Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3138302e302f32322d3232203d3e20323632353134.roa
File:                     3137372e35352e3138302e302f32322d3232203d3e20323632353134.roa (raw, json)
Hash identifier:          i1WV3umYjQ19OSlX5LzPVY6rKGbNsiua8RKt0ZIcJKA=
Subject key identifier:   8F:3A:D3:DF:8E:31:14:30:0A:25:89:82:81:BE:A4:E8:C3:BA:5B:2F
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       41DB4F69FE60DF039715B1F73CA59EC477DDBC08
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3138302e302f32322d3232203d3e20323632353134.roa
Signing time:             Sun 19 Mar 2023 13:26:29 +0000
ROA not before:           Sun 19 Mar 2023 13:21:29 +0000
ROA not after:            Sun 17 Mar 2024 13:26:29 +0000
asID:                     262514
IP address blocks:        177.55.180.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:db:4f:69:fe:60:df:03:97:15:b1:f7:3c:a5:9e:c4:77:dd:bc:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 19 13:21:29 2023 GMT
            Not After : Mar 17 13:26:29 2024 GMT
        Subject: CN=8F3AD3DF8E3114300A25898281BEA4E8C3BA5B2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:8a:6b:39:0e:31:c4:8c:4f:bd:dc:87:2f:
                    43:5d:72:70:f9:29:ca:bf:e8:66:7a:f3:0a:09:aa:
                    a1:1c:97:cd:1d:e3:3e:8a:58:c7:2b:e4:eb:a7:f0:
                    da:20:b9:e1:ba:48:d3:85:dc:0d:c2:89:17:7e:51:
                    15:fd:5f:da:28:cc:39:a8:ee:38:a7:23:9a:94:0d:
                    10:32:aa:a8:a9:cd:de:48:4c:c0:b5:be:c4:1e:a9:
                    8b:04:65:d1:81:c9:7d:f3:4e:de:ce:cd:6c:81:58:
                    73:c1:a2:21:21:34:9c:d1:fd:4f:59:1c:f2:d4:16:
                    5b:71:a7:c2:b6:1a:39:27:1a:00:25:cf:5a:9c:d6:
                    2e:ea:db:1a:c2:5e:82:31:5b:6a:7c:54:eb:a7:21:
                    27:7b:31:8e:f8:9c:ea:da:9e:f3:9c:9a:0f:f5:ec:
                    bc:46:08:0a:bc:6e:de:59:97:97:69:40:c1:af:4f:
                    91:80:e3:3b:be:db:aa:7d:7f:fd:a2:8e:e3:22:91:
                    79:36:c9:b9:2a:7d:29:05:cd:0c:a1:ac:38:54:c8:
                    62:73:8d:65:02:85:77:9f:c2:94:0e:54:d0:b1:5a:
                    9a:42:27:6e:7c:69:5a:a2:6e:f8:3b:7e:b5:30:b1:
                    03:c6:9a:6a:d0:e1:c4:3c:f2:75:9d:82:15:79:e4:
                    51:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:3A:D3:DF:8E:31:14:30:0A:25:89:82:81:BE:A4:E8:C3:BA:5B:2F
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3138302e302f32322d3232203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:49:c4:8e:98:19:f0:22:c6:08:ab:ff:47:08:f9:a0:12:43:
