Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134332e302f32342d3234203d3e203532353438.roa
File:                     3137372e38352e3134332e302f32342d3234203d3e203532353438.roa (raw, json)
Hash identifier:          oLGYRfIzkfb3jGQpmT7/pgo9+maDu2hQZJzdZVI9xGA=
Subject key identifier:   5F:75:64:0B:00:ED:AE:8C:52:DA:A5:DD:45:7C:5B:2B:46:9A:E2:6B
Certificate issuer:       /CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Certificate serial:       59E0AD15B92B7E866235F25C3455CE4335FF3760
Authority key identifier: EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134332e302f32342d3234203d3e203532353438.roa
Signing time:             Tue 25 Jul 2023 21:14:50 +0000
ROA not before:           Tue 25 Jul 2023 21:09:50 +0000
ROA not after:            Tue 23 Jul 2024 21:14:50 +0000
asID:                     52548
IP address blocks:        177.85.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e0:ad:15:b9:2b:7e:86:62:35:f2:5c:34:55:ce:43:35:ff:37:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0DD34006E37436756618ADA322C16C0AFC6970
        Validity
            Not Before: Jul 25 21:09:50 2023 GMT
            Not After : Jul 23 21:14:50 2024 GMT
        Subject: CN=5F75640B00EDAE8C52DAA5DD457C5B2B469AE26B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:d7:f7:c3:1d:bc:74:1e:d2:b7:bf:a8:b2:
                    94:31:13:e8:3b:3c:87:91:6c:19:24:a6:fe:0a:9c:
                    e1:33:65:85:63:ed:e5:5f:6a:c5:72:30:70:81:9c:
                    12:5b:e4:2a:1e:f6:0a:4b:7c:93:29:1f:7d:90:3f:
                    36:49:67:44:09:5d:2c:14:a1:51:c2:2f:94:97:3c:
                    ef:2b:30:a8:e0:bf:51:cf:65:e8:cb:e4:02:49:c8:
                    79:f1:e0:22:e9:10:cf:9b:9e:b7:73:81:a5:fe:cc:
                    e5:3c:4c:9f:06:a5:a1:ea:e1:22:71:f8:5c:d2:90:
                    34:27:9c:ff:5a:ce:17:db:f5:ee:71:a6:d3:ec:96:
                    95:32:7b:bf:86:57:5f:f4:be:f8:85:65:b3:bd:9e:
                    9e:56:26:52:18:78:73:ef:5a:28:ad:70:b5:05:88:
                    45:98:f5:ee:85:0e:51:46:17:90:ba:af:a3:95:c0:
                    c9:6e:b7:a4:93:0c:bc:ec:7f:b2:cc:6b:21:7f:67:
                    fd:4e:9b:68:34:f4:ca:32:6c:a7:6c:a6:ee:38:40:
                    a9:a4:a9:9a:1d:a4:87:c0:cf:f4:1c:e9:d2:81:82:
                    2a:17:9f:1e:17:d7:f1:2b:ce:7f:6d:db:27:4d:fc:
                    c2:af:25:06:95:c7:7c:19:07:0e:d0:b0:33:ee:b1:
                    8e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:75:64:0B:00:ED:AE:8C:52:DA:A5:DD:45:7C:5B:2B:46:9A:E2:6B
            X509v3 Authority Key Identifier:
                keyid:EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/EE0DD34006E37436756618ADA322C16C0AFC6970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134332e302f32342d3234203d3e203532353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:6d:93:5a:74:57:eb:e4:05:83:fd:81:01:58:01:73:ed:0f:
         24:84:61:64:2e:04:f8:1d:fa:05:cd:aa:b3:f8:35:a9:ba:8b:
         e5:c2:72:4e:f4:61:a5:24:05:09:78:b2:8f:b5:77:dd:00:58:
         d9:7d:42:6c:62:ba:bd:46:a6:bd:89:e3:5f:1c:4e:aa:a6:a7:
         34:2a:b4:bd:a4:79:65:83:0f:ee:93:f3:d9:cf:bd:52:56:a3:
         af:31:2c:73:b7:96:5f:54:3a:cf:1a:84:73:a9:17:73:58:95:
         80:33:65:b6:25:82:e5:40:a5:d6:05:c3:8a:ca:2d:17:63:da:
         ee:fe:74:72:39:88:83:e0:09:78:bb:db:22:81:5a:c5:6c:7b:
         66:71:3f:26:0f:c2:09:7a:95:08:f6:0c:48:27:09:85:b3:45:
         be:e4:63:ac:c4:ed:ab:83:57:89:ee:07:c2:7b:fc:de:b9:67:
         5c:49:25:ec:c1:60:21:4e:dd:68:f4:c6:a4:d6:ff:35:84:49:
         b4:99:96:e8:4c:44:06:c1:15:b2:93:5a:82:cb:c0:98:94:cd:
         e1:65:e5:f9:1e:e5:fd:04:37:02:9f:40:9f:64:47:5e:a9:ba:
         ab:7f:55:f7:5f:ef:91:c4:20:10:74:ef:99:20:93:fc:7b:96:
         d4:1c:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:29 2025 by rpki-client