Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234322e302f32332d3233203d3e20323730363032.roa
File:                     3137372e38352e3234322e302f32332d3233203d3e20323730363032.roa (raw, json)
Hash identifier:          clylZsp7xzobNUkrKi+mrNvZ7f833mt+0tzleWLjZ6s=
Subject key identifier:   C8:76:52:38:80:57:9F:D2:21:F4:CF:06:32:50:B6:D9:D8:FA:41:94
Certificate issuer:       /CN=EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5
Certificate serial:       5323BBF186C08BF7DCCBC7220D084EA6EB45281F
Authority key identifier: EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234322e302f32332d3233203d3e20323730363032.roa
Signing time:             Tue 21 May 2024 14:32:32 +0000
ROA not before:           Tue 21 May 2024 14:27:32 +0000
ROA not after:            Tue 20 May 2025 14:32:32 +0000
asID:                     270602
IP address blocks:        177.85.242.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:23:bb:f1:86:c0:8b:f7:dc:cb:c7:22:0d:08:4e:a6:eb:45:28:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5
        Validity
            Not Before: May 21 14:27:32 2024 GMT
            Not After : May 20 14:32:32 2025 GMT
        Subject: CN=C876523880579FD221F4CF063250B6D9D8FA4194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c4:f3:96:10:47:bf:6b:e9:a1:bd:5d:29:d2:
                    1b:72:fd:7d:5a:b6:1d:84:2e:67:f6:ac:d2:5a:ab:
                    3d:56:f6:50:88:a3:a9:2a:6d:84:fa:56:e4:4b:82:
                    75:1f:38:2d:89:5c:99:9d:2d:ce:36:35:78:b9:04:
                    a4:90:df:5d:72:e5:ca:7b:64:9b:1e:18:b2:99:30:
                    f3:43:68:07:d1:aa:8f:7d:4d:0d:a0:5b:52:e3:81:
                    5c:56:0c:1f:89:ae:0c:08:b5:92:94:53:04:21:0c:
                    90:b9:06:f4:3e:62:c8:b8:0f:3f:95:6c:c5:98:95:
                    39:29:ba:78:63:ce:aa:ca:a1:32:ab:84:27:35:ea:
                    90:19:65:ef:6a:26:20:67:b0:50:2b:20:35:31:20:
                    6e:6a:9b:e6:81:37:a2:b8:79:4e:c4:d6:3e:d8:af:
                    0e:2a:13:fc:6e:aa:87:9a:0c:8f:ff:c3:a1:9d:67:
                    13:f5:b6:b7:73:02:05:7f:c7:22:b7:07:b9:94:34:
                    a4:11:e0:07:86:1b:54:75:39:d9:dd:15:25:d9:a8:
                    b1:ce:cc:26:bb:98:dd:be:a4:87:4e:a1:9e:95:34:
                    21:ca:2d:56:7c:a4:e8:69:4f:ca:e4:b1:70:bd:ee:
                    b6:b6:04:b9:5e:d5:25:3b:d9:36:53:89:8f:9d:50:
                    49:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:76:52:38:80:57:9F:D2:21:F4:CF:06:32:50:B6:D9:D8:FA:41:94
            X509v3 Authority Key Identifier:
                keyid:EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234322e302f32332d3233203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:6d:89:47:0d:83:ca:79:4f:ea:48:90:de:b9:5e:32:25:27:
         75:9b:5b:c4:b5:8d:60:c1:b2:b9:f1:88:ea:c0:d6:d6:37:3a:
         f3:c9:6a:08:02:df:33:aa:e6:c6:31:da:eb:f7:de:54:53:3b:
         6b:f6:f3:ca:31:cb:e6:64:76:ca:61:f9:32:51:4f:fd:47:7a:
         f3:4b:03:7e:53:f8:e2:51:a2:6b:87:05:5a:6b:d1:8f:b3:ef:
         4b:4e:62:a8:63:c0:c6:ca:e7:a5:8c:ec:fe:61:b2:8c:3f:28:
         4f:ba:f2:48:44:0b:38:24:f2:23:ba:40:4b:44:3f:5e:9a:60:
         18:21:45:26:d6:74:d2:99:e7:bc:77:1d:b9:7b:ad:05:16:52:
         40:fb:a6:59:93:e1:5e:ef:ad:4f:dd:ee:cf:63:20:74:41:d2:
         2e:a3:50:07:6c:84:75:17:19:c8:72:c8:78:fe:32:20:31:a7:
         4f:24:ae:6a:91:b5:00:d0:6e:5f:59:56:01:f7:74:ef:dc:9e:
         4f:b8:dc:31:85:99:db:22:93:68:94:13:0c:ce:90:f8:f3:34:
         49:60:b5:60:bd:b4:cb:05:a5:40:f5:23:4e:93:0d:6c:0e:d2:
         a9:36:1e:6a:d1:a0:09:17:75:b0:ea:ac:c9:d6:0a:72:ab:37:
         00:20:cb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org