Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/3137372e38352e3136342e302f32332d3233203d3e203532373433.roa
File:                     3137372e38352e3136342e302f32332d3233203d3e203532373433.roa (raw, json)
Hash identifier:          DtA5NLMLHfXNqXCMlAp78KcJjXths+MifW3NcX/UhiA=
Subject key identifier:   93:98:E7:02:FC:38:54:E8:3B:1D:95:C3:A8:3A:5F:36:75:D8:29:E3
Certificate issuer:       /CN=E9FEBF829E2ECB5541D2087C87590E86CC57C518
Certificate serial:       12373EE1A4B4D011F73A207E15A888CCF8CA5A8F
Authority key identifier: E9:FE:BF:82:9E:2E:CB:55:41:D2:08:7C:87:59:0E:86:CC:57:C5:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9FEBF829E2ECB5541D2087C87590E86CC57C518.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/3137372e38352e3136342e302f32332d3233203d3e203532373433.roa
Signing time:             Tue 06 Feb 2024 11:35:21 +0000
ROA not before:           Tue 06 Feb 2024 11:30:21 +0000
ROA not after:            Tue 04 Feb 2025 11:35:21 +0000
asID:                     52743
IP address blocks:        177.85.164.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:37:3e:e1:a4:b4:d0:11:f7:3a:20:7e:15:a8:88:cc:f8:ca:5a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9FEBF829E2ECB5541D2087C87590E86CC57C518
        Validity
            Not Before: Feb  6 11:30:21 2024 GMT
            Not After : Feb  4 11:35:21 2025 GMT
        Subject: CN=9398E702FC3854E83B1D95C3A83A5F3675D829E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:24:41:68:3e:22:a0:aa:a2:45:46:0b:6f:
                    75:9e:cf:35:e1:6a:c3:59:ae:ed:94:02:55:77:39:
                    43:11:f5:e0:1f:5a:9e:d0:40:06:00:bc:cb:02:de:
                    86:cf:c9:26:0b:d2:b8:a3:37:45:2c:4d:d8:8b:90:
                    69:25:d1:4c:e5:40:c2:aa:19:b5:4a:fa:2d:3e:64:
                    4b:49:66:d6:b7:9e:af:9e:ce:67:9a:88:83:52:ee:
                    77:e2:6d:f5:b0:10:7a:ec:2e:a7:be:05:00:c4:44:
                    e6:2a:ac:89:f5:94:db:59:b4:97:d5:cc:d4:73:92:
                    97:84:b2:72:40:0a:9b:bd:d6:66:76:cf:26:14:4d:
                    14:86:e7:d7:7f:db:51:09:08:11:cf:76:f6:db:2e:
                    6f:42:f8:60:6d:18:fd:e8:16:7c:5e:c2:be:05:30:
                    3d:8c:2a:a1:10:a0:a9:c5:c0:62:6b:5e:25:78:36:
                    71:b7:a3:fc:ca:77:8c:2e:9b:c7:3f:ac:74:4d:ab:
                    dc:f7:8b:69:7a:c3:25:50:bc:a0:bf:8a:c4:87:6f:
                    6f:a9:93:c4:4c:29:e9:f2:ca:8d:88:6e:f9:b3:72:
                    eb:70:98:e8:21:fd:27:6a:78:0e:3c:db:a7:90:90:
                    4e:de:31:72:1b:7f:28:88:45:28:38:98:f1:c0:41:
                    6f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:98:E7:02:FC:38:54:E8:3B:1D:95:C3:A8:3A:5F:36:75:D8:29:E3
            X509v3 Authority Key Identifier:
                keyid:E9:FE:BF:82:9E:2E:CB:55:41:D2:08:7C:87:59:0E:86:CC:57:C5:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/E9FEBF829E2ECB5541D2087C87590E86CC57C518.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9FEBF829E2ECB5541D2087C87590E86CC57C518.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/0/3137372e38352e3136342e302f32332d3233203d3e203532373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:db:9d:8a:e3:ec:c5:e6:9d:06:1b:d2:3a:d7:53:78:6d:26:
         1d:5d:ee:81:d3:15:c5:75:aa:d5:8c:5d:43:af:dc:66:a2:66:
         a1:9c:4c:ab:94:cf:e1:da:e8:e8:59:70:71:86:08:26:c4:ca:
         f0:a6:ca:f4:e3:8b:ca:b5:e2:65:0c:d2:4b:d4:88:9f:67:d5:
         a8:b6:56:57:4b:b9:e0:9f:64:e2:24:3d:d5:be:f5:f4:ad:6c:
         cb:41:28:02:b1:7b:cd:44:62:83:96:bb:a4:b6:ab:45:61:0f:
         af:8e:7d:90:73:6e:8a:ed:69:67:00:5b:18:69:55:b8:b6:09:
         04:4c:ef:9b:c9:4c:52:52:01:a6:d6:7c:28:bf:5c:bf:d8:02:
         f9:ec:34:89:e9:ab:6d:3e:7d:77:a0:b6:08:62:99:63:16:19:
         62:55:07:42:7f:4d:da:2c:7e:03:15:90:84:de:36:1e:c7:82:
         c7:a3:f0:1e:fd:1b:30:a4:57:00:32:11:e3:9d:e3:61:13:57:
         ba:13:83:7f:7b:35:01:fc:ff:e6:eb:d0:f1:4a:15:80:27:d6:
         51:83:5a:9c:69:90:42:b6:16:fe:68:7c:84:7f:fe:93:fb:78:
         12:28:54:ba:d5:5b:e5:62:97:f4:22:d1:db:bd:71:bf:25:b2:
         60:72:45:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:45 2025 by rpki-client