Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3137362e302f32312d3231203d3e20323632353134.roa
File:                     3137372e35352e3137362e302f32312d3231203d3e20323632353134.roa (raw, json)
Hash identifier:          N8Jn3jCq42wKyzkyrKw74DAby06fQEhXCjPz1kdQvQs=
Subject key identifier:   60:1F:D9:C2:0F:EC:75:D1:FF:03:14:80:04:FF:CC:0A:D9:C2:25:9C
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       0A43E42DA77FEDD1B1BCCBAC4A7AAAB2D8C70BC7
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3137362e302f32312d3231203d3e20323632353134.roa
Signing time:             Sun 19 Mar 2023 13:26:29 +0000
ROA not before:           Sun 19 Mar 2023 13:21:29 +0000
ROA not after:            Sun 17 Mar 2024 13:26:29 +0000
asID:                     262514
IP address blocks:        177.55.176.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:43:e4:2d:a7:7f:ed:d1:b1:bc:cb:ac:4a:7a:aa:b2:d8:c7:0b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 19 13:21:29 2023 GMT
            Not After : Mar 17 13:26:29 2024 GMT
        Subject: CN=601FD9C20FEC75D1FF03148004FFCC0AD9C2259C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c9:73:6c:7f:e7:aa:76:a6:23:08:59:d3:78:
                    0b:4b:04:43:6e:01:4a:02:7a:23:1d:d3:7d:7b:f9:
                    8f:37:c1:aa:24:b9:4a:9a:74:5a:89:2d:3c:11:53:
                    3e:d4:85:14:c2:90:5d:87:09:e9:6f:27:c2:41:30:
                    3a:55:ea:66:b4:5b:51:53:8b:e4:bb:a6:48:6c:f3:
                    55:5f:c8:f7:84:7d:07:94:de:19:c6:06:81:8e:7f:
                    69:99:10:5a:83:d8:8e:06:61:32:9f:ec:48:cc:1a:
                    a1:35:ed:7a:f9:53:75:6a:63:1e:b8:a2:cf:65:06:
                    7e:a4:a5:8c:e6:7c:44:ee:86:f5:0d:43:4b:6b:96:
                    95:59:9a:51:34:5a:2e:5b:bf:5d:d5:6e:54:1c:f6:
                    72:bc:c9:e9:8a:54:35:ce:fb:ef:93:56:da:2b:eb:
                    67:5f:37:f6:b8:07:3f:68:71:c7:ee:b5:7a:25:04:
                    af:8d:c4:7d:14:65:a0:27:54:a4:3e:8c:49:99:91:
                    38:7a:18:be:44:1d:e2:76:6d:8a:27:43:65:d6:f4:
                    03:18:88:2e:3d:16:76:43:35:92:a2:e9:78:3a:fb:
                    72:d0:fe:24:39:b8:32:12:54:38:0a:cb:87:1f:59:
                    77:6a:71:53:68:e8:be:5b:c4:88:2b:fa:e3:41:c9:
                    71:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1F:D9:C2:0F:EC:75:D1:FF:03:14:80:04:FF:CC:0A:D9:C2:25:9C
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3137362e302f32312d3231203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:f7:c5:b6:5b:65:f2:c2:05:71:6c:8a:c8:a5:da:e7:78:a4:
         84:4f:df:06:95:a6:c5:ab:60:99:42:29:ed:47:56:a9:e6:64:
         53:44:07:ec:a5:2a:e9:65:bc:21:7e:92:79:37:81:9f:74:36:
         ee:49:a9:32:eb:b1:4f:a1:18:cb:77:4a:43:d0:03:ab:5a:7d:
         ed:f2:fd:87:d5:41:a2:2a:0d:b7:eb:0a:25:f8:3c:e0:0e:15:
         f9:6f:6f:95:3a:6a:07:a0:08:bc:3c:ec:42:24:fd:2d:2a:63:
         b1:a7:4a:9b:d5:39:84:07:17:5d:05:27:66:a1:63:3a:e0:03:
         79:b1:5c:88:17:3f:d4:9d:29:ba:31:c0:60:87:16:3c:a1:f3:
         3d:27:c7:b3:e8:66:5a:b3:3f:94:38:85:9c:08:2b:c7:53:54:
         0f:61:4d:08:10:27:cf:3b:96:ec:70:24:1a:f9:46:70:c0:75:
         fd:40:fc:ce:0c:50:1e:3a:b7:18:24:dd:7a:fc:35:07:38:27:
         dd:11:56:ba:1c:f5:1d:41:cc:6c:df:1e:55:c7:e9:b8:ee:bb:
         71:6c:47:0a:9f:39:dd:bd:4a:59:0a:d1:55:3f:6b:40:7d:be:
         01:3e:c4:46:bc:ab:82:05:8d:d6:d8:a5:44:57:fa:29:70:43:
         77:ca:2c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org