Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3232382e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3232382e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          LDLjJ3IpxEtdyE6tEbjK4WbRk4YciGML6b8b/UNFpac=
Subject key identifier:   D2:5B:9A:89:50:5B:17:4F:26:CE:4E:22:A7:FE:D5:30:17:BC:A6:F7
Certificate issuer:       /CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
Certificate serial:       34E9AF9E069B6ABAD913E24CE0A6D4FAA61759D1
Authority key identifier: F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3232382e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 14:18:21 +0000
ROA not before:           Sun 19 Mar 2023 14:13:21 +0000
ROA not after:            Sun 17 Mar 2024 14:18:21 +0000
asID:                     28656
IP address blocks:        177.55.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e9:af:9e:06:9b:6a:ba:d9:13:e2:4c:e0:a6:d4:fa:a6:17:59:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
        Validity
            Not Before: Mar 19 14:13:21 2023 GMT
            Not After : Mar 17 14:18:21 2024 GMT
        Subject: CN=D25B9A89505B174F26CE4E22A7FED53017BCA6F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:b7:c8:11:94:76:71:e8:44:91:09:cf:5f:
                    ae:23:6f:c5:de:3a:94:a6:fe:4e:2c:1b:a0:ba:1c:
                    83:2e:f4:39:16:3b:0e:d8:97:da:48:82:29:57:10:
                    6c:98:de:28:34:85:37:a0:13:51:ea:c7:b6:2a:2b:
                    24:c0:47:b6:76:51:c1:56:77:20:5a:c4:fb:a0:79:
                    66:a2:92:c2:a8:a8:72:3d:4e:05:d7:c1:40:16:95:
                    2a:71:bc:c0:49:f8:63:fa:94:f1:bc:dd:8b:6d:5e:
                    ca:23:9e:a7:b6:dc:89:27:dc:7d:63:5c:a0:90:64:
                    9f:b3:93:f2:24:0e:88:a4:f7:51:23:d2:2a:2b:e7:
                    5b:ef:bd:66:2c:13:56:df:67:7f:03:ca:b7:4a:1b:
                    6d:f9:b3:95:bb:ce:60:b7:91:29:a2:e8:87:8d:ae:
                    9f:8c:eb:99:46:a4:44:17:12:a4:8f:e1:4e:89:e1:
                    b8:65:59:fb:f7:f9:d3:b7:09:55:dd:40:ea:13:56:
                    b5:30:cf:5a:06:85:0d:f0:0e:ba:ee:ab:3d:94:6b:
                    f8:24:cd:bb:e1:e6:77:b0:40:c1:4e:b5:1f:11:18:
                    1f:84:ec:8b:8b:92:b6:b0:54:21:6e:e4:11:cb:d3:
                    82:b3:c2:d5:47:f0:1b:87:25:6b:68:78:3a:75:91:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5B:9A:89:50:5B:17:4F:26:CE:4E:22:A7:FE:D5:30:17:BC:A6:F7
            X509v3 Authority Key Identifier:
                keyid:F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3232382e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:23:36:fc:8b:97:98:7c:53:9f:cf:61:25:18:86:e6:b7:04:
         68:07:ee:75:3d:6a:01:c3:62:4f:74:17:2c:8d:81:c4:d2:d3:
         04:b5:f3:2c:86:7f:20:c8:c5:6a:a0:f3:93:db:01:37:a7:39:
         49:4d:54:2f:31:42:97:14:f4:f4:36:13:68:6d:4c:eb:09:8d:
         ae:e6:79:0c:8f:e7:2b:b5:4b:32:69:24:5e:c6:f4:8f:2c:38:
         66:b0:40:c4:a2:b2:81:14:ca:9c:41:8f:e1:26:32:05:8b:b9:
         bd:14:9a:a9:65:0d:ba:e1:8b:fe:01:a3:36:bc:96:0d:89:d6:
         f3:30:45:17:37:bb:01:2d:cd:61:db:17:9f:c2:5b:9e:3d:ac:
         7f:e1:d9:a2:9d:88:ee:97:fe:f3:cf:83:7c:1c:a9:80:57:b0:
         7c:49:e8:7c:0e:1d:11:af:be:3a:e6:be:72:a9:04:c3:d9:42:
         c1:a7:75:6c:5c:35:a1:ea:28:b6:c7:82:c8:d7:68:bd:39:b7:
         e6:6b:36:b7:fc:c0:07:33:8a:ab:8a:db:13:8e:ea:19:bf:b4:
         9a:c5:40:0d:81:a4:d7:1e:e5:ee:ee:a3:97:05:2b:b0:a4:4c:
         71:ac:44:30:1f:0b:e6:d6:86:2b:47:d5:98:b3:9f:94:94:ba:
         65:16:d7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org