Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3138392e302f32342d3234203d3e20323632353134.roa
File:                     3137372e35352e3138392e302f32342d3234203d3e20323632353134.roa (raw, json)
Hash identifier:          e4h4/cf5F93B5JazbYaa89pOlyuk1QuPdgUHWkCyupI=
Subject key identifier:   39:88:17:55:33:38:0D:B7:ED:A1:60:17:84:D9:CE:9A:A4:DF:AC:C2
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       18E88FEE125AB8E6A74D0824AA440B5BB9815981
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3138392e302f32342d3234203d3e20323632353134.roa
Signing time:             Sun 19 Mar 2023 13:26:30 +0000
ROA not before:           Sun 19 Mar 2023 13:21:30 +0000
ROA not after:            Sun 17 Mar 2024 13:26:30 +0000
asID:                     262514
IP address blocks:        177.55.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e8:8f:ee:12:5a:b8:e6:a7:4d:08:24:aa:44:0b:5b:b9:81:59:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 19 13:21:30 2023 GMT
            Not After : Mar 17 13:26:30 2024 GMT
        Subject: CN=3988175533380DB7EDA1601784D9CE9AA4DFACC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:02:2d:e5:68:4a:b7:72:97:f6:f7:6f:91:93:
                    f3:da:c1:fd:a1:c2:7f:d0:3c:99:f3:9d:ca:18:ef:
                    53:57:2b:93:14:03:12:d7:47:34:69:cf:24:30:6a:
                    d5:2e:52:c7:3c:aa:c3:22:7b:21:5a:a6:ba:cb:c7:
                    17:aa:8c:63:f2:47:07:05:1b:bf:18:16:65:b9:c5:
                    98:b1:d8:da:cd:49:98:ac:e2:0e:7d:6e:b3:77:ad:
                    e0:9c:fb:2b:97:22:0c:f8:48:5b:8e:80:66:37:0a:
                    78:0a:95:54:a0:a4:9c:e8:c3:55:0a:43:25:6c:b5:
                    d4:58:c4:78:90:46:b4:59:39:8c:c6:34:35:79:89:
                    07:60:38:0c:76:65:78:be:b0:a3:29:ee:9e:c9:3f:
                    37:c4:9d:14:9b:e6:c5:db:3d:9a:e3:8a:d8:4d:23:
                    72:00:98:06:4b:e1:ab:a8:b2:3d:05:fb:01:1c:c1:
                    a0:bf:26:89:9e:a1:3a:19:df:66:fa:4e:2e:f4:79:
                    f0:f0:ea:a9:be:80:de:59:4a:54:9d:0a:1f:c7:67:
                    5e:c6:f9:68:08:6c:44:12:73:77:48:eb:b7:47:d3:
                    9c:4c:3d:ca:2b:d6:12:57:58:8e:36:ec:54:20:6f:
                    d5:fa:27:f5:33:62:d3:c6:d7:f9:0d:53:85:fa:11:
                    e3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:88:17:55:33:38:0D:B7:ED:A1:60:17:84:D9:CE:9A:A4:DF:AC:C2
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3138392e302f32342d3234203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c7:7d:90:a7:38:73:36:d6:93:bb:91:c3:e2:f5:bb:fb:7f:
         2a:0f:5c:76:dc:7e:93:ce:ca:60:41:f3:20:62:84:eb:92:ae:
         9e:33:fe:9e:34:b2:6f:2a:d1:5a:b2:a0:74:10:1a:e5:ed:b8:
         c1:9c:86:59:a2:bb:6a:9d:eb:bf:df:78:de:b2:a6:3d:38:a1:
         4a:8c:6c:17:30:75:28:da:01:ee:31:80:34:9a:81:c8:62:40:
         03:98:1a:99:c0:17:d1:cb:4e:1d:b4:e3:5d:41:84:48:c0:ef:
         51:02:02:53:81:5a:ba:d7:03:04:86:f1:ee:17:c7:1f:b5:30:
         ae:76:af:b6:cf:40:47:1d:c7:ce:ca:be:b8:6a:41:2c:2d:08:
         b9:8f:dc:99:a9:1a:9a:ca:ff:04:b1:22:23:f0:f3:29:b9:53:
         1d:5b:d6:47:50:a2:3e:d9:b8:d5:a9:30:3a:60:9b:4b:f2:ba:
         c8:18:72:1b:f1:93:d3:78:20:00:69:94:1f:97:33:db:a6:19:
         2b:5d:4b:cf:84:db:ca:c2:e1:50:8c:c0:9b:77:18:70:29:d8:
         ae:cc:2a:d4:e1:59:33:36:6f:c3:df:de:e4:28:93:26:06:f2:
         e9:f9:fc:e8:cb:7f:a4:4e:55:95:28:eb:88:eb:4a:e1:99:fd:
         c8:1b:ca:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:41:56 2025 by rpki-client