Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38392e302f32342d3236203d3e20323633353731.roa
File:                     3137372e35352e38392e302f32342d3236203d3e20323633353731.roa (raw, json)
Hash identifier:          YSYg9zq4sgqq7DPhdaaMwrZvGxG9icuep8hGBh9iJws=
Subject key identifier:   B9:7C:91:63:65:99:E6:12:1B:47:4E:B3:CE:C2:F6:E8:6C:F3:23:92
Certificate issuer:       /CN=41D988C453AB5CA96DA778B690390450C6345EEE
Certificate serial:       20FC3A42350D7DA541B6FCD3ACBE19FA9E01C42A
Authority key identifier: 41:D9:88:C4:53:AB:5C:A9:6D:A7:78:B6:90:39:04:50:C6:34:5E:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D988C453AB5CA96DA778B690390450C6345EEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38392e302f32342d3236203d3e20323633353731.roa
Signing time:             Mon 30 Oct 2023 14:32:34 +0000
ROA not before:           Mon 30 Oct 2023 14:27:34 +0000
ROA not after:            Mon 28 Oct 2024 14:32:34 +0000
asID:                     263571
IP address blocks:        177.55.89.0/24 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fc:3a:42:35:0d:7d:a5:41:b6:fc:d3:ac:be:19:fa:9e:01:c4:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41D988C453AB5CA96DA778B690390450C6345EEE
        Validity
            Not Before: Oct 30 14:27:34 2023 GMT
            Not After : Oct 28 14:32:34 2024 GMT
        Subject: CN=B97C91636599E6121B474EB3CEC2F6E86CF32392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:19:27:e0:c9:6f:20:1a:49:f3:02:0e:1c:
                    68:a8:56:7f:00:c6:81:9b:49:72:32:31:4b:ef:c9:
                    79:14:04:e6:7f:61:2f:e4:11:f4:03:fc:60:1c:e6:
                    b6:8d:f2:23:dd:75:4f:0b:e3:98:9a:6a:c3:17:c6:
                    1f:ed:31:61:32:81:ef:61:65:bb:ed:fc:3c:f9:59:
                    e2:d7:a0:66:18:fc:e5:b8:65:19:01:dc:23:31:af:
                    45:f6:7d:8e:e0:7c:d0:e6:5a:6c:83:67:59:b9:a3:
                    24:22:88:91:fb:b4:d7:0c:67:21:a0:62:cd:c7:21:
                    9d:18:92:c1:d8:16:47:ec:2a:c4:6d:30:d1:01:0f:
                    25:51:73:7e:2c:a3:62:cd:e6:2d:47:8b:be:fe:ce:
                    17:71:e5:45:3d:21:03:51:ce:70:b7:23:ca:46:32:
                    74:bc:27:33:c0:e6:5d:18:7d:4b:fd:4d:19:68:26:
                    93:26:73:ac:1c:6e:fb:f1:c2:27:00:0f:b0:e7:d9:
                    57:57:e6:ae:3b:e6:ab:60:93:eb:3b:2b:94:52:12:
                    48:1e:23:cb:54:2d:4e:e9:ea:50:d1:55:1a:24:b3:
                    13:c1:69:a5:29:58:47:03:ce:79:19:8f:f0:19:96:
                    39:39:74:b2:b2:ae:ec:a8:60:6e:3a:25:45:cd:c3:
                    62:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7C:91:63:65:99:E6:12:1B:47:4E:B3:CE:C2:F6:E8:6C:F3:23:92
            X509v3 Authority Key Identifier:
                keyid:41:D9:88:C4:53:AB:5C:A9:6D:A7:78:B6:90:39:04:50:C6:34:5E:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/41D988C453AB5CA96DA778B690390450C6345EEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41D988C453AB5CA96DA778B690390450C6345EEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e38392e302f32342d3236203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:2f:fa:df:34:cf:4c:b2:bd:1d:84:2c:6c:2e:e6:71:51:85:
         43:c2:73:e0:bc:7b:05:ea:cc:c1:af:80:db:0d:fc:cb:5d:a1:
         db:a1:9b:52:79:41:e2:a3:65:a1:ad:91:01:ad:bf:42:04:a7:
         83:8a:bb:61:3a:5f:e2:93:03:ce:00:c8:bc:97:ec:c3:d8:c5:
         f8:4a:c9:4b:21:0a:bf:e1:c8:9d:10:1b:7f:63:8d:6a:27:f9:
         67:35:47:31:0b:ed:ef:d9:1f:92:50:12:41:07:7c:a5:74:9d:
         53:f4:8f:d2:d6:d0:08:d5:2b:7b:2a:b2:56:e0:8c:c6:50:7c:
         83:80:f8:fd:59:4b:36:d6:40:3e:65:b1:89:4e:a1:0b:68:a3:
         15:89:4a:b5:52:fd:17:79:eb:c2:b0:c1:2a:bf:4b:8e:3d:8c:
         ce:1d:1f:e8:46:3e:30:6e:63:30:fe:b3:55:47:c4:0c:b9:c3:
         fb:3d:bd:f0:b9:c1:c6:cf:14:70:3c:48:20:8c:9f:24:50:7d:
         2a:fa:d9:61:0e:c5:b3:61:9b:1e:d3:df:44:04:b3:de:8f:d7:
         29:f4:99:be:32:72:3f:cf:21:82:bb:eb:a4:78:42:22:82:9c:
         30:b3:a6:ab:8c:33:2e:95:01:9c:a0:da:97:02:cb:25:1e:83:
         93:f4:92:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org