Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136342e302f32322d3232203d3e203532373433.roa
File:                     3137372e38352e3136342e302f32322d3232203d3e203532373433.roa (raw, json)
Hash identifier:          2IFKTZTlJCa+APi4DHL5ZGrLP6V7wvRKfC3Pbw7u3gs=
Subject key identifier:   AF:92:D2:E9:AA:05:B3:8D:D9:1F:D3:25:8F:4D:0B:E6:E0:F3:01:96
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       7DCF012C15EBA1A78821C5030D9C24C2C2168CA6
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136342e302f32322d3232203d3e203532373433.roa
Signing time:             Thu 06 Mar 2025 14:05:24 +0000
ROA not before:           Thu 06 Mar 2025 14:00:24 +0000
ROA not after:            Thu 05 Mar 2026 14:05:24 +0000
asID:                     52743
IP address blocks:        177.85.164.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:cf:01:2c:15:eb:a1:a7:88:21:c5:03:0d:9c:24:c2:c2:16:8c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Mar  6 14:00:24 2025 GMT
            Not After : Mar  5 14:05:24 2026 GMT
        Subject: CN=AF92D2E9AA05B38DD91FD3258F4D0BE6E0F30196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:50:1f:f8:cc:8c:11:88:04:31:48:4c:85:
                    86:35:f6:46:5b:7f:0a:29:39:f6:0a:27:10:b5:52:
                    a7:4d:a2:6f:b0:25:ae:ab:1c:ce:00:9c:af:a7:be:
                    4a:3d:40:77:3a:e4:c6:c6:72:71:e2:04:6a:aa:c9:
                    78:82:e5:2d:d7:e5:80:af:54:3e:b5:ab:63:b8:54:
                    e0:91:c4:9d:2a:f3:eb:9f:24:28:a6:d1:a3:00:a1:
                    d5:f0:3c:75:61:21:b0:72:be:63:7f:64:06:eb:16:
                    ee:a5:e7:8a:79:7f:58:fa:b4:50:f0:b8:cc:6f:a2:
                    c7:e8:31:78:fd:7c:91:9f:dd:6d:8c:cb:08:4e:15:
                    f2:ab:fc:fe:e0:c1:e7:4e:fc:51:6c:f5:05:d3:72:
                    b9:71:8c:a1:83:1f:a8:74:e3:a0:03:88:8d:bc:8d:
                    3e:47:2a:90:25:36:6b:32:4c:2e:1d:94:5b:2b:0f:
                    1d:bb:35:51:c1:6a:d7:f3:54:03:d3:90:c2:e9:cf:
                    f8:f6:51:bb:c9:4a:45:38:3c:cf:64:19:39:e3:fd:
                    70:de:b3:d9:35:06:7a:b5:d3:9a:c8:19:b4:04:a8:
                    df:db:b2:0f:f8:a6:73:d9:2b:86:68:c2:c1:ae:a3:
                    cb:02:fe:09:1b:cc:e2:c1:72:83:a5:71:ee:c3:db:
                    44:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:92:D2:E9:AA:05:B3:8D:D9:1F:D3:25:8F:4D:0B:E6:E0:F3:01:96
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136342e302f32322d3232203d3e203532373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:22:e6:d2:6f:9d:7e:fc:69:53:c2:ed:ea:3d:5f:44:38:0c:
         2d:af:00:18:97:bd:13:c3:3c:68:51:99:94:62:c4:46:07:4e:
         49:dc:08:89:4b:90:3d:fb:db:43:c6:01:75:3e:04:ae:dd:8a:
         ac:9f:01:b2:fa:a8:c6:7f:7b:d9:5e:b1:ed:d9:8d:c3:b2:2b:
         b4:86:df:3d:18:11:28:bd:87:ae:d5:fb:18:a7:f5:18:29:77:
         f8:b4:59:1f:1b:ac:55:b0:2a:0a:86:f6:c2:f2:c9:ac:ff:1b:
         7a:ee:18:1e:54:43:bb:86:55:a3:ed:71:af:f8:2b:25:0c:6b:
         66:a0:8b:94:ae:19:04:50:cd:fd:34:ca:13:9a:76:b1:7e:c0:
         17:11:a4:d8:03:aa:75:0b:e0:d8:46:a7:15:33:f4:f8:9b:0d:
         c8:79:83:c9:7a:50:0a:cf:56:26:1c:4b:30:ed:11:84:06:9c:
         25:cb:b7:c7:34:a4:0d:02:ba:80:80:91:47:33:49:bf:4a:23:
         ef:0d:2d:2a:14:30:42:fe:13:f0:47:f4:dd:80:b1:1d:30:b7:
         07:98:0f:f9:3e:14:a4:f3:3d:34:8f:b6:97:29:36:ae:2f:20:
         81:1d:16:48:cb:4c:f5:be:bf:0a:8b:7f:00:45:d0:68:12:c5:
         30:76:e6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:22:35 2025 by rpki-client