Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234322e302f32342d3234203d3e20323730363032.roa
File:                     3137372e38352e3234322e302f32342d3234203d3e20323730363032.roa (raw, json)
Hash identifier:          8p19/FZ4HFHgKAuNNUUC1YegEFbArkpmbdfPGUQEv00=
Subject key identifier:   9D:F1:DC:F0:1C:58:17:54:9A:F9:9C:B4:B3:0E:6E:61:DF:7E:D2:D4
Certificate issuer:       /CN=EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5
Certificate serial:       590CB6FA55273B79F3BB4289351AC43A8132A061
Authority key identifier: EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234322e302f32342d3234203d3e20323730363032.roa
Signing time:             Tue 21 May 2024 14:32:35 +0000
ROA not before:           Tue 21 May 2024 14:27:35 +0000
ROA not after:            Tue 20 May 2025 14:32:35 +0000
asID:                     270602
IP address blocks:        177.85.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0c:b6:fa:55:27:3b:79:f3:bb:42:89:35:1a:c4:3a:81:32:a0:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5
        Validity
            Not Before: May 21 14:27:35 2024 GMT
            Not After : May 20 14:32:35 2025 GMT
        Subject: CN=9DF1DCF01C5817549AF99CB4B30E6E61DF7ED2D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:65:85:8c:41:57:46:f3:72:2c:38:e8:c2:
                    52:cb:b2:c1:a4:7f:ff:fd:87:b8:de:59:0c:a4:3d:
                    d4:63:6a:f4:84:85:e1:90:fc:58:dc:d4:64:8d:f5:
                    b8:e6:56:c1:ae:6f:fa:0e:ad:3b:be:14:75:4f:8a:
                    2b:1b:6e:64:9c:69:4c:b5:12:3d:2b:de:8e:8a:14:
                    bc:8b:a5:83:89:a6:68:94:17:a0:8c:27:90:d9:4e:
                    f3:f1:97:94:95:3d:71:35:25:78:2d:da:18:19:f8:
                    4f:08:b2:09:ac:b4:f8:02:6d:56:fa:b9:70:e2:a9:
                    79:60:12:4d:4c:cc:45:b7:03:cf:54:04:54:68:d3:
                    28:34:c3:95:e3:fe:79:f6:04:af:e8:5e:af:96:e4:
                    b1:15:05:c3:bc:d1:86:c6:e9:7f:e0:64:a7:9a:04:
                    8c:ff:9e:fe:be:8e:1d:97:6b:a5:53:ff:bd:6e:ef:
                    8b:2f:7e:54:3c:d1:d7:ef:20:7d:0b:0b:ae:3d:52:
                    a2:57:aa:c6:b9:58:7f:c1:70:b7:86:96:53:66:2a:
                    ee:fd:cb:be:f6:7b:2a:a7:6c:53:37:af:3b:23:02:
                    19:77:c9:f3:a6:c4:36:8c:71:a4:c0:65:59:92:12:
                    fc:36:bc:08:b4:72:4e:f2:46:58:62:05:7d:ca:0b:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F1:DC:F0:1C:58:17:54:9A:F9:9C:B4:B3:0E:6E:61:DF:7E:D2:D4
            X509v3 Authority Key Identifier:
                keyid:EB:DE:8B:DB:F0:39:FD:80:D3:F6:2C:BC:04:01:CA:9B:B1:52:C7:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EBDE8BDBF039FD80D3F62CBC0401CA9BB152C7E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/3137372e38352e3234322e302f32342d3234203d3e20323730363032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:8c:a0:44:72:ab:30:ad:04:3b:ad:2d:f6:ba:92:0d:7f:d1:
         b9:b3:a2:a9:56:98:27:21:7c:d3:cd:cf:ed:0a:d3:16:69:de:
         33:3e:af:cf:c7:62:f7:7e:59:dc:9f:07:77:0f:3b:4b:77:af:
         29:d0:bd:76:84:82:67:2b:ca:6c:60:0b:e1:3d:70:f3:e8:63:
         9f:d8:86:8a:7e:29:d0:6f:d6:69:15:6f:a4:75:87:f2:d7:e5:
         b8:20:fa:c5:c8:05:24:e2:c0:c5:76:a0:2e:89:d7:64:b9:19:
         aa:a9:e8:e1:34:c6:20:85:b4:5a:26:e6:d5:09:f5:d3:34:97:
         5c:4a:e1:4a:af:8e:2d:48:fc:09:7d:19:00:07:b9:57:de:f2:
         41:72:a9:7f:70:5d:14:4a:b9:47:4b:eb:e3:c7:e5:2c:d4:dd:
         d1:fc:2b:f3:f7:2f:47:d9:4a:74:61:ec:f3:11:9e:29:6e:76:
         09:e2:7a:2c:c9:8d:06:b2:d9:47:b1:da:6c:32:b5:e4:af:42:
         4e:eb:ac:e4:aa:3d:85:9a:0e:0d:d2:3e:54:58:24:ed:27:60:
         81:67:5a:7c:e0:0d:b6:0d:8b:32:ca:40:f8:8b:75:c4:2b:f1:
         00:3b:8a:20:7e:4e:09:8e:81:57:ef:4f:76:72:a4:47:fb:b6:
         12:0b:8d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:26 2024 by rpki-client on console-ams.rpki-client.org