Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233322e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3233322e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          uRn7o7lArJLZ67gMP1EmHyppzHTbgmkZNLpf9CpnI2U=
Subject key identifier:   D5:72:7C:D1:2F:0F:7D:4D:2C:E0:0B:6A:88:2B:4C:7A:95:E3:76:C4
Certificate issuer:       /CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
Certificate serial:       1E5E1F279553F4279A40086E8482BCAFF775B8DD
Authority key identifier: F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233322e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 14:19:04 +0000
ROA not before:           Sun 19 Mar 2023 14:14:04 +0000
ROA not after:            Sun 17 Mar 2024 14:19:04 +0000
asID:                     28656
IP address blocks:        177.55.232.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:5e:1f:27:95:53:f4:27:9a:40:08:6e:84:82:bc:af:f7:75:b8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
        Validity
            Not Before: Mar 19 14:14:04 2023 GMT
            Not After : Mar 17 14:19:04 2024 GMT
        Subject: CN=D5727CD12F0F7D4D2CE00B6A882B4C7A95E376C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0e:fb:09:b4:17:bf:1a:29:4c:00:d5:35:69:
                    eb:fa:03:21:80:81:46:61:b6:ce:2b:48:ba:e4:ae:
                    ef:ed:5f:c5:de:52:1b:b8:c3:b3:4c:6a:2e:4d:93:
                    84:59:9a:e1:90:3d:e6:e9:e0:07:f1:03:da:26:3f:
                    fe:b2:42:49:a5:a6:59:b9:5b:83:a7:ef:d2:7f:1a:
                    10:59:aa:e8:65:42:16:2b:ad:40:e8:28:ec:5e:e2:
                    7e:df:51:3c:e2:a4:a5:5c:be:50:a3:c7:66:68:9e:
                    f1:15:dd:3f:de:19:47:dc:2b:49:d2:d9:52:80:4d:
                    a0:9a:79:79:8b:58:be:dd:5e:d8:63:ff:77:de:a8:
                    09:7d:71:8b:ec:91:95:9b:c9:9d:ce:c6:43:b1:1e:
                    44:f2:0a:51:d9:72:a4:2a:f8:71:65:67:e3:dd:c3:
                    d4:c8:d1:94:94:cb:df:f1:1f:b1:51:bb:a1:2f:28:
                    ac:ea:e9:a9:4e:03:b8:30:b5:b4:5b:3d:43:91:69:
                    40:b4:47:8d:3a:8f:73:bd:81:b7:84:ac:70:3e:04:
                    fc:60:be:b7:9f:79:35:ea:c7:f0:94:06:08:67:c0:
                    8a:04:89:d7:f7:a1:26:a2:ad:05:de:f6:a3:a5:d4:
                    96:4e:65:4b:20:0c:56:76:74:26:fd:ff:ff:34:59:
                    5f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:72:7C:D1:2F:0F:7D:4D:2C:E0:0B:6A:88:2B:4C:7A:95:E3:76:C4
            X509v3 Authority Key Identifier:
                keyid:F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233322e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:3e:89:53:16:c3:ce:7f:2f:77:d5:b0:be:dd:3f:0a:58:18:
         f8:67:bb:17:99:0c:7b:1f:13:4c:32:85:5e:7b:03:f3:87:5e:
         c8:77:a2:76:46:9c:7a:9c:6d:7a:8e:9c:c4:9d:f0:ad:ca:eb:
         76:2d:84:5e:d1:35:f9:0b:2d:a4:a7:ba:59:d4:83:0f:01:97:
         92:ce:05:30:04:e7:cf:d0:28:cf:06:5e:f2:a0:a6:da:ec:02:
         8b:c3:24:f3:50:16:72:55:7c:34:be:eb:72:c6:52:5e:57:5d:
         36:25:84:ff:45:ed:84:b7:a9:6b:5c:c4:c0:3c:78:30:c8:12:
         b5:ed:3b:d0:8c:ed:2f:26:1e:ef:54:cc:64:79:b3:c5:aa:97:
         72:94:5e:ab:c4:20:97:d8:ea:0c:3a:eb:a5:cc:12:d1:f9:03:
         9d:14:0c:2c:61:d3:4d:e8:f2:6d:10:bf:37:6a:1d:ef:b8:dd:
         a4:ff:d6:0b:5a:ab:a3:5e:a4:c3:8c:ba:03:4d:82:2f:4b:19:
         83:6c:b3:2b:cd:f7:25:4b:0b:30:20:d8:b9:e6:7e:d1:ec:ea:
         6a:2a:0d:be:d8:01:5d:c9:35:52:f1:22:8f:7c:51:cd:6a:32:
         ed:b7:f1:63:5e:da:49:9d:ca:45:19:69:3c:ad:0f:4f:77:ec:
         93:c0:88:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:35 2025 by rpki-client