Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134332e302f32342d3332203d3e203532353438.roa
File:                     3137372e38352e3134332e302f32342d3332203d3e203532353438.roa (raw, json)
Hash identifier:          Th554wE6xickNDPA7fkTQqTZ3Q40PvaDTweXVzhw5Bg=
Subject key identifier:   93:0C:D1:57:C2:1A:45:1B:F3:CF:AD:5B:FD:7B:7B:E9:A6:F2:66:EA
Certificate issuer:       /CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Certificate serial:       70E9D2D6C8C35B0ACA72574437D7DC6BC03DE3D1
Authority key identifier: EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134332e302f32342d3332203d3e203532353438.roa
Signing time:             Fri 28 Jul 2023 14:35:30 +0000
ROA not before:           Fri 28 Jul 2023 14:30:30 +0000
ROA not after:            Fri 26 Jul 2024 14:35:30 +0000
asID:                     52548
IP address blocks:        177.85.143.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e9:d2:d6:c8:c3:5b:0a:ca:72:57:44:37:d7:dc:6b:c0:3d:e3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0DD34006E37436756618ADA322C16C0AFC6970
        Validity
            Not Before: Jul 28 14:30:30 2023 GMT
            Not After : Jul 26 14:35:30 2024 GMT
        Subject: CN=930CD157C21A451BF3CFAD5BFD7B7BE9A6F266EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:7e:1f:26:04:bd:5d:90:b8:86:43:c3:f3:
                    58:85:d7:51:ac:46:cf:7c:be:2b:7b:50:cd:4a:57:
                    9d:f5:90:7b:21:f4:d0:98:91:9a:cc:ef:40:ae:f6:
                    f8:83:ea:50:c4:da:c6:3c:09:04:26:69:e1:cd:99:
                    ed:2c:fc:fe:c8:85:cd:4e:4c:27:20:ea:40:56:b1:
                    01:31:4a:8b:49:d9:45:fe:6b:02:49:81:c8:67:cb:
                    83:96:d9:18:81:eb:77:68:82:5b:c1:4d:d6:93:95:
                    88:08:d2:0b:65:9f:98:28:80:0a:d2:f8:5c:2a:d9:
                    7b:62:72:0c:79:55:b2:49:3c:d6:22:67:11:0a:45:
                    08:95:2a:43:07:03:bc:a9:d2:4a:56:05:fa:af:30:
                    bb:88:68:27:a3:55:59:75:3a:1d:de:fb:5c:cf:63:
                    6b:7a:20:e1:d2:8f:10:5b:ff:41:19:83:66:f2:ba:
                    19:c6:1f:d4:a2:df:ed:19:54:b5:74:84:c7:73:02:
                    e5:f5:72:9d:f6:53:52:1d:e3:41:f3:7b:69:40:09:
                    bd:32:ed:88:a3:c0:9d:17:1c:a4:67:ca:34:f3:43:
                    b2:4f:39:bd:6e:aa:6e:94:89:57:e7:25:cf:fc:64:
                    2b:29:aa:b6:f8:45:8e:c4:8c:bc:52:15:48:e2:a9:
                    1f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0C:D1:57:C2:1A:45:1B:F3:CF:AD:5B:FD:7B:7B:E9:A6:F2:66:EA
            X509v3 Authority Key Identifier:
                keyid:EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/EE0DD34006E37436756618ADA322C16C0AFC6970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/3137372e38352e3134332e302f32342d3332203d3e203532353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:92:a5:09:aa:5b:9b:ae:e5:08:1d:b7:65:f0:2b:ac:d2:51:
         e6:0f:7e:6c:16:e4:15:6f:a3:36:3c:61:7b:ef:2e:d5:85:0c:
         a3:3f:0c:79:d8:ae:36:bd:d2:87:99:2a:01:db:81:89:02:24:
         1e:da:32:17:12:75:04:9f:22:5f:40:8e:c4:7b:74:43:da:8f:
         f6:66:d3:e8:4f:30:0c:4b:06:86:eb:f4:21:b9:b5:c4:86:c8:
         5e:8c:b5:3e:6b:74:1f:57:fd:92:fc:24:66:01:dc:98:3c:3f:
         ec:b4:7d:5e:b9:7a:ba:de:b2:96:a3:25:69:f1:cf:ca:69:87:
         77:d5:b4:69:77:e4:f1:b7:a2:74:c3:75:96:92:40:da:e8:24:
         89:4a:0c:6a:cb:98:b4:81:46:9c:21:e8:3e:f6:5e:8c:22:ba:
         06:26:86:49:0d:56:f9:c3:aa:16:72:7a:40:fc:17:2e:d2:50:
         48:b4:ec:68:84:79:ac:0c:76:0f:0f:8c:73:e1:17:8e:93:b0:
         d6:27:8a:4a:db:9d:33:71:5a:34:97:0d:01:1b:f9:a5:aa:8a:
         2d:71:31:23:3f:e5:2c:63:8b:32:d6:f1:9f:88:a3:5e:f1:5d:
         43:bd:6e:db:cf:0e:a4:ed:8f:bf:43:c4:f4:91:4e:ed:30:32:
         43:77:74:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org