Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233302e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3233302e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          cXYqN/3o8e6U0XCXF9GUPuw9h+lJxmUVdncmWRYh+jA=
Subject key identifier:   D6:15:4F:59:C2:49:4A:A3:91:F2:CD:BC:0A:C2:D7:ED:F2:34:3E:B2
Certificate issuer:       /CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
Certificate serial:       40ACA71DC1900B7C71D85809B605285A9554DDDB
Authority key identifier: F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233302e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 14:18:43 +0000
ROA not before:           Sun 19 Mar 2023 14:13:43 +0000
ROA not after:            Sun 17 Mar 2024 14:18:43 +0000
asID:                     28656
IP address blocks:        177.55.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ac:a7:1d:c1:90:0b:7c:71:d8:58:09:b6:05:28:5a:95:54:dd:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
        Validity
            Not Before: Mar 19 14:13:43 2023 GMT
            Not After : Mar 17 14:18:43 2024 GMT
        Subject: CN=D6154F59C2494AA391F2CDBC0AC2D7EDF2343EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fa:7b:93:6b:ec:c4:80:27:85:87:8b:37:de:
                    21:63:4e:49:c3:b7:29:fd:b5:74:45:bb:50:c0:5a:
                    b4:e6:a8:48:a5:ff:20:2f:b0:9c:24:f7:d2:00:ec:
                    a8:3f:e2:b0:06:a1:e6:96:0d:64:ff:47:37:87:fd:
                    42:0a:88:75:c6:bb:47:19:58:87:55:53:44:68:a2:
                    25:74:fb:d9:93:60:a0:fc:9e:5e:b9:54:74:fb:45:
                    75:ee:97:1e:cf:a8:1f:4e:f4:a0:5d:2a:99:35:93:
                    7d:ad:fe:08:50:61:6f:18:e8:71:4c:ef:df:b8:65:
                    e1:76:e5:2a:06:10:ba:0a:c6:4d:45:1f:78:1d:5c:
                    f6:e2:71:df:1e:32:6b:c2:6a:d2:55:ee:5c:a8:18:
                    a0:be:8c:ac:c3:1c:b2:ac:ca:f8:64:a7:17:25:92:
                    00:d2:9c:55:18:ad:de:d6:3a:04:da:d6:81:1d:0e:
                    09:46:3d:45:0e:65:e2:d8:04:c9:a2:27:55:23:ac:
                    80:94:31:95:e2:a8:ac:a5:60:d9:a9:e3:81:5a:5b:
                    5e:2d:9e:70:c0:0e:89:d4:12:03:12:02:ed:02:bd:
                    c9:dd:6e:33:da:55:ca:33:9d:b3:e9:73:2e:75:d3:
                    f6:81:ae:ef:c4:52:2b:a0:01:73:44:07:6b:35:83:
                    3b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:15:4F:59:C2:49:4A:A3:91:F2:CD:BC:0A:C2:D7:ED:F2:34:3E:B2
            X509v3 Authority Key Identifier:
                keyid:F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233302e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:3d:98:89:14:86:ec:6b:9c:1a:a5:16:3a:ee:28:c3:26:ed:
         04:e7:98:0f:bf:0f:0f:16:df:5b:ab:88:bb:72:c8:13:a9:e3:
         ab:fc:c1:12:48:a4:d1:ab:25:0a:a7:23:c9:97:13:b6:bb:c1:
         20:67:cf:93:ce:96:97:43:5b:12:4b:43:84:f1:0b:a6:5c:cd:
         95:8e:5f:a1:f5:54:69:36:92:0c:78:57:74:df:96:06:31:43:
         a8:ec:86:84:06:e6:23:87:c4:f5:58:c5:9e:16:c7:32:fd:9b:
         e9:e1:cf:1f:25:bf:84:a4:7d:00:b9:15:0d:60:48:d4:46:6c:
         76:2e:97:1e:8a:34:de:f4:9f:f6:b2:3a:b0:c3:43:06:4b:c9:
         49:8d:69:fd:b5:1f:bb:ad:57:29:02:7a:80:bb:e4:1f:77:9a:
         d9:50:79:50:2c:21:79:5d:5b:9b:23:f1:c4:96:93:a7:08:a8:
         ff:e2:ea:c7:fb:5d:09:61:a8:d5:7a:de:e0:3f:8e:b3:23:4c:
         a3:1d:68:38:b8:f0:00:ca:09:68:de:a5:39:bb:35:38:9a:9d:
         0c:07:ca:41:97:c9:e7:fc:2c:42:a3:bc:e7:27:49:68:ac:0f:
         a2:9e:f5:20:5f:e6:18:3b:33:66:0c:b0:6a:9d:f9:4e:79:dd:
         e4:d6:7f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org