Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234302e302f32332d3233203d3e20323730363032.roa
File:                     3137372e38352e3234302e302f32332d3233203d3e20323730363032.roa (raw, json)
Hash identifier:          LlsC/vQzETkA0sdmZyOIqfx7vgYPXi6xS42MtpJFIc4=
Subject key identifier:   37:FA:1C:86:3F:3D:24:1B:78:46:F6:0A:32:E0:2C:70:4A:84:F0:7F
Certificate issuer:       /CN=EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5
Certificate serial:       14AEF94487CB0C562132B12C2321E7E8643CEADE
Authority key identifier: EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234302e302f32332d3233203d3e20323730363032.roa
Signing time:             Tue 21 May 2024 14:32:33 +0000
ROA not before:           Tue 21 May 2024 14:27:33 +0000
ROA not after:            Tue 20 May 2025 14:32:33 +0000
asID:                     270602
IP address blocks:        177.85.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:ae:f9:44:87:cb:0c:56:21:32:b1:2c:23:21:e7:e8:64:3c:ea:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5
        Validity
            Not Before: May 21 14:27:33 2024 GMT
            Not After : May 20 14:32:33 2025 GMT
        Subject: CN=37FA1C863F3D241B7846F60A32E02C704A84F07F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:20:f5:db:93:1e:15:5c:68:96:f0:71:7a:87:
                    ba:bf:12:df:46:72:ea:7f:a7:0b:14:2b:b7:d6:e6:
                    6e:e6:d0:40:2a:d5:0f:10:71:81:00:a5:b6:50:b9:
                    6d:d1:c0:a5:82:76:bd:fc:99:49:c8:6c:b9:9e:19:
                    4c:93:e8:30:5c:86:d3:88:ea:0e:b8:b7:8d:c3:d2:
                    20:30:27:46:25:7a:a9:90:69:41:b9:f5:cc:2e:3f:
                    4e:72:28:ab:bf:13:cc:49:70:09:52:15:77:fa:11:
                    b2:50:3e:e6:95:ca:49:26:56:94:bf:0a:ab:f9:d4:
                    44:36:7d:c6:df:1a:9b:79:04:d1:8a:cc:0f:82:9b:
                    d3:c3:17:f2:33:4e:be:6f:37:36:3e:0b:91:e6:2a:
                    52:a6:50:ee:5d:41:e0:d4:c7:e3:56:23:fc:38:64:
                    97:d2:a6:7d:cd:7e:d4:23:24:e0:f2:15:ab:37:01:
                    93:29:cb:e3:97:8c:df:49:5e:02:99:55:8c:d0:0b:
                    97:6c:67:cb:59:1d:0c:9c:d3:ca:40:97:d9:aa:6a:
                    6f:1a:6e:ff:86:4d:b9:62:22:00:d9:6b:12:b2:42:
                    52:cc:d9:1e:da:19:f3:b8:e1:c9:1b:14:d2:b2:cf:
                    9b:6e:cc:96:69:9b:fd:c4:7f:4a:a7:6d:cc:30:94:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FA:1C:86:3F:3D:24:1B:78:46:F6:0A:32:E0:2C:70:4A:84:F0:7F
            X509v3 Authority Key Identifier:
                keyid:EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234302e302f32332d3233203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:5f:5d:b9:01:27:6f:64:21:65:e7:c6:3e:91:a7:81:d0:46:
         29:a8:03:d4:6d:09:66:06:bb:13:0a:85:41:6e:82:4a:82:e4:
         d8:6c:ef:30:55:0c:ff:8b:ef:8b:4d:1b:09:35:ae:91:f2:20:
         23:7f:30:87:98:18:af:b0:06:61:1a:ea:02:31:55:19:1a:eb:
         2a:80:8d:b2:6c:ea:91:ac:06:2b:8a:da:91:67:3d:cd:cf:b1:
         87:e2:74:ab:be:47:06:c4:d5:46:70:6b:84:7b:ca:2c:0f:78:
         3b:62:09:a5:6b:fb:53:a6:08:ee:70:17:1b:4a:7d:b1:ab:1f:
         49:c2:e3:28:77:7e:8a:65:1c:b7:33:5a:54:c4:d0:2f:58:36:
         e8:99:be:2d:52:f7:49:8a:58:d3:88:41:44:46:53:63:01:7e:
         83:a8:b1:e6:c8:19:ed:04:dc:de:84:cf:97:20:f5:4e:19:42:
         96:07:95:af:07:3d:fc:d4:67:23:68:0e:15:b1:66:3f:98:b7:
         c1:7d:84:1b:8d:41:b2:c1:76:86:77:e9:23:75:4d:00:a3:ea:
         24:e0:56:a4:33:e8:80:6f:8b:f6:73:da:28:ac:f4:56:9d:1c:
         f7:b0:b8:1d:13:af:35:a6:ef:41:c6:51:57:b2:99:ab:63:13:
         17:bc:8d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:29 2024 by rpki-client on console-fra.rpki-client.org