Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233362e302f32322d3232203d3e203238363536.roa
File:                     3137372e35352e3233362e302f32322d3232203d3e203238363536.roa (raw, json)
Hash identifier:          C71kOYSMJZv7DvTY1Obfp7F2p4Djgw2VCHQ+lBrBS6I=
Subject key identifier:   83:F9:A6:BA:BA:17:E1:FD:B9:4A:64:E1:00:67:17:BA:96:53:71:76
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       5D4BABC25648E14D1D4D00C2FD9D8FF308B06C44
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233362e302f32322d3232203d3e203238363536.roa
Signing time:             Fri 10 Mar 2023 19:33:26 +0000
ROA not before:           Fri 10 Mar 2023 19:28:26 +0000
ROA not after:            Fri 08 Mar 2024 19:33:26 +0000
asID:                     28656
IP address blocks:        177.55.236.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:4b:ab:c2:56:48:e1:4d:1d:4d:00:c2:fd:9d:8f:f3:08:b0:6c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 10 19:28:26 2023 GMT
            Not After : Mar  8 19:33:26 2024 GMT
        Subject: CN=83F9A6BABA17E1FDB94A64E1006717BA96537176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:b3:7e:3a:c1:05:4a:02:41:fa:c3:e3:ce:
                    c9:32:66:bc:a9:02:a5:fc:86:9a:4c:39:0e:6f:9b:
                    e4:29:6c:35:2a:a1:6d:9c:7d:f0:63:3f:3e:37:22:
                    01:a6:7d:de:4d:5c:37:6c:88:d6:32:d0:50:ab:10:
                    f7:3b:f9:d4:c1:86:16:8b:0b:5a:52:6e:21:dd:78:
                    f6:b1:f0:60:de:ec:af:85:05:ad:06:1b:61:fc:0c:
                    c0:c2:20:8e:7c:04:a0:6c:15:b3:80:d3:d2:65:bf:
                    19:04:b9:32:0f:e4:54:77:9f:b6:59:df:e8:ea:ad:
                    52:ba:72:7a:0f:c4:93:4f:db:f4:27:1e:ae:74:c6:
                    fd:e1:65:aa:89:c4:87:47:75:a1:f2:d0:a9:f9:5e:
                    4f:3f:f9:cc:eb:a9:dc:6b:15:e2:1f:3b:5a:88:42:
                    70:a4:28:ac:13:c3:a4:e3:bf:3c:d1:00:30:33:ee:
                    1f:a4:5e:8a:bf:51:a9:ab:be:42:21:f7:4f:c4:a2:
                    d1:25:8a:f1:62:2b:8d:95:3e:5d:2f:45:bc:aa:77:
                    ae:fc:bd:ad:88:c4:ef:d8:cd:0c:12:d8:20:5a:05:
                    7a:21:f8:0d:c4:01:d9:da:19:bc:d0:24:fe:98:f9:
                    c0:0a:bf:56:b7:f7:f7:3b:85:64:73:b7:0a:44:c2:
                    de:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F9:A6:BA:BA:17:E1:FD:B9:4A:64:E1:00:67:17:BA:96:53:71:76
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233362e302f32322d3232203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:99:68:a7:36:61:35:27:88:84:0a:72:b0:1a:db:c5:46:49:
         64:ad:31:d6:a8:73:a5:d4:0b:7f:9b:89:97:dc:b3:74:ce:0e:
         f8:51:cb:fc:04:22:cd:c6:5a:bb:ab:56:b4:f3:de:17:9f:2d:
         45:77:2e:01:01:79:08:a0:53:ea:f8:f7:9b:82:98:02:47:39:
         92:b1:c5:67:ea:42:00:30:25:96:e7:80:47:05:51:12:79:86:
         5f:c4:e8:db:9c:03:37:c6:6c:a7:b2:c5:8b:6e:fe:d8:85:fd:
         a4:b9:7c:b9:28:d0:e7:dc:fb:c1:7d:b1:cb:82:41:e7:4a:86:
         60:64:01:b9:a8:39:f2:47:66:fe:40:a7:1e:4f:25:ef:e8:e3:
         74:9e:ea:17:5c:28:ca:c3:ca:12:2b:79:a0:f2:46:fd:5c:4a:
         a6:e8:f1:64:90:d2:d6:46:b8:19:2d:c8:23:51:c3:ad:61:6f:
         61:31:d6:37:8c:3b:52:68:8f:0c:a0:af:1f:ac:2a:95:0d:14:
         7e:0d:80:fb:43:09:fc:a5:aa:43:28:f1:81:40:45:6a:9c:df:
         7a:27:db:39:ff:ab:f4:c1:63:0a:d2:08:e5:1d:d4:26:54:c2:
         f6:6d:af:32:b6:92:ba:2a:7e:9e:a6:12:07:08:4b:7a:74:ea:
         d7:45:0a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org