Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233372e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3233372e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          vEf4aptKbQziiJyzOpNPVnMx5VilhqeQag8/Y52TeQs=
Subject key identifier:   B1:30:21:36:A2:6B:30:1E:77:4F:87:9A:E0:EB:56:40:01:85:54:DE
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       0B09AFE260043FF8D654A5366CDAB5E152301B44
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233372e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 13:26:23 +0000
ROA not before:           Sun 19 Mar 2023 13:21:23 +0000
ROA not after:            Sun 17 Mar 2024 13:26:23 +0000
asID:                     28656
IP address blocks:        177.55.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:09:af:e2:60:04:3f:f8:d6:54:a5:36:6c:da:b5:e1:52:30:1b:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 19 13:21:23 2023 GMT
            Not After : Mar 17 13:26:23 2024 GMT
        Subject: CN=B1302136A26B301E774F879AE0EB5640018554DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b8:a9:7a:f9:51:51:cd:04:01:0b:ab:f1:0b:
                    07:ca:c7:5b:67:78:e8:6a:71:dc:e2:de:10:26:32:
                    f3:49:56:f3:7c:d3:b6:99:27:3e:df:06:04:87:ca:
                    4c:31:08:b8:a9:31:aa:20:35:22:72:84:7f:02:c3:
                    8d:b5:83:c6:5a:31:90:e9:3c:0b:1d:73:92:18:dd:
                    7b:d6:bd:45:97:9e:1b:ad:6e:20:cd:10:f1:46:e1:
                    9f:36:3e:c9:b0:40:30:29:19:85:bc:f7:43:a0:8f:
                    8f:ab:7e:dc:e6:61:a9:87:65:d1:13:e6:f0:55:86:
                    e6:8f:55:26:9a:a5:f3:e6:e5:98:c4:e3:d5:31:9e:
                    c9:5f:94:2a:55:ae:bd:0c:52:d2:cf:94:02:cf:12:
                    50:aa:ed:4c:45:cc:42:49:0a:22:fa:08:38:7b:ce:
                    48:01:b9:cc:57:a3:fc:50:58:bf:99:27:e1:e9:1b:
                    23:87:4c:d3:e7:3f:e9:04:e8:70:ee:34:d0:32:02:
                    d4:ac:64:b6:72:3d:4c:36:c4:cf:f4:fa:a8:3d:64:
                    bc:bc:87:b0:84:e5:e8:01:1f:e6:a1:3a:20:f5:54:
                    17:60:11:8a:02:76:e8:89:b2:21:63:c8:ff:2b:6a:
                    15:b1:26:61:a7:49:a0:1a:0a:c4:d3:95:08:37:e4:
                    57:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:30:21:36:A2:6B:30:1E:77:4F:87:9A:E0:EB:56:40:01:85:54:DE
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233372e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:73:9c:a2:4d:f1:63:33:7c:52:d7:64:52:d9:f5:6b:41:85:
         04:41:4d:f6:f5:55:0e:72:ce:bd:7b:cd:cf:78:54:f8:73:34:
         f3:73:da:95:f8:14:52:c9:b6:cb:e7:19:ce:df:9a:78:e4:f3:
         71:0b:bb:f9:b0:13:c1:84:65:11:e7:85:58:7e:42:46:1e:09:
         6b:ef:30:c4:3f:b4:8b:3a:62:86:61:eb:a1:60:ea:1d:2f:ea:
         44:d0:93:30:6f:57:c7:cf:df:3a:22:a0:70:02:60:cb:57:1b:
         c1:0c:e1:68:7c:2f:f6:93:03:6b:19:b0:6c:fe:f8:c5:54:db:
         44:91:8c:a1:de:87:f4:29:ec:5c:a2:09:25:3a:9a:2a:84:6e:
         13:17:4f:40:8e:40:ab:53:b0:c4:c7:f7:6f:0e:c2:4a:44:97:
         4f:8c:bb:ab:3e:e9:d6:02:2c:36:52:79:45:fe:ae:0b:75:1c:
         92:0b:1e:14:76:ca:fc:59:bb:68:0c:85:e2:5b:e5:d5:77:1d:
         bf:2a:7b:9b:26:aa:20:84:0e:82:ca:c8:99:4c:ff:c7:e7:d2:
         dc:cb:6e:cf:23:f3:f4:ad:01:34:45:9f:89:0d:78:e4:34:ab:
         fc:b5:9c:ea:2b:f4:4e:66:10:bb:5b:57:7a:40:c5:bb:a5:f6:
         f3:a8:6d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:34 2025 by rpki-client