Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233362e302f32332d3233203d3e203238363536.roa
File:                     3137372e35352e3233362e302f32332d3233203d3e203238363536.roa (raw, json)
Hash identifier:          n9OwYFo26sSHdXjQNqLNsCBfLXFb8hpg1S/RN8aN2qw=
Subject key identifier:   4B:44:17:83:A7:E0:A1:02:2D:A7:69:F3:B8:3D:90:AD:37:E7:85:0F
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       1B4B6613C5857D784380EC6F95C82D98B4BABA60
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233362e302f32332d3233203d3e203238363536.roa
Signing time:             Fri 10 Mar 2023 19:36:06 +0000
ROA not before:           Fri 10 Mar 2023 19:31:06 +0000
ROA not after:            Fri 08 Mar 2024 19:36:06 +0000
asID:                     28656
IP address blocks:        177.55.236.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4b:66:13:c5:85:7d:78:43:80:ec:6f:95:c8:2d:98:b4:ba:ba:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 10 19:31:06 2023 GMT
            Not After : Mar  8 19:36:06 2024 GMT
        Subject: CN=4B441783A7E0A1022DA769F3B83D90AD37E7850F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:e0:74:44:f9:2c:44:2e:13:b3:c6:3c:a5:
                    7a:5e:13:83:13:10:02:44:33:8a:09:e0:41:ed:57:
                    1e:e0:c0:8a:ca:1f:3d:b9:57:ec:d0:ff:3c:78:52:
                    2f:ee:ca:43:7f:d3:08:35:e0:b2:70:b8:e6:25:43:
                    6d:d5:d5:cf:55:d2:1d:2f:0d:cd:2b:4c:71:0b:26:
                    f1:8d:e2:5e:02:53:44:c5:35:9d:83:24:f6:90:31:
                    7a:4a:95:4a:dc:9a:3e:6d:71:ff:a9:7a:02:ab:c6:
                    8f:8f:d1:07:1e:51:12:ef:7a:fd:19:2d:e8:91:d0:
                    0d:95:7c:cf:a1:18:e8:67:d9:de:43:b2:e7:4d:85:
                    ef:84:9c:46:fe:bc:c1:cb:bc:0b:d6:e0:e4:8e:d9:
                    2b:b3:4f:4a:db:a5:9b:1b:f1:5c:78:2c:74:bc:0d:
                    b7:b1:65:6a:b8:9d:33:a5:09:4e:8c:88:0f:62:70:
                    b3:14:32:1d:e6:be:c9:d3:35:3e:83:63:bc:d9:0e:
                    1a:fb:c4:63:8b:6b:9b:96:30:23:25:2c:89:18:62:
                    df:4a:95:ea:15:73:af:15:de:2b:57:08:3b:c2:e7:
                    ba:7b:97:bd:2e:64:d0:1d:62:e8:25:0e:0a:8f:a2:
                    43:6b:cb:b1:9a:d9:19:02:61:65:18:81:85:90:d8:
                    cf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:44:17:83:A7:E0:A1:02:2D:A7:69:F3:B8:3D:90:AD:37:E7:85:0F
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233362e302f32332d3233203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:ab:c0:f5:ea:ff:99:f2:13:81:d6:ef:bd:2c:df:fc:3d:e3:
         5e:18:f3:99:46:95:e8:50:60:53:42:3b:38:45:95:1f:ad:48:
         7c:4d:38:95:ab:dc:c4:6d:b9:7c:58:47:7a:23:98:da:e3:9a:
         d6:68:88:9d:57:ca:7d:aa:6c:a7:23:46:66:64:db:15:39:7a:
         ec:f6:ad:5e:32:78:03:50:cb:77:a5:e8:7b:ac:24:93:8d:77:
         22:6f:28:4d:1b:f2:57:1b:1b:dc:3e:d1:10:6d:d7:2c:b8:b3:
         38:62:0c:85:fa:1d:91:ca:e4:41:94:62:b8:93:9c:d8:7b:98:
         72:3b:8b:6e:fd:cd:f1:56:fe:24:eb:f8:88:99:4e:65:c4:cc:
         92:9a:04:8b:f9:45:68:75:1e:14:e7:8c:0f:ed:c4:85:5e:55:
         9b:55:47:6c:05:93:3b:3e:1c:f2:69:49:2f:84:cf:6e:f2:e0:
         9a:d1:f9:5c:2d:8b:ee:e4:fd:53:d7:08:86:5e:3f:d2:c9:a1:
         8f:f7:92:81:4a:f2:92:25:4b:38:0c:ab:39:df:ff:72:5e:33:
         ef:65:e5:17:75:12:81:ff:78:e5:b0:46:86:08:c7:f2:22:3a:
         a9:1b:33:e9:fe:ec:46:8b:17:1a:d1:38:b5:3a:b2:30:51:3e:
         85:af:3f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:40 2025 by rpki-client