:a7:ba:b3:1f:ac:94:0d:9e:b6:07:
         2b:75:bf:e3:29:56:ec:29:4a:4a:e4:02:7f:b2:8a:58:22:d0:
         e0:44:e5:dd:ed:6d:dc:8b:f1:00:57:d0:8a:0b:16:a4:2a:1c:
         8f:e8:bc:ec:1e:5c:67:57:5e:ab:6f:4a:a6:ee:d8:c8:29:2e:
         9e:0d:72:3f:18:eb:77:1a:0d:9c:f6:91:cb:69:69:c2:bb:1f:
         52:b7:2b:67:a5:11:8b:83:47:96:59:b5:73:8a:06:0a:58:ba:
         dc:9b:18:b9:02:f2:4c:18:21:f3:43:af:17:ba:3b:aa:75:82:
         f0:56:bf:76:e9:4b:8e:ca:44:0a:c4:88:df:e3:33:6e:65:59:
         b8:ad:9a:5e:55:72:a9:b4:83:84:fb:27:c8:06:89:84:2b:72:
         3e:ec:de:62:49:fc:22:e6:da:5a:bb:ea:a0:fa:04:e3:57:3c:
         99:ef:02:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:55:31 2025 by rpki-client