         88:cd:b0:0b:a2:20:66:7a:9e:46:7e:4a:a8:b8:88:80:77:74:
         72:23:37:73:0a:30:f9:07:21:7e:86:0d:23:f1:79:3b:0b:68:
         eb:b2:fd:92:6e:2d:16:bb:f9:69:31:18:ef:12:ce:aa:bb:01:
         57:b5:90:42:d6:27:3e:f5:23:4f:c3:1f:dc:bd:63:fa:51:fe:
         d1:85:1b:df:81:81:65:a0:b0:a1:30:cb:e8:b7:32:5c:89:90:
         02:4f:a6:f9:2b:3e:a2:7d:c3:42:31:bc:38:14:96:b4:4e:ed:
         7e:f9:63:51:6c:96:82:85:a3:f0:27:c5:a1:68:b3:90:06:18:
         37:b1:62:32:5c:06:80:1b:9a:49:99:7a:69:ce:c3:88:a0:cf:
         11:c9:4c:09:1e:29:c2:52:9f:87:56:51:d2:04:40:e4:12:8c:
         e0:b7:a1:4e:05:42:8f:48:9e:98:c0:3c:66:0d:6c:7e:1c:43:
         4c:c9:f0:a3:13:e9:15:ca:ce:1c:72:f4:4d:f1:12:5c:ca:9c:
         1a:45:83:30:61:65:e4:1e:d2:ec:5f:07:60:7a:ed:df:40:42:
         d2:6c:d4:4e:4b:ce:db:2e:5a:5d:81:7d:0f:c5:a7:b3:11:43:
         0b:68:30:62
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQdtPaf5g3wOXFbH3PKWexHfdvAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJCMjg5Nzk1MzQxNTJENTZDREI4OTQxODIyMDA0QjIx
QzA0NDQ3NjAeFw0yMzAzMTkxMzIxMjlaFw0yNDAzMTcxMzI2MjlaMDMxMTAvBgNV
BAMTKDhGM0FEM0RGOEUzMTE0MzAwQTI1ODk4MjgxQkVBNEU4QzNCQTVCMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz+oprOQ4xxIxPvdyHL0NdcnD5
Kcq/6GZ68woJqqEcl80d4z6KWMcr5Oun8NogueG6SNOF3A3CiRd+URX9X9oozDmo
7jinI5qUDRAyqqipzd5ITMC1vsQeqYsEZdGByX3zTt7OzWyBWHPBoiEhNJzR/U9Z
HPLUFltxp8K2GjknGgAlz1qc1i7q2xrCXoIxW2p8VOunISd7MY74nOranvOcmg/1
7LxGCAq8bt5Zl5dpQMGvT5GA4zu+26p9f/2ijuMikXk2ybkqfSkFzQyhrDhUyGJz
jWUChXefwpQOVNCxWppCJ258aVqibvg7frUwsQPGmmrQ4cQ88nWdghV55FH7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjzrT344xFDAKJYmCgb6k6MO6Wy8wHwYDVR0j
BBgwFoAUa7KJeVNBUtVs24lBgiAEshwERHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMC82QkIyODk3OTUzNDE1MkQ1NkNEQjg5NDE4MjIwMDRCMjFDMDQ0NDc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZCQjI4OTc5NTM0MTUyRDU2
Q0RCODk0MTgyMjAwNEIyMUMwNDQ0NzYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzAv
MzEzNzM3MmUzNTM1MmUzMTM4MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNTMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKxN7QwDQYJKoZIhvcNAQELBQADggEBACVJxI6Y
GfAixgir/0cI+aASQ4jNsAuiIGZ6nkZ+Sqi4iIB3dHIjN3MKMPkHIX6GDSPxeTsL
aOuy/ZJuLRa7+WkxGO8Szqq7AVe1kELWJz71I0/DH9y9Y/pR/tGFG9+BgWWgsKEw
y+i3MlyJkAJPpvkrPqJ9w0IxvDgUlrRO7X75Y1FsloKFo/AnxaFos5AGGDexYjJc
BoAbmkmZemnOw4igzxHJTAkeKcJSn4dWUdIEQOQSjOC3oU4FQo9InpjAPGYNbH4c
Q0zJ8KMT6RXKzhxy9E3xElzKnBpFgzBhZeQe0uxfB2B67d9AQtJs1E5LztsuWl2B
fQ/Fp7MRQwtoMGI=
-----END CERTIFICATE-----
Generated at Mon Apr 21 11:01:02 2025 by rpki-client