Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3139302e302f32332d3233203d3e20323632353134.roa
File:                     3137372e35352e3139302e302f32332d3233203d3e20323632353134.roa (raw, json)
Hash identifier:          3NQLeEwf/GuGVuriYbTZQxGxOs1oysgwHxZg5wPrUc8=
Subject key identifier:   E2:9A:8A:C8:49:C5:AE:DB:74:D0:C8:F8:BE:13:A2:7A:46:DA:7C:CA
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       77C5F40F0BC5CE820145FD3513A3B7626D29989A
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3139302e302f32332d3233203d3e20323632353134.roa
Signing time:             Sun 19 Mar 2023 13:26:34 +0000
ROA not before:           Sun 19 Mar 2023 13:21:34 +0000
ROA not after:            Sun 17 Mar 2024 13:26:34 +0000
asID:                     262514
IP address blocks:        177.55.190.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:c5:f4:0f:0b:c5:ce:82:01:45:fd:35:13:a3:b7:62:6d:29:98:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 19 13:21:34 2023 GMT
            Not After : Mar 17 13:26:34 2024 GMT
        Subject: CN=E29A8AC849C5AEDB74D0C8F8BE13A27A46DA7CCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:78:7b:d7:c6:30:10:75:59:55:59:7c:c6:61:
                    92:2d:d1:ae:00:6a:7f:9c:90:f0:96:5a:3f:11:e4:
                    51:47:2b:f9:f3:21:42:90:e0:35:54:a8:7b:40:36:
                    98:5e:9f:2b:3d:00:93:52:ac:eb:b5:af:fd:f2:8c:
                    5a:f4:56:f9:bc:b5:e3:23:1f:60:a0:44:44:b9:99:
                    cb:9a:10:35:3b:e4:b0:9e:0e:e4:28:d2:d0:8c:8e:
                    24:0c:9a:32:e3:b8:13:e7:4f:0b:b5:65:1d:7b:6f:
                    37:d5:53:61:4f:2a:0d:94:7a:c1:b0:32:62:ca:cf:
                    e2:c7:59:10:d1:e9:02:b2:15:2e:20:b0:9b:e8:fa:
                    e2:ac:35:1a:7c:ba:40:88:cd:84:ba:cb:30:37:ba:
                    f5:8d:7f:68:c4:cd:03:9e:8a:10:29:37:1e:70:e5:
                    8c:2b:0f:91:b6:d6:12:ea:62:1c:57:63:55:f7:8a:
                    14:e8:c8:f9:61:13:72:ef:c3:55:12:f7:a8:1e:f8:
                    7a:ff:4d:fa:87:78:55:8e:b2:9a:98:0d:3a:94:42:
                    5f:42:90:91:69:2c:ca:8e:b3:c4:8f:4e:13:fe:8f:
                    e6:3c:ac:90:6a:c0:df:c8:dd:87:2a:ed:6c:b0:63:
                    33:7a:66:64:e2:48:1b:a8:35:79:1e:80:57:fe:1e:
                    0b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:9A:8A:C8:49:C5:AE:DB:74:D0:C8:F8:BE:13:A2:7A:46:DA:7C:CA
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3139302e302f32332d3233203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:2d:49:58:ba:f4:4f:06:d7:dc:70:d5:6f:24:22:87:ec:e2:
         82:b5:16:7e:b8:f5:3a:69:45:3c:07:f5:d4:e8:21:3d:57:9a:
         bd:58:c5:44:8d:13:67:b4:2f:38:a4:06:2b:91:80:a3:7b:64:
         c5:07:65:2f:9d:87:88:84:d8:7e:36:05:a9:e6:68:70:77:5f:
         0b:f4:94:f0:a6:3e:c7:0b:74:48:09:99:9b:92:6d:21:0c:c3:
         53:94:71:38:9e:2c:5e:52:32:51:be:99:ac:12:40:68:76:88:
         d7:8f:27:db:c5:66:27:c1:02:b0:d4:73:1a:6a:2b:92:4a:87:
         75:c1:40:bb:ef:7a:68:4a:1e:e3:11:50:52:c9:0a:f6:f1:f9:
         d8:38:0e:10:d2:7a:6b:ed:b5:77:8d:fc:61:9c:29:5f:25:2e:
         7e:36:18:f4:83:2f:2f:ce:3d:cc:79:21:84:c9:64:fb:70:3a:
         d2:9a:7a:22:2f:30:e8:1c:c0:d5:f9:a7:92:9c:e4:ca:4d:68:
         ce:cd:03:f2:7c:d0:b3:f6:39:fd:84:a8:b9:0d:ad:d0:b9:b1:
         ee:9e:fd:98:64:7b:96:30:15:0f:c8:be:d4:fc:19:fe:95:45:
         64:c4:b7:c4:5e:f9:d1:1e:8b:c5:1d:e6:74:a9:42:c2:28:a8:
         77:c7:53:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:51:32 2025 by rpki-client