Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233362e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3233362e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          su+DRLtQGRe2fIiUVt+2hNCUeSg8d0FgkssjykrUMD4=
Subject key identifier:   95:ED:BC:1D:CB:55:29:C6:03:41:C2:37:C5:42:EA:E6:68:9F:DC:6D
Certificate issuer:       /CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
Certificate serial:       5DAC6E1CB525F1E73CC0C21C78AB2664B9294558
Authority key identifier: F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233362e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 14:19:44 +0000
ROA not before:           Sun 19 Mar 2023 14:14:44 +0000
ROA not after:            Sun 17 Mar 2024 14:19:44 +0000
asID:                     28656
IP address blocks:        177.55.236.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ac:6e:1c:b5:25:f1:e7:3c:c0:c2:1c:78:ab:26:64:b9:29:45:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C
        Validity
            Not Before: Mar 19 14:14:44 2023 GMT
            Not After : Mar 17 14:19:44 2024 GMT
        Subject: CN=95EDBC1DCB5529C60341C237C542EAE6689FDC6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8f:12:70:83:e8:d4:67:fa:ea:0d:8f:fa:dd:
                    60:5a:b5:93:be:cd:35:b9:4b:7b:aa:c7:94:6e:59:
                    cf:d6:7f:de:18:4f:f5:c1:da:f3:05:a8:bc:b9:6f:
                    e5:83:e0:3a:4f:a4:9f:c5:ef:db:79:ee:4a:19:b4:
                    fb:a3:ce:18:4b:5c:8f:d9:7f:00:00:7d:d0:5f:9a:
                    b2:ec:b0:c0:40:93:c3:5d:a6:aa:b8:17:68:76:b5:
                    6c:89:91:22:bb:cb:d6:98:34:90:0a:9a:fe:5a:d1:
                    a1:ea:fc:8e:45:66:6d:f7:44:86:6b:59:74:ee:fb:
                    56:1e:37:9d:0f:78:18:f0:42:f0:4e:9d:50:fe:d5:
                    2b:80:db:d9:f3:92:a6:cb:66:29:46:0b:be:b5:bb:
                    61:6c:7e:56:f1:f9:29:b8:06:d1:27:12:d1:ae:cf:
                    af:0f:0e:69:1f:4e:1d:9e:3b:f7:20:c7:ed:8a:a5:
                    ed:73:b9:1f:80:0a:d5:7d:27:ad:b6:f0:40:c0:53:
                    c9:52:ff:f3:2f:39:a4:57:97:42:f6:e2:4a:ab:a2:
                    26:90:ef:f2:a6:68:60:72:ca:ea:b6:84:97:ad:ed:
                    f7:0a:34:c6:50:55:ea:c4:20:ff:7f:cb:00:5c:3b:
                    d1:90:d0:fc:e3:a8:97:f8:c5:e4:f6:bf:83:f1:ed:
                    3b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:ED:BC:1D:CB:55:29:C6:03:41:C2:37:C5:42:EA:E6:68:9F:DC:6D
            X509v3 Authority Key Identifier:
                keyid:F2:CA:5B:5E:6C:5C:A0:EE:4C:8A:02:48:C4:29:5B:B0:25:73:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F2CA5B5E6C5CA0EE4C8A0248C4295BB02573FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233362e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:c1:c6:d3:d3:73:c9:b2:8f:de:74:b8:cc:f2:b6:ca:3f:29:
         c8:0f:d4:7c:b4:45:34:ad:77:90:04:25:e9:53:3b:9d:87:f9:
         f8:27:16:e6:a5:81:11:53:70:ab:d7:e0:ba:15:a0:c5:24:6b:
         aa:ca:ce:02:a2:74:ba:8b:4a:db:30:6d:3f:65:16:11:7c:03:
         b8:2a:9c:ac:93:77:77:0f:82:a2:25:4b:38:7f:f5:51:ac:3a:
         da:8b:c0:fb:92:52:91:5c:0d:e8:98:34:59:da:fb:50:be:39:
         e4:17:40:c2:46:e2:d7:73:b1:9b:b6:00:8d:0b:dc:bd:82:18:
         1a:fb:d6:cf:82:0e:ef:62:19:25:74:4d:58:81:c0:f4:4e:14:
         24:87:cc:0a:5d:0d:ab:69:22:69:1e:4f:05:47:36:96:59:37:
         dd:15:70:83:e6:73:12:cb:3c:8b:2c:2d:84:db:89:68:53:bc:
         16:67:ac:e3:44:8a:70:5e:5b:1a:cc:f0:17:6d:51:1a:04:45:
         d1:ad:07:17:1f:89:30:34:f3:24:e1:e5:02:70:8d:a7:78:dc:
         04:21:5e:2f:80:32:e2:32:9f:ee:54:0c:a4:62:71:f6:3f:93:
         38:58:bb:df:c6:20:83:db:88:7c:cb:e9:26:91:ad:74:c8:de:
         7d:7d:2c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org