Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233322e302f32332d3233203d3e203238363536.roa
File:                     3137372e35352e3233322e302f32332d3233203d3e203238363536.roa (raw, json)
Hash identifier:          k4V5eKJFhq6kPqK0MtBmAwue4FCxchxhLOHwpGqdE7Q=
Subject key identifier:   F4:0E:66:27:0A:CC:94:FA:9C:9A:AD:B7:83:44:27:87:2E:DD:72:F2
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       1BB19CEF40B472AD4D6F48842FCE52DED121B296
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233322e302f32332d3233203d3e203238363536.roa
Signing time:             Fri 10 Mar 2023 19:35:27 +0000
ROA not before:           Fri 10 Mar 2023 19:30:27 +0000
ROA not after:            Fri 08 Mar 2024 19:35:27 +0000
asID:                     28656
IP address blocks:        177.55.232.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b1:9c:ef:40:b4:72:ad:4d:6f:48:84:2f:ce:52:de:d1:21:b2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 10 19:30:27 2023 GMT
            Not After : Mar  8 19:35:27 2024 GMT
        Subject: CN=F40E66270ACC94FA9C9AADB7834427872EDD72F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:42:f8:18:c3:9c:05:d9:91:62:26:f7:cb:0f:
                    75:94:f4:c3:d0:22:d3:6f:ae:c4:18:7e:5a:04:ae:
                    9b:c1:38:a6:2a:23:da:57:fd:da:3b:e7:24:fb:94:
                    b7:38:81:64:f5:87:12:52:ca:4c:0e:a4:b8:83:48:
                    be:95:fc:d0:d0:e0:94:64:f6:eb:80:c8:16:76:14:
                    0f:eb:b6:74:7f:17:e4:10:21:2f:7f:08:01:80:f2:
                    3a:bf:f9:a7:2b:ab:95:ec:ca:0b:cb:f5:91:0a:99:
                    b9:c9:bf:5c:9f:72:b0:d0:69:93:65:7c:e9:2b:7a:
                    31:07:d4:80:bc:38:ca:6e:30:14:ae:5a:15:d1:fa:
                    81:9f:ab:ca:48:6c:45:b7:c9:22:aa:57:36:7d:49:
                    5d:d8:e0:be:8d:3a:60:bc:22:76:41:c3:59:59:43:
                    1a:1a:6f:2e:be:52:1e:f8:45:3f:6d:3a:d1:25:87:
                    50:66:c5:90:83:fc:20:29:8c:04:b2:83:1e:03:98:
                    27:06:4d:fd:53:10:cd:91:98:bb:ba:0c:34:92:56:
                    7a:33:2e:c0:13:16:5f:85:60:d7:96:d8:7c:16:ff:
                    68:c7:93:72:49:36:a9:73:e5:43:a7:f3:15:62:a0:
                    1d:dc:0b:6a:e3:4e:4a:21:cc:d8:93:3a:a6:5f:4a:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0E:66:27:0A:CC:94:FA:9C:9A:AD:B7:83:44:27:87:2E:DD:72:F2
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233322e302f32332d3233203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:df:f7:4e:63:7f:19:0c:66:93:84:3a:6f:3a:67:52:ec:87:
         95:80:5b:84:51:57:6f:32:0a:ad:13:c3:e2:06:f4:71:23:7d:
         75:76:19:a9:9d:83:ee:96:24:b1:a5:42:eb:95:66:8e:8f:0b:
         66:80:0a:b5:d5:62:94:cf:ca:8a:c4:76:9e:f6:83:7a:94:33:
         5a:44:b2:86:93:a7:1f:df:0d:a3:75:60:59:6d:97:d6:ce:fa:
         1b:ef:3c:c8:ed:12:0c:75:a6:fd:f7:71:65:33:e5:8e:fd:fd:
         48:47:0e:ed:4a:16:cf:72:24:6e:a7:4e:1e:80:05:9e:f6:22:
         4e:f3:00:fc:f8:73:67:2a:76:29:8d:db:f6:db:a6:a0:44:61:
         e2:c4:68:05:db:20:b7:af:85:af:0b:bf:6b:46:3e:17:fd:10:
         a1:6f:c7:2a:ba:4c:d8:a7:43:34:74:c1:57:ee:39:67:35:27:
         3f:e5:dd:42:7c:cc:3d:f1:5f:9d:b2:c9:6e:4b:f3:75:09:f6:
         cb:15:50:6e:79:c7:86:f8:4f:fa:ee:4e:ea:11:d6:29:80:6f:
         c1:d7:6a:17:0d:71:63:78:67:84:8d:bc:c0:a1:04:85:0f:54:
         ae:8c:f8:2a:94:e0:84:66:80:56:ff:f7:fe:59:9c:c0:a6:b5:
         f1:97:d7:c1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUG7Gc70C0cq1Nb0iEL85S3tEhspYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJCMjg5Nzk1MzQxNTJENTZDREI4OTQxODIyMDA0QjIx
QzA0NDQ3NjAeFw0yMzAzMTAxOTMwMjdaFw0yNDAzMDgxOTM1MjdaMDMxMTAvBgNV
BAMTKEY0MEU2NjI3MEFDQzk0RkE5QzlBQURCNzgzNDQyNzg3MkVERDcyRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjQvgYw5wF2ZFiJvfLD3WU9MPQ
ItNvrsQYfloErpvBOKYqI9pX/do75yT7lLc4gWT1hxJSykwOpLiDSL6V/NDQ4JRk
9uuAyBZ2FA/rtnR/F+QQIS9/CAGA8jq/+acrq5XsygvL9ZEKmbnJv1yfcrDQaZNl
fOkrejEH1IC8OMpuMBSuWhXR+oGfq8pIbEW3ySKqVzZ9SV3Y4L6NOmC8InZBw1lZ
Qxoaby6+Uh74RT9tOtElh1BmxZCD/CApjASygx4DmCcGTf1TEM2RmLu6DDSSVnoz
LsATFl+FYNeW2HwW/2jHk3JJNqlz5UOn8xVioB3cC2rjTkohzNiTOqZfSlntAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU9A5mJwrMlPqcmq23g0Qnhy7dcvIwHwYDVR0j
BBgwFoAUa7KJeVNBUtVs24lBgiAEshwERHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMC82QkIyODk3OTUzNDE1MkQ1NkNEQjg5NDE4MjIwMDRCMjFDMDQ0NDc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZCQjI4OTc5NTM0MTUyRDU2
Q0RCODk0MTgyMjAwNEIyMUMwNDQ0NzYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzAv
MzEzNzM3MmUzNTM1MmUzMjMzMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM4
MzYzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBsTfoMA0GCSqGSIb3DQEBCwUAA4IBAQAi3/dOY38Z
DGaThDpvOmdS7IeVgFuEUVdvMgqtE8PiBvRxI311dhmpnYPuliSxpULrlWaOjwtm
gAq11WKUz8qKxHae9oN6lDNaRLKGk6cf3w2jdWBZbZfWzvob7zzI7RIMdab993Fl
M+WO/f1IRw7tShbPciRup04egAWe9iJO8wD8+HNnKnYpjdv226agRGHixGgF2yC3
r4WvC79rRj4X/RChb8cqukzYp0M0dMFX7jlnNSc/5d1CfMw98V+dssluS/N1CfbL
FVBueceG+E/67k7qEdYpgG/B12oXDXFjeGeEjbzAoQSFD1SujPgqlOCEZoBW//f+
WZzAprXxl9fB
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:58 2025 by rpki-client