Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233382e302f32332d3233203d3e203238363536.roa
File:                     3137372e35352e3233382e302f32332d3233203d3e203238363536.roa (raw, json)
Hash identifier:          V6UNzDdcW6Vu4rneur3jsGraVAqgwQB5bi/I6m8l0Fc=
Subject key identifier:   CE:07:B4:17:09:82:92:93:C4:24:F8:B9:C2:81:B7:9F:F3:64:99:65
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       527E178D5A13779599F612D630FBF3D92C04E02D
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233382e302f32332d3233203d3e203238363536.roa
Signing time:             Fri 10 Mar 2023 19:33:44 +0000
ROA not before:           Fri 10 Mar 2023 19:28:44 +0000
ROA not after:            Fri 08 Mar 2024 19:33:44 +0000
asID:                     28656
IP address blocks:        177.55.238.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7e:17:8d:5a:13:77:95:99:f6:12:d6:30:fb:f3:d9:2c:04:e0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 10 19:28:44 2023 GMT
            Not After : Mar  8 19:33:44 2024 GMT
        Subject: CN=CE07B41709829293C424F8B9C281B79FF3649965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ba:13:f8:d9:25:cb:32:f3:af:7f:aa:70:76:
                    20:7f:de:ca:f3:97:cb:4a:d6:2a:ae:3d:5b:57:80:
                    79:f0:61:cf:14:15:f2:f2:69:70:50:27:fd:2f:30:
                    3f:31:1d:de:84:ad:d4:66:c4:e6:4e:c7:72:87:e1:
                    0a:5b:e5:ef:53:c8:4e:1e:c6:a5:75:dd:c7:4b:3e:
                    66:d2:1c:e8:2e:5a:92:aa:74:f9:e9:86:f6:82:24:
                    6b:6a:5f:58:f5:5c:32:4c:1c:7e:88:eb:f2:75:7e:
                    f4:35:dd:51:31:61:cb:bf:a0:83:03:26:2d:b7:2d:
                    42:ef:a8:83:00:f4:dd:76:41:5a:4e:cc:c0:78:99:
                    2c:74:62:c5:e2:32:15:53:0e:5f:20:0e:05:ce:ce:
                    c6:d0:ec:23:0b:e4:4b:9b:c5:a4:1c:83:8a:d2:dd:
                    53:2e:c2:3f:b9:53:f9:49:06:f0:0f:f8:93:50:d0:
                    c6:fe:82:9b:da:eb:5e:0f:f9:66:a8:73:f9:6e:2f:
                    9d:b9:68:7b:b2:10:36:b6:55:4f:6b:47:f0:36:08:
                    10:38:b2:4b:8b:bb:63:a8:ae:7e:ff:f0:39:12:13:
                    fc:a4:ef:8a:7a:aa:f1:63:b1:f5:00:1b:db:0b:51:
                    a5:bc:b5:1e:ab:c4:13:82:3b:65:fb:8f:cd:7c:dd:
                    ce:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:07:B4:17:09:82:92:93:C4:24:F8:B9:C2:81:B7:9F:F3:64:99:65
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233382e302f32332d3233203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:58:29:3d:43:86:d2:3d:2b:7f:05:b3:da:49:1e:ce:60:72:
         40:9b:5e:b9:ae:a2:82:66:d0:4d:8c:5a:48:c1:33:f2:b7:f2:
         74:48:95:b4:48:6b:a4:ad:8e:11:3f:f3:e7:1a:93:bd:f2:9f:
         db:71:55:a5:b3:ea:b4:28:a8:f5:49:22:ae:da:08:3e:82:ff:
         a6:c3:f7:63:41:3b:28:be:de:1d:d7:57:28:6a:63:31:5f:74:
         a0:46:d2:d5:fb:ce:1a:cc:b0:8d:be:e0:fb:b8:ab:16:0a:07:
         66:5f:6e:a7:55:a9:f2:38:86:32:81:d7:ef:97:7a:58:ac:db:
         ef:6c:57:9b:26:27:d3:52:76:bc:0c:a7:30:ea:d1:09:cf:06:
         41:ab:16:9b:b4:7d:9b:05:c6:4b:63:4b:08:96:38:6b:40:69:
         2c:fb:64:99:4a:21:15:91:a4:3b:47:c8:e8:a0:76:d4:f9:a5:
         81:70:58:24:f7:08:c9:4a:c2:12:76:2d:f4:c4:9c:7a:bf:e3:
         0e:70:7a:2a:9d:33:26:6d:1f:4f:e7:c1:a3:31:f8:a0:1f:78:
         47:46:43:28:ce:db:16:fe:8e:57:23:b5:17:28:7e:6b:76:8b:
         76:17:c5:24:58:7c:2e:0f:55:fc:28:bc:13:e0:ce:5b:51:4f:
         b5:9f:11:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:43:30 2025 by rpki-client