Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233392e302f32342d3234203d3e203238363536.roa
File:                     3137372e35352e3233392e302f32342d3234203d3e203238363536.roa (raw, json)
Hash identifier:          +VSzuG4LZgDsi6edriOd4+4/4Ya/GNMupoibi9q6TF4=
Subject key identifier:   B8:F1:10:FC:49:BA:60:92:08:12:44:CC:D6:5D:0D:55:BB:5E:5E:DF
Certificate issuer:       /CN=6BB28979534152D56CDB8941822004B21C044476
Certificate serial:       3247BFB6A7D85FF99009C77224C9F3BB162496F3
Authority key identifier: 6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233392e302f32342d3234203d3e203238363536.roa
Signing time:             Sun 19 Mar 2023 13:26:21 +0000
ROA not before:           Sun 19 Mar 2023 13:21:21 +0000
ROA not after:            Sun 17 Mar 2024 13:26:21 +0000
asID:                     28656
IP address blocks:        177.55.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:47:bf:b6:a7:d8:5f:f9:90:09:c7:72:24:c9:f3:bb:16:24:96:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB28979534152D56CDB8941822004B21C044476
        Validity
            Not Before: Mar 19 13:21:21 2023 GMT
            Not After : Mar 17 13:26:21 2024 GMT
        Subject: CN=B8F110FC49BA6092081244CCD65D0D55BB5E5EDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:03:1b:4a:32:b9:6b:05:1a:c1:eb:20:17:
                    6a:2a:54:00:ae:8d:f1:04:8c:e2:68:ae:e7:36:c8:
                    e2:d7:41:c5:64:1f:ba:b4:dd:0b:60:94:22:b8:d2:
                    f4:a1:cc:3c:5c:4b:de:8b:14:aa:45:86:e2:ef:24:
                    df:f1:f9:44:56:57:7e:93:75:08:bb:dc:ad:ea:30:
                    16:05:d3:05:ca:cd:fd:22:11:7f:cc:1b:b1:44:5f:
                    28:c1:9c:d5:19:b9:ec:e7:93:03:92:4a:f6:cb:e0:
                    32:34:24:4e:0c:b1:de:3b:d2:39:bb:4e:b7:b8:d6:
                    78:26:f5:c7:5d:bd:8a:4c:65:15:04:34:e0:d2:b9:
                    68:0a:42:7c:34:e7:51:86:87:34:03:58:bc:d1:a9:
                    fa:54:cd:e0:db:e8:84:06:a9:36:a3:10:66:05:43:
                    ea:fe:c5:7f:76:55:e3:c7:ef:e8:30:c3:28:b2:83:
                    15:17:6b:e4:81:6d:23:b8:f1:ac:69:0d:c3:e9:ef:
                    fc:89:30:fe:7f:75:f9:5c:e0:ad:9f:63:01:94:52:
                    9d:0e:59:84:a1:be:4c:fb:07:d1:90:03:1b:f6:30:
                    af:49:9e:7b:76:36:0d:9b:cf:e9:2a:28:6a:2d:b8:
                    28:0f:67:5e:27:30:78:84:1a:2f:c7:fc:6e:28:a9:
                    2e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F1:10:FC:49:BA:60:92:08:12:44:CC:D6:5D:0D:55:BB:5E:5E:DF
            X509v3 Authority Key Identifier:
                keyid:6B:B2:89:79:53:41:52:D5:6C:DB:89:41:82:20:04:B2:1C:04:44:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/6BB28979534152D56CDB8941822004B21C044476.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6BB28979534152D56CDB8941822004B21C044476.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3137372e35352e3233392e302f32342d3234203d3e203238363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:d4:59:7f:b0:65:cc:de:67:7f:d9:4a:f6:1d:a7:0a:1e:4a:
         5b:4b:7b:a8:34:69:65:6e:10:bf:36:93:27:f1:f1:29:4a:a4:
         e4:1c:c3:98:c7:10:a6:23:e6:43:12:25:56:ac:ae:b9:35:7e:
         46:e2:ea:fa:08:a1:0e:c3:4e:af:19:73:ca:1d:37:ba:1f:77:
         1e:a5:85:56:0f:86:dc:97:fd:d2:b2:aa:25:83:03:e6:4d:74:
         c9:92:c2:98:70:18:68:bd:5d:ab:a8:97:f1:b8:fb:3c:8d:7f:
         43:ee:df:11:da:ed:a7:b7:24:e8:6e:21:a9:89:9c:ff:f5:63:
         b8:01:0f:b6:64:54:15:0f:c3:00:01:26:35:3f:02:3c:3f:19:
         58:74:16:33:1b:df:72:68:c9:12:8d:d9:9b:fd:4b:a0:e9:1e:
         be:b4:1f:bc:2f:c3:e8:c3:17:5b:0f:ed:27:2d:ab:13:f9:27:
         bc:e4:62:e1:b6:0e:d6:a4:70:38:4e:20:2a:42:88:08:f8:37:
         c9:21:d2:10:1a:91:1f:ec:e5:8d:3c:22:c3:c3:ad:67:9e:a8:
         b5:06:ed:6d:b3:7f:19:f8:05:77:27:f6:a5:f5:20:d6:0b:cb:
         75:a8:cb:16:11:6d:01:dd:36:8d:67:0d:90:bd:ae:6b:2a:6d:
         ec:fb:1b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org