Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233312e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3233312e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          VDHRYxFsE4knujMAigr4SefdWdx2V3fp07CTuyOP62o=
Subject key identifier:   FC:22:A1:AC:A2:13:5E:2D:16:C3:DF:E0:DF:5B:D8:5A:F0:75:16:4D
Certificate issuer:       /CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
Certificate serial:       46E09A65328E18552B06DF2041F591C6FF0EAB1C
Authority key identifier: F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233312e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 14:18:55 +0000
ROA not before:           Sun 19 Mar 2023 14:13:55 +0000
ROA not after:            Sun 17 Mar 2024 14:18:55 +0000
asID:                     28656
IP address blocks:        177.55.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:e0:9a:65:32:8e:18:55:2b:06:df:20:41:f5:91:c6:ff:0e:ab:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
        Validity
            Not Before: Mar 19 14:13:55 2023 GMT
            Not After : Mar 17 14:18:55 2024 GMT
        Subject: CN=FC22A1ACA2135E2D16C3DFE0DF5BD85AF075164D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ba:7a:a3:6b:3d:33:97:6f:66:1e:64:20:18:
                    4e:f1:c7:8f:44:f4:8f:23:b5:6b:d9:31:0f:d8:cf:
                    a1:ce:39:55:7d:6b:32:a2:d2:01:6a:e9:38:aa:1a:
                    18:fa:88:4f:bb:a6:03:c0:d2:2c:8c:30:3a:7f:8d:
                    d2:68:4b:16:1a:fe:5c:5a:ae:d3:80:5f:04:37:1e:
                    91:b9:d4:6f:9a:66:17:6a:93:02:69:b0:27:de:d7:
                    fd:37:5c:08:d9:98:5f:3c:61:08:2f:c2:71:75:e1:
                    4c:ec:22:54:8d:e3:15:35:fd:c4:85:01:46:fe:4c:
                    32:cb:61:37:d2:ee:8a:1a:d7:6e:7e:62:31:8d:3d:
                    93:aa:ca:16:55:7f:a5:5f:8e:34:31:4e:be:6e:f6:
                    22:7b:b9:8a:95:08:7f:15:9b:b7:e6:83:86:05:77:
                    76:c9:4e:98:7c:1b:70:ac:7e:52:d7:4d:24:0c:4b:
                    15:58:5a:ad:29:85:df:42:85:64:a4:8a:cf:ba:94:
                    ea:8d:89:87:77:d5:4c:ee:02:68:b7:a0:18:f7:49:
                    a1:dd:92:99:a7:35:09:fd:be:a6:ee:3b:c4:dd:68:
                    f9:30:11:41:ef:d0:66:84:ce:a3:de:f5:6c:83:b9:
                    9a:42:ae:f4:0d:75:f1:78:ee:a7:b1:01:cc:88:9e:
                    1d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:22:A1:AC:A2:13:5E:2D:16:C3:DF:E0:DF:5B:D8:5A:F0:75:16:4D
            X509v3 Authority Key Identifier:
                keyid:F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233312e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f6:21:46:82:a1:7a:86:b2:eb:2e:53:a5:2f:60:93:8f:ae:
         89:48:aa:da:76:0a:78:35:2d:00:be:9e:d7:61:33:76:71:c5:
         73:a6:fa:61:37:4e:d6:ab:f9:5b:13:99:c5:8c:6a:9c:b0:23:
         be:b2:7a:3e:5b:40:85:eb:76:31:51:60:cd:e5:cf:73:1f:8e:
         19:4f:1f:e2:98:f7:b1:e8:cd:98:57:d8:46:2f:a8:fe:69:6e:
         89:0f:aa:cb:2f:e9:59:5e:68:51:a4:6e:18:36:d0:84:0e:90:
         9a:21:9d:0f:41:8e:a0:d9:1d:44:2e:c3:08:7a:69:56:d2:89:
         45:f0:36:8f:74:93:b2:70:55:45:15:df:78:d6:18:05:05:cc:
         85:36:65:6c:bd:ca:de:31:c0:c9:50:59:03:ad:8f:00:54:9c:
         a8:f3:dc:89:78:9a:28:b1:cd:fe:47:13:9a:4d:ff:65:06:e8:
         ab:c0:30:33:79:b8:e3:2d:0a:f3:bf:0e:5c:60:2d:93:72:d2:
         56:cd:bc:d4:e3:42:67:34:a1:97:a4:1c:55:a1:de:73:57:5e:
         dc:d4:35:6e:2a:fa:06:be:57:3a:b5:67:15:17:b2:1d:c4:1a:
         4b:54:24:06:96:f7:1f:e0:6b:51:0a:0a:e8:53:ac:05:de:ed:
         5b:21:38:82
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURuCaZTKOGFUrBt8gQfWRxv8OqxwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDQTVCNUU2QzVDQTBFRTRDOEEwMjQ4QzQyOTVCQjAy
NTczRkE1QzAeFw0yMzAzMTkxNDEzNTVaFw0yNDAzMTcxNDE4NTVaMDMxMTAvBgNV
BAMTKEZDMjJBMUFDQTIxMzVFMkQxNkMzREZFMERGNUJEODVBRjA3NTE2NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdunqjaz0zl29mHmQgGE7xx49E
9I8jtWvZMQ/Yz6HOOVV9azKi0gFq6TiqGhj6iE+7pgPA0iyMMDp/jdJoSxYa/lxa
rtOAXwQ3HpG51G+aZhdqkwJpsCfe1/03XAjZmF88YQgvwnF14UzsIlSN4xU1/cSF
AUb+TDLLYTfS7ooa125+YjGNPZOqyhZVf6VfjjQxTr5u9iJ7uYqVCH8Vm7fmg4YF
d3bJTph8G3CsflLXTSQMSxVYWq0phd9ChWSkis+6lOqNiYd31UzuAmi3oBj3SaHd
kpmnNQn9vqbuO8TdaPkwEUHv0GaEzqPe9WyDuZpCrvQNdfF47qexAcyInh0RAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU/CKhrKITXi0Ww9/g31vYWvB1Fk0wHwYDVR0j
BBgwFoAU8spbXmxcoO5MigJIxClbsCVz+lwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMC9GMkNBNUI1RTZDNUNBMEVFNEM4QTAyNDhDNDI5NUJCMDI1NzNGQTVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YyQ0E1QjVFNkM1Q0EwRUU0
QzhBMDI0OEM0Mjk1QkIwMjU3M0ZBNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzAv
MzEzNzM3MmUzNTM1MmUzMjMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzYzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAsTfnMA0GCSqGSIb3DQEBCwUAA4IBAQBV9iFGgqF6
hrLrLlOlL2CTj66JSKradgp4NS0Avp7XYTN2ccVzpvphN07Wq/lbE5nFjGqcsCO+
sno+W0CF63YxUWDN5c9zH44ZTx/imPex6M2YV9hGL6j+aW6JD6rLL+lZXmhRpG4Y
NtCEDpCaIZ0PQY6g2R1ELsMIemlW0olF8DaPdJOycFVFFd941hgFBcyFNmVsvcre
McDJUFkDrY8AVJyo89yJeJoosc3+RxOaTf9lBuirwDAzebjjLQrzvw5cYC2TctJW
zbzU40JnNKGXpBxVod5zV17c1DVuKvoGvlc6tWcVF7IdxBpLVCQGlvcf4GtRCgro
U6wF3u1bITiC
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:24 2025 by rpki-client