Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3232352e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3232352e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          VMXmx8t3rxYXTrUnPncAiL0Q2nkxk2RIEzcT7xL3K3o=
Subject key identifier:   D6:25:D9:E6:2C:EB:0F:13:8C:EB:39:B2:A9:FA:D5:4D:04:E4:5A:6F
Certificate issuer:       /CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
Certificate serial:       58A01EE77FB46011CAC95BE62A1F46B7A16BEA35
Authority key identifier: F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3232352e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 14:17:18 +0000
ROA not before:           Sun 19 Mar 2023 14:12:18 +0000
ROA not after:            Sun 17 Mar 2024 14:17:18 +0000
asID:                     28656
IP address blocks:        177.55.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a0:1e:e7:7f:b4:60:11:ca:c9:5b:e6:2a:1f:46:b7:a1:6b:ea:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
        Validity
            Not Before: Mar 19 14:12:18 2023 GMT
            Not After : Mar 17 14:17:18 2024 GMT
        Subject: CN=D625D9E62CEB0F138CEB39B2A9FAD54D04E45A6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:50:5b:21:c9:72:25:57:6a:43:cd:66:a7:
                    41:91:2e:39:6d:bc:dd:59:a1:02:7f:1a:e3:60:5e:
                    2d:a0:8d:fd:e6:3d:bc:87:f3:b8:59:19:4c:8c:aa:
                    d5:52:38:ce:97:cb:6a:6c:8a:d3:f0:7e:e2:d4:da:
                    a8:f7:4a:ae:66:f4:01:ba:3a:d3:08:29:95:5c:8d:
                    f0:e6:71:47:16:c2:44:89:0b:df:43:a3:23:13:b2:
                    a6:5c:5a:7e:4f:f4:6a:05:bf:e2:99:17:5d:46:ad:
                    66:57:2c:62:a9:46:98:c9:ba:49:90:e1:fb:45:7a:
                    8b:d2:cf:84:19:45:7a:8f:30:45:f4:c4:db:b6:45:
                    00:6a:42:33:c3:2e:a4:17:5e:d7:9c:c2:e3:50:70:
                    bf:cf:8a:39:e0:af:1e:0c:ad:da:48:db:6b:ef:6f:
                    ed:68:7c:98:fd:dc:90:66:a3:63:72:4c:97:df:b6:
                    8f:25:42:62:ac:22:74:a6:6e:dc:7c:a0:69:7a:c9:
                    a9:39:04:9c:12:0d:6a:d7:a0:bf:ea:bd:6c:73:aa:
                    ed:99:10:c0:3c:96:92:6a:59:7c:f0:30:94:5b:b6:
                    3d:6d:43:5b:a0:40:d0:7e:ca:2b:bd:76:b7:18:f6:
                    8e:a8:9d:b5:8d:5e:b4:da:09:fe:97:18:a0:dd:98:
                    44:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:25:D9:E6:2C:EB:0F:13:8C:EB:39:B2:A9:FA:D5:4D:04:E4:5A:6F
            X509v3 Authority Key Identifier:
                keyid:F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3232352e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:e8:54:76:68:78:33:30:61:d4:bc:86:88:86:19:a9:89:25:
         71:c4:d2:21:cc:95:15:d0:a1:87:c3:30:7e:a6:c9:72:a9:46:
         e5:3f:2a:e1:b7:64:23:52:dc:de:9d:56:9d:98:a8:45:b8:f3:
         d0:98:c0:0a:dd:c2:c0:b7:26:16:9a:43:42:54:10:88:e4:b0:
         99:a8:c4:49:48:d4:82:35:db:09:42:e0:9d:78:e0:88:83:39:
         bd:70:a0:89:91:d4:54:fc:06:ad:90:53:1c:63:cc:4e:db:b1:
         d8:53:99:89:cd:fa:7a:6d:62:70:95:ab:db:16:00:aa:df:a7:
         24:df:bf:d3:b8:55:f3:0b:7c:6c:7d:3a:ad:26:c7:3d:22:4a:
         20:54:f3:7c:ac:57:f7:6e:86:f7:5f:b3:9a:71:bf:59:f4:de:
         79:41:6c:70:ea:c7:b8:3a:80:c7:76:f5:18:de:db:72:7d:56:
         86:2f:91:65:31:7d:8d:83:8d:32:68:f2:0c:71:05:5a:7b:bc:
         70:bc:28:27:f0:7e:49:4f:95:2c:c6:83:e2:0f:7f:a7:8f:d4:
         ae:d6:e1:42:b5:de:5e:6d:5f:de:55:4b:a4:fb:20:b3:76:01:
         78:7d:ce:45:8e:e0:d1:96:87:74:ba:09:0b:18:22:4e:b9:f8:
         67:d4:82:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org