Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233352e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3233352e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          O5BKnDRAj+afvfrHRp7CIvQeKTEoyJtuJMllZEfCkeE=
Subject key identifier:   60:DC:23:C5:8E:41:DD:3C:33:A6:BF:77:2F:66:34:8A:58:F7:FC:FB
Certificate issuer:       /CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
Certificate serial:       76F635B3AF7FCE293FEE57E3AE9D7C9D768303EF
Authority key identifier: F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233352e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 14:19:35 +0000
ROA not before:           Sun 19 Mar 2023 14:14:35 +0000
ROA not after:            Sun 17 Mar 2024 14:19:35 +0000
asID:                     28656
IP address blocks:        177.55.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f6:35:b3:af:7f:ce:29:3f:ee:57:e3:ae:9d:7c:9d:76:83:03:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
        Validity
            Not Before: Mar 19 14:14:35 2023 GMT
            Not After : Mar 17 14:19:35 2024 GMT
        Subject: CN=60DC23C58E41DD3C33A6BF772F66348A58F7FCFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ce:ea:e3:96:bb:e1:0a:f4:ef:14:14:41:f8:
                    07:a0:73:3c:da:4a:11:32:6a:f0:11:51:e1:3f:b4:
                    43:28:05:a8:41:ce:d1:27:8b:5b:d0:e4:78:cd:50:
                    96:58:81:73:c9:f7:9f:31:6e:34:46:0d:64:21:1c:
                    f1:66:a2:41:6e:d7:6f:20:22:ad:28:43:54:82:64:
                    7d:c9:83:97:a0:9b:46:26:a1:97:c6:42:d6:da:97:
                    6e:83:23:5f:70:97:6a:2f:61:60:e7:90:dd:3c:91:
                    30:83:ec:27:da:b4:59:e2:a7:32:46:ad:d6:10:1b:
                    e3:ea:9f:92:46:6a:07:14:56:b2:05:9e:48:83:b5:
                    c7:06:74:25:6b:31:a4:17:59:84:2e:d2:f4:9a:bf:
                    e9:79:2c:b9:b0:d1:d1:d9:72:6f:84:69:5c:91:2e:
                    4f:b6:95:e5:c8:4d:6e:0e:1b:44:e3:18:53:dc:97:
                    bd:7a:72:72:e7:7e:52:7e:3c:48:53:8e:31:4f:87:
                    a6:d6:30:1a:6b:df:02:2c:3e:b7:bb:71:d9:3c:30:
                    7c:94:a6:df:73:e6:a4:e6:58:96:0e:82:c3:a2:1b:
                    f4:e8:23:37:9e:c6:33:a3:3a:bb:5d:52:33:83:68:
                    8f:9c:91:72:af:89:c0:5d:1c:db:c9:15:12:59:2a:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DC:23:C5:8E:41:DD:3C:33:A6:BF:77:2F:66:34:8A:58:F7:FC:FB
            X509v3 Authority Key Identifier:
                keyid:F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233352e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:74:87:16:12:bc:fd:28:3d:74:78:4b:c7:15:3a:be:3a:c8:
         15:90:35:0a:59:73:0e:c6:fc:ba:87:5f:33:cc:63:62:de:af:
         bb:6a:b0:7f:bb:f5:0e:e2:de:eb:e0:67:65:d7:3a:a5:ea:03:
         97:c6:e5:ee:a4:05:78:76:54:37:3b:b3:26:31:77:f2:d0:16:
         a3:5d:db:48:00:af:43:0a:3c:a1:05:d0:3c:ab:8b:85:1b:74:
         e4:f3:02:c2:1f:9c:89:69:16:fa:ac:59:8c:00:48:af:cd:60:
         e3:a7:67:e5:64:e4:9d:77:45:fc:5f:3d:8d:8b:21:89:4d:fc:
         a2:e9:d1:ff:fa:f2:1d:e5:ea:81:02:97:e4:da:73:2d:73:52:
         99:5b:57:e8:11:73:67:11:bb:78:ad:4b:e7:48:f8:90:30:34:
         74:18:c6:f2:a4:39:ad:cf:bd:aa:50:4e:10:95:f3:b0:3d:25:
         7e:f4:36:3e:24:cd:f6:89:73:45:83:9a:66:a9:f6:fd:4b:15:
         16:48:fb:64:fd:32:ba:8b:a9:f5:60:60:a5:7a:bd:bb:43:db:
         f4:4e:ff:cc:f0:5b:05:64:c4:cb:91:39:89:f2:eb:d1:61:86:
         9b:ae:fe:38:58:1d:89:40:b5:e2:9c:5a:c2:5b:92:a0:5c:87:
         da:5a:ff:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:24 2025 by rpki-client