Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/3137372e3132352e34302e302f32322d3234203d3e203532363036.roa
File:                     3137372e3132352e34302e302f32322d3234203d3e203532363036.roa (raw, json)
Hash identifier:          do+J41BixRnCCIlYDHJKE5YhV5hCw/kYasXkAUfaxTc=
Subject key identifier:   D5:6B:11:DD:9F:F6:E8:E6:20:97:B6:B0:50:28:EC:AE:5B:93:F4:81
Certificate issuer:       /CN=66E9523D9F7C86C66D2E586378D3E905BEE51041
Certificate serial:       3F6B01AF91C85122A80C1501E910C6B08CE57629
Authority key identifier: 66:E9:52:3D:9F:7C:86:C6:6D:2E:58:63:78:D3:E9:05:BE:E5:10:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66E9523D9F7C86C66D2E586378D3E905BEE51041.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/3137372e3132352e34302e302f32322d3234203d3e203532363036.roa
Signing time:             Fri 04 Aug 2023 13:17:58 +0000
ROA not before:           Fri 04 Aug 2023 13:12:58 +0000
ROA not after:            Fri 02 Aug 2024 13:17:58 +0000
asID:                     52606
IP address blocks:        177.125.40.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6b:01:af:91:c8:51:22:a8:0c:15:01:e9:10:c6:b0:8c:e5:76:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66E9523D9F7C86C66D2E586378D3E905BEE51041
        Validity
            Not Before: Aug  4 13:12:58 2023 GMT
            Not After : Aug  2 13:17:58 2024 GMT
        Subject: CN=D56B11DD9FF6E8E62097B6B05028ECAE5B93F481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:46:6a:1c:88:af:62:52:50:92:53:fc:a5:
                    29:c3:56:77:9a:e0:92:3c:c7:48:d3:66:28:d6:57:
                    7c:cb:94:c0:21:d1:8c:45:8a:8e:f3:ba:79:5b:b8:
                    00:de:29:09:aa:40:0a:26:84:07:80:f0:e4:30:7c:
                    38:28:aa:0e:d0:87:4e:e7:31:6b:39:81:b9:27:8c:
                    f7:43:dc:a3:00:be:27:58:65:1b:61:2d:69:2c:78:
                    66:00:1c:90:63:55:ed:82:1f:5f:70:aa:5e:3c:8a:
                    d8:85:2a:7e:a9:cc:64:6b:9c:ee:fc:dd:86:64:75:
                    91:26:3b:aa:1a:03:d6:5e:12:3a:a1:0c:bb:f8:22:
                    63:f2:68:c5:58:d3:f3:97:a1:eb:df:f3:3a:1a:99:
                    89:3e:75:d0:02:49:f1:4e:74:76:e7:01:af:32:be:
                    9b:f4:70:b2:20:72:9b:7d:e0:d6:e8:4f:f2:e5:51:
                    8e:2c:be:df:e0:55:c3:68:ed:52:98:72:9e:28:ec:
                    83:01:a6:83:c0:72:f9:34:24:a4:e5:a1:d4:7e:14:
                    6c:a5:cb:ac:d0:e8:94:1c:3d:f6:ad:bc:7f:80:0a:
                    cc:d9:a4:9c:18:bd:ac:b1:34:62:46:7f:da:fc:bd:
                    ba:03:22:1f:ba:53:83:6d:25:60:62:c9:32:d2:75:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6B:11:DD:9F:F6:E8:E6:20:97:B6:B0:50:28:EC:AE:5B:93:F4:81
            X509v3 Authority Key Identifier:
                keyid:66:E9:52:3D:9F:7C:86:C6:6D:2E:58:63:78:D3:E9:05:BE:E5:10:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/66E9523D9F7C86C66D2E586378D3E905BEE51041.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/66E9523D9F7C86C66D2E586378D3E905BEE51041.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVkdedd27NAeoi46o5H5HWRiwU5hCjMaWJimUE1Sk341/0/3137372e3132352e34302e302f32322d3234203d3e203532363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:3f:a2:d0:0a:d6:ca:d7:2c:7e:05:c4:f7:ca:f3:b0:23:f9:
         3e:da:bf:a4:a7:ff:4f:05:0b:f5:77:8d:e6:2e:21:98:cc:c5:
         57:7a:e5:1b:36:a6:93:a2:a4:76:c6:87:92:52:94:df:f1:8f:
         76:11:74:22:9e:7e:d3:5a:5f:96:62:e8:31:6a:cd:b5:94:7b:
         78:a7:84:5c:2c:5d:f5:44:e7:ef:be:18:3e:0c:12:c4:9e:98:
         9f:7e:90:b6:5f:5a:59:7a:c6:2c:97:32:94:c2:fc:97:b0:97:
         11:d2:8b:3a:6e:ed:4a:e9:34:a3:ee:41:4a:12:87:a4:60:8b:
         2e:e6:39:c9:e7:28:64:bd:e3:54:d4:c4:48:f1:00:bf:f6:11:
         78:31:82:09:6f:66:f8:9c:47:a7:e6:ea:8e:20:93:12:3c:d3:
         b5:46:30:30:75:87:bf:b0:ce:f1:b2:b1:a4:b5:77:7e:66:4d:
         f6:8c:80:eb:55:8f:0d:e7:fc:0b:ea:19:2a:99:82:9c:89:ff:
         e5:c4:5b:be:ad:2d:b4:0f:6e:59:fd:ed:2b:80:21:53:b9:6a:
         bd:39:95:7e:5f:46:97:8e:9e:0a:dc:f6:4f:65:46:a6:97:ca:
         02:31:89:32:45:4f:ed:fe:4e:74:7d:fc:ea:88:b8:79:9a:42:
         37:c4:f3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org