Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3138352e302f32342d3234203d3e20323632353134.roa
File:                     3137372e35352e3138352e302f32342d3234203d3e20323632353134.roa (raw, json)
Hash identifier:          wq459kCSN/oIGAMFXuGy4fiNw0mh9PNdqhK2xTu6Kf0=
Subject key identifier:   CA:D7:F7:FA:6A:69:13:60:58:DE:0F:75:AC:71:0F:53:C3:1F:EF:9B
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       37940DE5042495F74254FB5F5BE9D9678FF8BD76
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3138352e302f32342d3234203d3e20323632353134.roa
Signing time:             Sun 19 Mar 2023 13:26:32 +0000
ROA not before:           Sun 19 Mar 2023 13:21:32 +0000
ROA not after:            Sun 17 Mar 2024 13:26:32 +0000
asID:                     262514
IP address blocks:        177.55.185.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:94:0d:e5:04:24:95:f7:42:54:fb:5f:5b:e9:d9:67:8f:f8:bd:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 19 13:21:32 2023 GMT
            Not After : Mar 17 13:26:32 2024 GMT
        Subject: CN=CAD7F7FA6A69136058DE0F75AC710F53C31FEF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8f:53:32:71:cf:70:0b:58:c3:82:89:ee:5f:
                    4e:7a:b4:3e:7b:72:23:87:0c:c5:25:72:77:5f:76:
                    f7:13:2d:34:75:1e:1a:0d:04:4c:c0:79:29:60:cd:
                    b1:72:a3:a3:a7:1c:84:cb:6a:43:e6:95:57:42:cf:
                    3f:47:e7:e1:f2:3d:c3:2f:04:c8:7f:a2:ce:ac:ea:
                    04:af:be:d6:0a:7a:59:cf:83:29:a8:41:05:c4:a5:
                    ec:80:b1:d1:bd:b8:13:9a:d4:a7:79:8d:a1:75:0b:
                    32:a0:bd:1a:8a:5b:6f:37:97:9a:58:e1:f3:d1:e0:
                    a8:d3:4f:58:99:89:d6:d2:6a:e2:82:93:6a:65:49:
                    3a:1d:cf:0c:0a:70:bc:4d:a0:71:c3:d9:90:12:85:
                    5d:4f:06:a1:7a:3a:12:a9:75:75:b4:51:dd:58:79:
                    7a:00:75:cb:4b:7f:5a:7d:8e:8d:ae:65:7e:94:f6:
                    2a:35:21:7d:e0:4f:bb:a8:ea:90:15:b0:ab:43:e9:
                    5b:26:35:03:ad:38:11:3b:9f:11:19:9f:59:87:c2:
                    b4:d0:6b:c0:38:db:f0:1b:d3:aa:e8:13:0a:24:bf:
                    95:be:42:e3:18:f4:11:5f:71:96:d2:64:ef:d2:a2:
                    cc:bb:c8:0b:c3:49:22:fe:b8:54:f4:b1:83:da:9a:
                    bf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D7:F7:FA:6A:69:13:60:58:DE:0F:75:AC:71:0F:53:C3:1F:EF:9B
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3138352e302f32342d3234203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ce:3d:94:a5:a3:93:d9:0c:09:49:18:72:d2:0d:af:db:92:
         28:16:3e:ad:f3:e4:2c:d4:db:42:86:25:76:91:eb:33:be:91:
         38:09:1a:b7:cc:69:1d:2f:9a:55:7c:20:75:f7:43:ee:6c:70:
         ed:5e:c5:af:f5:7e:61:e8:44:b9:c9:45:bb:49:7a:b7:64:65:
         9e:97:b5:0e:43:b9:34:08:01:b3:1f:b0:0c:ad:f9:9c:64:16:
         24:5a:ae:66:5a:b1:dd:41:43:e8:2d:3a:59:53:22:b1:b2:02:
         c4:d2:58:91:ca:9a:a3:a2:32:07:2d:af:b7:89:4e:02:e6:93:
         ca:86:71:0a:7d:f9:4b:d9:4c:33:ae:4d:d2:20:c9:2e:3b:5a:
         4c:26:1f:26:a4:31:72:b6:d2:ba:77:cf:c2:5f:13:fd:c0:2d:
         7e:a4:5e:18:64:23:83:7f:5c:dd:de:e0:2f:71:a6:b2:28:29:
         7c:af:62:83:3d:f8:82:59:f0:70:01:3b:5a:46:a2:68:85:ea:
         e9:b4:e9:95:2e:94:e8:cd:48:6d:5d:f0:4b:14:b1:1d:83:44:
         2f:69:15:fb:6a:b7:ff:f8:61:db:fa:0d:3c:8c:07:0a:22:e2:
         6b:5d:36:1f:f3:60:9d:48:e2:c1:6a:ad:65:21:97:96:d1:f3:
         ba:ef:d0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:23:44 2025 by rpki-client