Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234302e302f32322d3232203d3e20323730363032.roa
File:                     3137372e38352e3234302e302f32322d3232203d3e20323730363032.roa (raw, json)
Hash identifier:          TRp3Wtbsnj0yezd+a5Wbu1ue/y4rY6pVh7EEkyjJf0M=
Subject key identifier:   2B:22:FF:7C:21:F3:80:8E:A8:41:FE:4B:09:D8:69:EE:66:E0:0D:48
Certificate issuer:       /CN=EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5
Certificate serial:       798B123256C58A3F4CB78E13E62F364F864ADAE3
Authority key identifier: EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234302e302f32322d3232203d3e20323730363032.roa
Signing time:             Tue 21 May 2024 14:32:37 +0000
ROA not before:           Tue 21 May 2024 14:27:37 +0000
ROA not after:            Tue 20 May 2025 14:32:37 +0000
asID:                     270602
IP address blocks:        177.85.240.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8b:12:32:56:c5:8a:3f:4c:b7:8e:13:e6:2f:36:4f:86:4a:da:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5
        Validity
            Not Before: May 21 14:27:37 2024 GMT
            Not After : May 20 14:32:37 2025 GMT
        Subject: CN=2B22FF7C21F3808EA841FE4B09D869EE66E00D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:4d:52:87:72:86:8b:d9:5b:13:cb:9c:70:
                    eb:98:b2:85:71:5c:d8:32:47:92:31:fb:32:55:5e:
                    20:48:32:0d:95:3f:be:0f:2c:96:af:39:13:43:03:
                    de:55:e6:20:eb:4d:bf:5f:81:2a:38:80:96:e7:44:
                    dd:a3:a2:d5:10:25:8a:e2:11:db:b3:3b:f6:4d:f4:
                    0f:b6:49:cf:4e:27:5c:8e:c7:8b:c0:01:c3:c6:0a:
                    96:f7:4d:b7:a7:3d:6c:da:b9:3e:84:ba:09:fa:9e:
                    26:64:67:77:dc:0f:94:38:96:2e:a9:c6:c1:ab:34:
                    47:58:f0:e3:6c:3f:96:a4:dc:0c:a0:ab:22:12:28:
                    e1:c0:1c:a4:d4:7b:5e:e4:d7:6f:a4:b0:66:df:b5:
                    d3:5a:92:f2:27:35:ed:83:e9:f9:a1:aa:9a:72:f3:
                    ad:ee:cb:61:bb:83:ca:6b:b9:0d:f1:01:1e:cf:dd:
                    9f:34:5a:73:70:64:65:e9:01:ef:82:e1:2d:28:53:
                    cc:8b:3b:aa:37:aa:b5:1a:d4:d9:71:98:37:14:53:
                    96:c5:5a:0e:cb:be:d6:46:1a:d2:e2:9a:00:af:49:
                    f7:a1:63:94:b9:1c:1d:89:47:5c:4e:f2:fe:f9:c1:
                    4b:0c:be:12:62:23:71:ff:1a:ee:dc:06:26:8d:ff:
                    a2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:22:FF:7C:21:F3:80:8E:A8:41:FE:4B:09:D8:69:EE:66:E0:0D:48
            X509v3 Authority Key Identifier:
                keyid:EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234302e302f32322d3232203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:71:ab:90:f8:7d:37:f2:dc:37:1f:96:90:19:64:01:9e:f3:
         85:fc:3d:bf:14:7e:26:6f:ad:fe:94:5c:4b:37:ef:e2:68:99:
         73:df:33:d6:95:e6:1c:9a:85:69:fe:e1:ab:61:2f:14:1f:6b:
         b6:81:13:f6:b4:ef:2c:b8:12:d7:83:29:a1:af:f1:65:bf:8c:
         b8:53:83:33:cb:ea:6e:47:9e:71:91:9f:c3:af:70:12:db:74:
         2f:4d:3c:65:d7:1d:88:58:23:45:7f:74:b2:2c:1d:87:b4:e0:
         f7:ee:70:79:99:e5:43:71:36:fa:ab:48:5c:bc:98:21:aa:f1:
         54:0b:ea:40:b5:cf:ee:ba:87:cd:31:1f:b0:a7:7c:96:3f:05:
         74:b6:9a:e2:46:5d:fb:4d:46:e9:63:90:c5:c8:0a:26:04:14:
         54:af:eb:c5:55:b1:e9:4a:d8:84:58:6d:34:79:42:25:77:d8:
         01:f8:3e:61:fa:d4:ba:11:8b:3b:d5:e4:a5:d9:ce:55:63:49:
         46:6f:76:93:d0:b6:96:76:a8:f2:10:95:cb:f9:a4:3f:4f:ab:
         51:85:4b:9d:b0:f6:8e:14:11:f1:5f:93:66:8c:8c:16:1e:2f:
         29:ba:64:03:ca:60:60:32:01:06:1c:82:f7:e9:9d:00:d4:f6:
         f2:c6:60:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org