Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136342e302f32332d3233203d3e203532373433.roa
File:                     3137372e38352e3136342e302f32332d3233203d3e203532373433.roa (raw, json)
Hash identifier:          DkwtmlkNsx8L7Qk3qD/RgaLiNh7K+HBzbj0ah7JvCj8=
Subject key identifier:   9F:EE:29:28:45:EC:44:A1:BD:01:23:AE:47:AB:72:08:0B:86:E8:79
Certificate issuer:       /CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
Certificate serial:       51E425EF783F271712F63E3B9CBCB73B88868140
Authority key identifier: B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136342e302f32332d3233203d3e203532373433.roa
Signing time:             Thu 06 Mar 2025 14:05:22 +0000
ROA not before:           Thu 06 Mar 2025 14:00:22 +0000
ROA not after:            Thu 05 Mar 2026 14:05:22 +0000
asID:                     52743
IP address blocks:        177.85.164.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e4:25:ef:78:3f:27:17:12:f6:3e:3b:9c:bc:b7:3b:88:86:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66
        Validity
            Not Before: Mar  6 14:00:22 2025 GMT
            Not After : Mar  5 14:05:22 2026 GMT
        Subject: CN=9FEE292845EC44A1BD0123AE47AB72080B86E879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e1:9f:6f:ce:f8:0e:33:4c:f1:b4:6b:14:a2:
                    18:92:6c:a7:79:ab:46:00:a9:91:70:7c:a2:a2:d5:
                    eb:b3:be:42:e7:f5:36:84:1c:3f:d1:c0:fa:86:2b:
                    ff:c1:85:f9:ee:1a:f6:8c:af:0f:e5:4d:c9:79:6d:
                    12:b5:44:11:70:9c:2f:75:83:e2:64:28:4f:14:73:
                    c7:3d:76:5e:ec:01:54:29:4a:bb:18:39:f0:c1:74:
                    bf:78:70:89:84:c6:e2:96:f9:9c:44:f9:bb:b9:33:
                    f3:83:e1:db:43:eb:45:b8:0c:87:29:86:79:69:19:
                    cd:97:74:6e:ea:04:8b:09:62:a2:b1:40:03:ed:bd:
                    82:5e:95:d3:4a:f5:39:85:82:8e:f8:64:6d:0f:af:
                    dc:76:73:7a:7b:3d:67:cc:7b:2e:7a:10:ff:0c:5c:
                    52:cc:54:77:41:56:ed:48:85:42:21:ca:df:0f:98:
                    c9:5a:92:09:e8:9b:13:8f:78:5e:5f:95:d0:ce:2f:
                    b5:3d:c3:3b:0c:ed:3d:1a:e0:8c:98:94:8c:db:71:
                    32:9e:ae:2f:77:61:c8:45:17:5b:ac:3a:aa:f7:16:
                    59:32:f8:62:e1:f3:df:b0:9b:5f:4f:df:60:72:86:
                    1e:86:59:42:7e:eb:fe:ca:44:c6:a6:34:72:d2:1b:
                    44:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EE:29:28:45:EC:44:A1:BD:01:23:AE:47:AB:72:08:0B:86:E8:79
            X509v3 Authority Key Identifier:
                keyid:B8:5D:CA:CB:96:F5:5E:6D:2A:D1:68:6E:1E:DE:7B:55:55:4C:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B85DCACB96F55E6D2AD1686E1EDE7B55554CFE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdwCiTUGWyooJPMS1kEENXCA3aBaR67C8gcsvCd5HFU1/1/3137372e38352e3136342e302f32332d3233203d3e203532373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:c0:1f:3f:7b:f8:d2:37:84:2f:9e:8a:91:fd:5c:74:28:21:
         d5:cf:6a:7e:2e:f7:11:04:d9:c8:0d:6a:2b:c6:24:7c:13:dd:
         97:2b:71:ab:7b:40:3e:66:f0:8a:fd:4f:c6:b7:45:dd:fb:b8:
         25:df:62:ec:58:fd:66:f1:61:a5:ad:f8:b1:d1:a1:b3:09:ec:
         87:4f:44:76:b8:27:cf:35:09:b8:b2:a6:47:ea:f5:c7:8c:82:
         60:39:41:be:16:96:70:e5:10:53:8f:2e:13:eb:51:08:58:11:
         b5:09:59:74:a8:89:73:15:ed:4e:44:03:45:00:6b:0f:6e:59:
         e5:07:7f:0d:bb:d2:56:b3:e0:e6:8f:20:bb:5a:66:07:c8:be:
         46:35:5e:1f:31:b1:1b:43:0e:25:48:4b:f6:4e:e2:95:c2:2a:
         88:a5:f1:1a:8f:c7:7c:fc:fe:f4:db:89:98:e8:86:96:cb:f1:
         a8:f4:64:bb:ed:30:9b:23:8a:a3:34:f4:30:f5:4e:94:f3:31:
         2e:c6:75:6c:bb:b2:1f:fa:cb:ca:d7:22:13:d1:56:00:72:b6:
         0c:3b:3e:04:06:7e:68:cb:48:71:23:12:fc:0b:9b:c8:66:b9:
         cd:da:7d:4d:dc:b7:5b:b8:e3:a1:c8:5c:00:5a:4f:42:e0:4a:
         cf:3b:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:23:20 2025 by rpki-client