Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233342e302f32332d3233203d3e203238363536.roa
File:                     3137372e35352e3233342e302f32332d3233203d3e203238363536.roa (raw, json)
Hash identifier:          9HVKvOHPH1qYdxvD4Z7aw9UVhtnYXacdjejx/xLDt9A=
Subject key identifier:   3B:E1:E4:7D:BA:DF:4E:56:CF:12:66:16:66:10:3B:BC:B9:C6:03:58
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       613FDE3B9BA6C81C39298551FCFA0533B0703CBC
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233342e302f32332d3233203d3e203238363536.roa
Signing time:             Fri 10 Mar 2023 19:35:15 +0000
ROA not before:           Fri 10 Mar 2023 19:30:15 +0000
ROA not after:            Fri 08 Mar 2024 19:35:15 +0000
asID:                     28656
IP address blocks:        177.55.234.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:3f:de:3b:9b:a6:c8:1c:39:29:85:51:fc:fa:05:33:b0:70:3c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 10 19:30:15 2023 GMT
            Not After : Mar  8 19:35:15 2024 GMT
        Subject: CN=3BE1E47DBADF4E56CF12661666103BBCB9C60358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a2:9c:e1:f6:96:8e:39:65:81:6e:80:cd:fc:
                    f1:ef:00:d5:c2:d7:4c:e3:ea:90:08:3c:7a:d1:f7:
                    fa:de:72:43:16:63:a7:a4:25:c8:46:e1:f5:69:55:
                    15:a9:12:b2:c6:48:2b:a7:a8:e9:ec:49:1a:cf:6e:
                    7c:9c:57:56:d7:df:02:53:4e:0d:5f:10:db:86:93:
                    ea:61:04:19:22:9f:cf:29:b9:c7:a0:e7:d6:c3:78:
                    26:72:51:69:72:42:e8:2c:ad:b6:ab:43:81:11:25:
                    87:65:55:3e:c7:e9:23:c5:e0:bf:3e:e6:5c:2d:56:
                    b6:a6:36:d3:ab:ad:4e:76:39:68:72:51:66:bb:8b:
                    de:af:5a:3f:8e:31:78:d5:9b:6f:c1:d0:59:5d:14:
                    33:ac:48:92:1b:30:9a:94:6e:a9:cc:46:37:9c:84:
                    8d:ae:ed:24:ec:d7:e6:f3:be:4a:14:2d:3a:82:5a:
                    f0:de:54:1f:a1:88:d4:7d:b2:c9:7a:01:31:6a:2a:
                    6e:e3:7c:5d:52:cf:e4:03:90:da:49:47:0b:56:7a:
                    08:91:cc:3d:25:0d:f2:80:9b:7d:9a:0a:4a:d3:da:
                    1f:e5:6d:b9:8e:17:03:2e:34:32:ef:2b:4d:61:9e:
                    1c:8c:a2:46:ea:4b:80:12:8a:df:28:14:a3:1d:47:
                    38:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E1:E4:7D:BA:DF:4E:56:CF:12:66:16:66:10:3B:BC:B9:C6:03:58
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233342e302f32332d3233203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:51:8d:49:6c:28:71:51:cb:aa:70:95:2b:77:be:f4:b5:45:
         11:85:d3:ac:d7:6b:77:a4:3b:ab:84:86:2e:c3:a0:bb:80:46:
         19:da:d3:1e:f6:53:72:5c:12:3a:52:a5:85:7f:20:bd:10:a6:
         b5:32:6a:7f:99:cf:a6:97:6e:c6:e1:81:a6:c7:24:0c:ee:b0:
         d2:3a:b0:84:d4:00:3f:fd:26:a2:7e:30:73:26:67:7e:66:00:
         c4:53:c7:ef:a1:14:23:ca:da:43:ee:c2:9a:86:f7:09:c9:76:
         f7:14:ac:2f:7e:4d:0c:ff:a4:ce:c7:b9:0a:b7:b0:9b:bc:a1:
         ae:bc:6c:57:a3:ff:0a:7f:f3:73:8b:90:f2:73:f8:8d:d0:9d:
         24:ee:5f:9c:41:3f:34:75:8c:01:36:b7:c7:b3:36:7e:1a:49:
         a3:c8:aa:18:d6:3b:20:6d:07:a9:0b:4a:02:f8:db:af:cd:df:
         1b:f3:40:c5:fe:52:41:87:50:a4:a1:af:40:0e:16:14:45:2c:
         8d:1e:08:e4:7c:f0:b8:c2:55:26:31:8e:c6:68:b4:4a:05:82:
         0d:fd:3d:7b:72:c2:a6:bb:62:80:fc:16:fd:b0:ab:ed:d9:b1:
         71:93:2e:b9:45:1f:b5:40:2f:32:69:27:0d:3f:66:9e:f3:53:
         2d:9f:21:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org