Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233332e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3233332e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          EDSDQTKlcoXdEF15gKCfnYuE64QGdhPgP86q8L3UDxo=
Subject key identifier:   39:3C:80:96:20:A5:A8:8B:20:7B:75:91:FE:EA:21:C3:B7:41:B9:79
Certificate issuer:       /CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
Certificate serial:       4739780D3DE9E40F36A64E2FD7EEBCA249EE2104
Authority key identifier: F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233332e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 14:19:14 +0000
ROA not before:           Sun 19 Mar 2023 14:14:14 +0000
ROA not after:            Sun 17 Mar 2024 14:19:14 +0000
asID:                     28656
IP address blocks:        177.55.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:39:78:0d:3d:e9:e4:0f:36:a6:4e:2f:d7:ee:bc:a2:49:ee:21:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
        Validity
            Not Before: Mar 19 14:14:14 2023 GMT
            Not After : Mar 17 14:19:14 2024 GMT
        Subject: CN=393C809620A5A88B207B7591FEEA21C3B741B979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:29:0d:2e:ba:96:8a:76:d9:8f:60:93:56:
                    78:6a:c9:2c:93:16:a6:f8:dd:da:21:e5:eb:8a:34:
                    42:67:88:02:fe:6f:47:6a:2a:17:0e:c3:f5:f9:46:
                    c9:64:8f:90:48:0a:67:13:b2:a0:0b:92:48:1a:0b:
                    59:4e:70:b2:9c:43:10:6a:44:ff:78:e5:89:6b:4a:
                    04:cd:20:41:fc:cc:c1:52:da:e1:d5:e3:8c:15:51:
                    a8:31:31:a6:48:8c:30:0a:dc:03:e5:da:bb:1a:ba:
                    1c:7e:3b:10:5b:4c:08:fc:e1:20:88:b1:e6:cd:64:
                    f3:d4:54:48:be:25:6d:57:0d:70:3d:90:83:34:43:
                    1d:d7:65:0b:d7:73:86:8d:fc:98:cd:be:c3:56:51:
                    d8:d7:c3:97:6d:39:f5:b2:e0:7e:83:be:b7:a4:21:
                    c3:df:b5:47:84:cf:21:68:b1:30:6e:3c:15:64:fa:
                    31:8c:7f:6f:05:3a:88:1d:33:60:63:dc:e8:f0:4c:
                    38:10:7f:1b:43:81:17:7a:fe:8d:e0:d2:de:b5:cf:
                    6c:77:f7:00:d6:e2:86:68:0e:7e:64:8c:aa:20:37:
                    95:72:d6:b2:34:4e:c7:5e:17:72:83:a7:4c:8b:95:
                    57:63:f9:3d:9e:b5:d4:3a:f1:43:98:f3:8a:fd:65:
                    a9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3C:80:96:20:A5:A8:8B:20:7B:75:91:FE:EA:21:C3:B7:41:B9:79
            X509v3 Authority Key Identifier:
                keyid:F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233332e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:de:09:98:6d:d2:7b:87:95:c6:8c:ce:db:a3:1f:35:2e:2b:
         e1:cc:76:29:59:ad:e0:cb:c4:3b:b1:4b:58:11:d8:85:1e:30:
         8a:3e:28:47:1f:72:1a:eb:23:51:0a:58:92:c0:82:0f:27:86:
         9e:03:f3:e4:4a:a0:22:c1:29:34:61:35:6e:89:de:e9:62:86:
         30:2b:4d:be:52:22:ca:c0:ca:0b:c9:de:fc:16:3f:c2:f4:c4:
         f9:da:07:9c:c5:7d:6c:88:6c:b7:d0:cf:7a:a8:fe:da:b7:ee:
         76:19:33:cc:4e:20:70:86:4f:43:a5:a2:a5:8e:04:5a:b5:39:
         72:cf:bf:bd:a8:df:66:08:93:d2:7e:6f:a7:51:fb:b8:c7:16:
         be:a0:4e:11:03:86:56:b4:3b:75:44:6a:b6:2f:71:e7:38:73:
         43:15:8e:20:2f:6c:5b:14:b2:19:ef:99:8e:a2:3b:0a:52:46:
         ca:80:46:cd:e2:96:db:2e:56:73:0e:8f:7b:66:6a:2c:cf:ec:
         d3:a1:08:c8:b2:2e:d7:09:f1:b4:a0:e8:1f:f8:d5:9e:7f:8d:
         42:37:48:33:9f:02:bb:67:80:68:84:3b:18:75:d2:6f:ce:d0:
         7c:79:69:84:96:81:b3:91:c6:7c:f9:77:08:5f:2b:81:a0:8f:
         51:74:22:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:34:49 2025 by rpki-client