Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3232372e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3232372e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          Gs6h4+/AMU8MUoRBjwOlclNvPsE3x/1qCYWsaYuGFuw=
Subject key identifier:   D8:B2:1C:70:98:9A:8E:BF:85:FC:F0:18:80:07:7C:7E:57:0E:92:EF
Certificate issuer:       /CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
Certificate serial:       1BFAD9D15B4D39CD2F5EE0F3E1579BF71FA86D6A
Authority key identifier: F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3232372e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 14:17:37 +0000
ROA not before:           Sun 19 Mar 2023 14:12:37 +0000
ROA not after:            Sun 17 Mar 2024 14:17:37 +0000
asID:                     28656
IP address blocks:        177.55.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fa:d9:d1:5b:4d:39:cd:2f:5e:e0:f3:e1:57:9b:f7:1f:a8:6d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
        Validity
            Not Before: Mar 19 14:12:37 2023 GMT
            Not After : Mar 17 14:17:37 2024 GMT
        Subject: CN=D8B21C70989A8EBF85FCF01880077C7E570E92EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d5:ff:89:55:99:73:e9:9c:16:6a:e3:bc:24:
                    f1:40:16:8d:a9:d4:4d:9e:cd:53:9e:98:22:19:76:
                    48:9b:de:63:c2:fb:ad:fb:e8:22:76:b5:7b:25:fa:
                    4d:a0:c6:bc:39:28:95:42:e1:14:8e:98:57:67:06:
                    44:2d:db:2f:73:89:99:0b:75:89:d6:43:49:75:8e:
                    b3:45:6c:ed:40:d7:f9:91:fb:90:74:6e:8b:95:a9:
                    8d:24:43:98:cc:75:a0:90:0e:f3:2a:b2:43:08:42:
                    95:af:0d:e6:57:b5:51:e5:31:8c:71:21:a8:4d:3f:
                    4e:db:43:40:94:d5:41:bf:70:5e:3e:b7:0e:ad:84:
                    4c:42:1f:e5:05:c7:46:43:9d:49:c0:5c:2d:f9:bd:
                    e9:60:a9:0f:8b:f1:86:69:14:1e:f7:d3:3c:3c:c0:
                    e4:b1:24:ae:0b:18:21:88:b7:e8:09:7d:c3:82:9e:
                    6d:7c:c3:c8:3b:1e:eb:10:6a:d0:e5:47:75:14:6c:
                    05:01:63:e4:77:a9:a5:b3:87:3f:c9:f1:a5:fd:b8:
                    79:e9:63:bf:0b:d8:f2:5c:c3:60:52:4e:a8:c3:9f:
                    39:d0:44:d1:17:0f:a1:bf:b0:c1:3a:b9:83:d0:1e:
                    00:7b:5b:dc:28:ef:c7:68:d8:1d:4b:08:64:8d:8a:
                    03:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B2:1C:70:98:9A:8E:BF:85:FC:F0:18:80:07:7C:7E:57:0E:92:EF
            X509v3 Authority Key Identifier:
                keyid:F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3232372e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:44:55:35:64:9b:f5:96:5f:90:11:6d:a1:d7:88:bf:07:a6:
         f1:40:2a:70:4a:a5:c8:1a:b1:35:59:fc:96:c6:d5:a4:a9:8d:
         04:bc:54:a4:48:9b:6c:63:0f:d9:e8:5a:e6:37:ab:11:06:8c:
         1e:a1:91:44:8a:81:d5:d2:81:86:f0:b6:a8:e4:89:8e:b4:df:
         3f:f6:2f:19:13:52:83:0c:b6:69:f9:94:ef:42:72:07:93:22:
         5d:8f:d6:42:58:2d:0e:9e:bf:19:95:09:90:e6:5a:1c:54:c2:
         0d:68:e8:a7:40:ca:87:22:ec:bc:5a:fc:c1:64:91:a2:d4:09:
         a4:a2:ad:05:22:9d:0f:b9:8f:21:79:f7:0c:f3:ba:61:f6:ee:
         88:56:29:b3:f1:86:fd:c0:f4:a7:7f:67:be:0e:4f:24:f3:4f:
         00:f5:23:30:d9:4a:1b:ec:5d:6a:b1:6e:fc:43:1e:13:84:a9:
         b1:78:31:36:72:da:ed:ad:18:56:bc:cc:18:83:06:20:87:9e:
         f4:23:e9:9d:d3:cb:75:e7:81:91:86:bd:f5:d9:39:c2:bd:5b:
         f7:69:d6:61:97:b6:99:aa:2c:a6:f8:e5:a2:39:6b:7a:c2:cf:
         8d:96:20:af:2d:9a:14:95:b6:f2:fb:a6:3e:fc:31:d5:fa:e7:
         3f:b5:7e:0e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG/rZ0VtNOc0vXuDz4Veb9x+obWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDQTVCNUU2QzVDQTBFRTRDOEEwMjQ4QzQyOTVCQjAy
NTczRkE1QzAeFw0yMzAzMTkxNDEyMzdaFw0yNDAzMTcxNDE3MzdaMDMxMTAvBgNV
BAMTKEQ4QjIxQzcwOTg5QThFQkY4NUZDRjAxODgwMDc3QzdFNTcwRTkyRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1f+JVZlz6ZwWauO8JPFAFo2p
1E2ezVOemCIZdkib3mPC+6376CJ2tXsl+k2gxrw5KJVC4RSOmFdnBkQt2y9ziZkL
dYnWQ0l1jrNFbO1A1/mR+5B0bouVqY0kQ5jMdaCQDvMqskMIQpWvDeZXtVHlMYxx
IahNP07bQ0CU1UG/cF4+tw6thExCH+UFx0ZDnUnAXC35velgqQ+L8YZpFB730zw8
wOSxJK4LGCGIt+gJfcOCnm18w8g7HusQatDlR3UUbAUBY+R3qaWzhz/J8aX9uHnp
Y78L2PJcw2BSTqjDnznQRNEXD6G/sME6uYPQHgB7W9wo78do2B1LCGSNigMhAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2LIccJiajr+F/PAYgAd8flcOku8wHwYDVR0j
BBgwFoAU8spbXmxcoO5MigJIxClbsCVz+lwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMC9GMkNBNUI1RTZDNUNBMEVFNEM4QTAyNDhDNDI5NUJCMDI1NzNGQTVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YyQ0E1QjVFNkM1Q0EwRUU0
QzhBMDI0OEM0Mjk1QkIwMjU3M0ZBNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzAv
MzEzNzM3MmUzNTM1MmUzMjMyMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzYzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTfjMA0GCSqGSIb3DQEBCwUAA4IBAQAJRFU1ZJv1
ll+QEW2h14i/B6bxQCpwSqXIGrE1WfyWxtWkqY0EvFSkSJtsYw/Z6FrmN6sRBowe
oZFEioHV0oGG8Lao5ImOtN8/9i8ZE1KDDLZp+ZTvQnIHkyJdj9ZCWC0Onr8ZlQmQ
5locVMINaOinQMqHIuy8WvzBZJGi1Amkoq0FIp0PuY8hefcM87ph9u6IVimz8Yb9
wPSnf2e+Dk8k808A9SMw2Uob7F1qsW78Qx4ThKmxeDE2ctrtrRhWvMwYgwYgh570
I+md08t154GRhr312TnCvVv3adZhl7aZqiym+OWiOWt6ws+NliCvLZoUlbby+6Y+
/DHV+uc/tX4O
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:21 2025 by rpki-client