Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3232392e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3232392e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          ssjrrHqM4HWhNBQMmlP6fdfKljPRS62bd+yWlucBqus=
Subject key identifier:   F6:5E:30:7D:13:B3:38:8E:53:D0:97:04:66:4C:20:87:D4:5F:F7:CD
Certificate issuer:       /CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
Certificate serial:       6B068170A9FBDDBCA3A000EFC903533348870A80
Authority key identifier: F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3232392e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 14:18:31 +0000
ROA not before:           Sun 19 Mar 2023 14:13:31 +0000
ROA not after:            Sun 17 Mar 2024 14:18:31 +0000
asID:                     28656
IP address blocks:        177.55.229.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:06:81:70:a9:fb:dd:bc:a3:a0:00:ef:c9:03:53:33:48:87:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
        Validity
            Not Before: Mar 19 14:13:31 2023 GMT
            Not After : Mar 17 14:18:31 2024 GMT
        Subject: CN=F65E307D13B3388E53D09704664C2087D45FF7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fa:5e:e1:b1:cc:76:c2:f4:97:97:4a:bd:e9:
                    e5:2f:ed:13:2b:2c:9a:d3:fa:dc:19:b3:ec:9b:b0:
                    1f:8c:67:b5:89:a7:e7:67:d0:35:46:f3:b4:9e:ae:
                    95:84:3b:38:a0:15:ae:07:af:e4:ff:83:ab:4b:38:
                    a7:d7:22:2c:c1:57:ab:91:b3:f1:6f:f4:7c:1a:56:
                    21:f5:bd:5f:28:f6:4d:be:b7:f2:a0:e7:54:13:fa:
                    e4:07:6a:c7:89:65:22:ce:ce:97:9c:8d:bb:be:83:
                    ea:49:e0:8a:9e:7b:73:9f:ff:71:fb:4a:0b:45:50:
                    cd:2a:e7:e3:50:73:88:bd:d7:d2:c6:a4:c1:5c:d8:
                    7d:a5:43:51:8d:de:92:40:33:4f:80:e1:95:e3:2a:
                    fd:65:64:ba:7d:2c:d6:8d:50:f4:d6:59:5c:92:9d:
                    a6:aa:41:74:16:72:1e:82:1c:45:75:e6:86:42:a2:
                    ea:03:c6:35:cf:c5:7c:5f:71:f9:ed:0c:3f:bb:2f:
                    16:5d:fd:ea:ac:bd:03:92:be:a5:bc:4a:31:43:27:
                    0e:6b:11:bb:af:50:77:b4:42:f7:f6:6e:ac:c8:ff:
                    b9:01:7a:cb:d5:45:15:2b:2b:4c:cd:1a:17:88:5c:
                    61:57:44:8e:72:96:40:73:5f:ed:50:43:0e:8f:1a:
                    6c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5E:30:7D:13:B3:38:8E:53:D0:97:04:66:4C:20:87:D4:5F:F7:CD
            X509v3 Authority Key Identifier:
                keyid:F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3232392e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:3c:26:37:3a:39:31:81:c2:4d:67:5b:2a:48:22:59:13:8a:
         c3:11:4d:99:8c:48:bf:85:6b:61:f2:a4:ff:d0:39:78:b3:94:
         a8:b6:24:1e:8a:76:12:bf:0b:5d:08:56:15:1d:ac:b7:cd:32:
         83:35:7c:84:df:ab:83:79:39:19:15:24:01:26:3c:d8:63:a5:
         a3:63:b1:ee:b6:7a:dc:b3:12:b6:41:20:0d:03:fb:c2:f5:46:
         7c:4a:52:88:31:66:ff:8f:0b:2c:f0:58:9c:db:ec:dc:57:7c:
         57:66:e4:fc:c6:be:c8:07:ae:f2:a8:aa:a8:01:35:0d:77:61:
         85:a8:40:73:84:4e:5c:da:33:45:f6:21:7f:0f:73:b6:dc:e8:
         77:26:7a:85:42:9d:29:c7:47:09:6a:54:1f:de:10:43:43:19:
         51:81:a4:9c:60:0b:6c:18:29:c9:2f:3f:78:5f:4e:7e:37:59:
         c4:89:a9:96:4a:a0:e0:04:0b:99:34:66:1d:2b:f3:7b:13:96:
         62:f9:a5:d9:2b:79:7b:00:94:7d:fd:3b:05:01:2a:fb:b7:76:
         2e:da:67:54:9a:81:35:90:96:51:1e:56:c8:2a:ff:a4:59:4d:
         16:17:2f:8d:74:78:00:22:f7:cb:0d:17:d1:98:91:f2:d1:9c:
         8c:3a:66:53
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUawaBcKn73byjoADvyQNTM0iHCoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDQTVCNUU2QzVDQTBFRTRDOEEwMjQ4QzQyOTVCQjAy
NTczRkE1QzAeFw0yMzAzMTkxNDEzMzFaFw0yNDAzMTcxNDE4MzFaMDMxMTAvBgNV
BAMTKEY2NUUzMDdEMTNCMzM4OEU1M0QwOTcwNDY2NEMyMDg3RDQ1RkY3Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+l7hscx2wvSXl0q96eUv7RMr
LJrT+twZs+ybsB+MZ7WJp+dn0DVG87SerpWEOzigFa4Hr+T/g6tLOKfXIizBV6uR
s/Fv9HwaViH1vV8o9k2+t/Kg51QT+uQHaseJZSLOzpecjbu+g+pJ4Iqee3Of/3H7
SgtFUM0q5+NQc4i919LGpMFc2H2lQ1GN3pJAM0+A4ZXjKv1lZLp9LNaNUPTWWVyS
naaqQXQWch6CHEV15oZCouoDxjXPxXxfcfntDD+7LxZd/eqsvQOSvqW8SjFDJw5r
EbuvUHe0Qvf2bqzI/7kBesvVRRUrK0zNGheIXGFXRI5ylkBzX+1QQw6PGmzNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9l4wfROzOI5T0JcEZkwgh9Rf980wHwYDVR0j
BBgwFoAU8spbXmxcoO5MigJIxClbsCVz+lwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMC9GMkNBNUI1RTZDNUNBMEVFNEM4QTAyNDhDNDI5NUJCMDI1NzNGQTVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YyQ0E1QjVFNkM1Q0EwRUU0
QzhBMDI0OEM0Mjk1QkIwMjU3M0ZBNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzAv
MzEzNzM3MmUzNTM1MmUzMjMyMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzYzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTflMA0GCSqGSIb3DQEBCwUAA4IBAQCBPCY3Ojkx
gcJNZ1sqSCJZE4rDEU2ZjEi/hWth8qT/0Dl4s5SotiQeinYSvwtdCFYVHay3zTKD
NXyE36uDeTkZFSQBJjzYY6WjY7HutnrcsxK2QSANA/vC9UZ8SlKIMWb/jwss8Fic
2+zcV3xXZuT8xr7IB67yqKqoATUNd2GFqEBzhE5c2jNF9iF/D3O23Oh3JnqFQp0p
x0cJalQf3hBDQxlRgaScYAtsGCnJLz94X05+N1nEiamWSqDgBAuZNGYdK/N7E5Zi
+aXZK3l7AJR9/TsFASr7t3Yu2mdUmoE1kJZRHlbIKv+kWU0WFy+NdHgAIvfLDRfR
mJHy0ZyMOmZT
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:45:16 2025 by rpki-client