Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3138312e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3138312e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          Sel2dv9oixaBgCgBUBoxNm6R1MSctLvy2q3QWjyOAH0=
Subject key identifier:   3D:B7:85:36:09:C8:A8:AD:8F:EF:C4:B3:C9:7C:6B:8B:62:7B:70:6A
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       76158DBEB9CAB5F4FD06442A13DD151A6F775BA1
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3138312e302f32342d3234203d3e203238363536.roa
Signing time:             Fri 10 Mar 2023 19:23:23 +0000
ROA not before:           Fri 10 Mar 2023 19:18:23 +0000
ROA not after:            Fri 08 Mar 2024 19:23:23 +0000
asID:                     28656
IP address blocks:        177.55.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:15:8d:be:b9:ca:b5:f4:fd:06:44:2a:13:dd:15:1a:6f:77:5b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 10 19:18:23 2023 GMT
            Not After : Mar  8 19:23:23 2024 GMT
        Subject: CN=3DB7853609C8A8AD8FEFC4B3C97C6B8B627B706A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:03:a1:dd:36:35:e6:db:77:da:4a:88:d6:75:
                    f3:77:89:fa:52:7c:7f:73:0f:33:61:2b:3a:a2:48:
                    f3:fd:66:fc:23:4a:12:ac:24:4b:ca:44:55:8b:29:
                    90:10:9a:09:8c:76:a4:54:9b:c3:61:ac:c1:af:ea:
                    96:58:d8:95:15:84:4d:e5:85:5b:f0:a7:8d:ae:86:
                    39:7e:ae:a1:81:ec:88:15:81:99:9f:c7:d1:06:78:
                    70:c2:cb:6b:79:25:a8:53:60:c5:b3:64:6d:48:db:
                    9f:63:b8:72:32:7d:24:53:79:7e:66:09:0f:69:d8:
                    9c:9c:bf:62:a3:3f:44:7f:1c:a4:d4:1e:34:a2:22:
                    66:3d:be:84:c8:ea:03:59:a7:af:66:59:8c:a1:2e:
                    41:de:b5:86:fe:03:ac:6e:e9:b8:dc:d3:7f:7e:fe:
                    52:c7:17:2e:8f:09:08:13:64:d1:32:7b:fc:76:16:
                    bf:80:5e:37:29:c6:26:da:32:b8:5b:07:5a:14:a2:
                    2b:aa:9c:c9:d5:4e:42:81:58:ac:e1:4e:37:f4:d8:
                    69:d2:b4:1e:87:1c:e2:b5:f2:df:87:c8:53:d7:de:
                    f3:57:62:04:ad:8c:ad:fd:f7:da:39:72:90:57:4f:
                    bb:40:d2:93:73:ad:b0:b5:26:11:ff:42:95:4a:2b:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B7:85:36:09:C8:A8:AD:8F:EF:C4:B3:C9:7C:6B:8B:62:7B:70:6A
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3138312e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:e1:96:cf:06:02:ac:68:a3:7c:2b:bd:dd:f1:1c:cb:e1:d0:
         d0:c8:b2:39:3b:94:81:b3:e1:cb:89:51:ed:c4:58:da:89:53:
         77:08:ef:19:b3:60:42:83:a4:0a:10:fe:c4:30:0f:f6:0b:7c:
         18:2f:4f:4d:2b:a1:c3:dd:75:6c:a8:6f:d7:bb:b3:04:ea:1e:
         cf:9c:e6:46:2f:01:f5:ff:8c:45:3c:fd:45:cf:0d:17:9e:ae:
         79:f6:09:e7:4c:0d:d9:14:10:c9:ef:1e:17:c5:42:87:ca:41:
         5d:b3:0e:98:69:03:9f:3d:13:ca:03:43:f6:e3:5e:0a:e9:bb:
         35:ca:33:b5:28:c4:11:e8:bf:48:78:bd:5e:a8:8c:9c:97:d4:
         34:4e:01:8c:c2:41:48:6e:f0:47:83:98:7b:13:5b:fe:b2:b8:
         9e:17:50:eb:0a:e8:90:08:10:5f:c9:17:fc:cb:2d:ab:db:7b:
         a4:89:86:40:80:b9:81:09:b5:5e:53:b9:37:0a:38:71:a0:1e:
         8a:94:33:38:92:e6:cb:24:ab:91:ea:bd:d3:10:89:39:4a:ae:
         a3:04:bf:d2:ff:10:50:9d:02:c3:ad:4d:1a:89:81:93:9b:7b:
         61:88:df:f6:c6:43:63:23:d3:8e:6a:20:66:6a:88:55:1d:a0:
         2a:76:c6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org