Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e39312e302f32342d3234203d3e20323633353731.roa
File:                     3137372e35352e39312e302f32342d3234203d3e20323633353731.roa (raw, json)
Hash identifier:          ctbAB0ZedTMcio5RLCSu2xzOUnMJCOd+oFTyqHJUNOE=
Subject key identifier:   8C:F6:CA:6C:1E:A0:A4:52:C1:C4:DB:C1:4A:9F:FC:73:E1:24:09:C2
Certificate issuer:       /CN=2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190
Certificate serial:       2C86A239C44A54FA889274B6515E7FDDD1A57B72
Authority key identifier: 2B:D7:FC:C4:7D:CA:9F:F8:A2:B9:C3:58:07:6F:80:CC:7B:9A:51:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e39312e302f32342d3234203d3e20323633353731.roa
Signing time:             Wed 11 Dec 2024 20:33:55 +0000
ROA not before:           Wed 11 Dec 2024 20:28:55 +0000
ROA not after:            Wed 10 Dec 2025 20:33:55 +0000
asID:                     263571
IP address blocks:        177.55.91.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:86:a2:39:c4:4a:54:fa:88:92:74:b6:51:5e:7f:dd:d1:a5:7b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190
        Validity
            Not Before: Dec 11 20:28:55 2024 GMT
            Not After : Dec 10 20:33:55 2025 GMT
        Subject: CN=8CF6CA6C1EA0A452C1C4DBC14A9FFC73E12409C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b3:5b:a6:8a:2b:f8:da:c9:bb:a9:3a:c2:32:
                    de:2d:a8:3a:85:8c:bf:4d:b4:cd:25:7a:c3:18:db:
                    92:6e:a4:fa:d5:0c:34:89:26:b1:ea:6a:97:8f:76:
                    ea:81:45:cc:6f:50:32:32:3c:4c:2e:ff:24:9d:be:
                    60:19:eb:cd:4a:e9:71:95:6b:ad:1c:ad:46:ba:60:
                    cc:46:f5:a7:b6:85:d5:ed:df:25:9b:6e:fe:0a:b1:
                    bf:53:d3:90:d1:e7:2f:c2:ea:c0:cd:91:1d:60:8a:
                    5b:fd:05:e3:92:e9:00:0f:d9:5e:7a:15:89:a4:e2:
                    b4:a1:c3:fa:ff:6b:1f:72:2b:95:0b:be:86:2c:cf:
                    df:a6:86:e8:22:3c:77:eb:80:93:81:42:45:61:af:
                    e2:49:7f:80:74:c5:dd:be:1f:d1:a9:85:d4:6a:5f:
                    61:2b:cf:92:16:a6:97:a7:e1:99:25:0b:b0:4f:b3:
                    d7:9e:ff:82:d1:d4:f0:a3:21:ac:e7:53:a4:b5:9a:
                    79:3d:82:98:59:22:66:9c:28:82:42:ab:80:53:27:
                    60:7f:31:3a:e8:9c:a0:cb:15:fc:1c:2d:ab:b2:82:
                    c1:d6:b7:71:07:73:93:26:2c:17:2c:73:b1:cd:70:
                    25:68:ba:36:8b:d7:08:3a:1e:45:07:99:b8:4f:52:
                    f1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F6:CA:6C:1E:A0:A4:52:C1:C4:DB:C1:4A:9F:FC:73:E1:24:09:C2
            X509v3 Authority Key Identifier:
                keyid:2B:D7:FC:C4:7D:CA:9F:F8:A2:B9:C3:58:07:6F:80:CC:7B:9A:51:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BD7FCC47DCA9FF8A2B9C358076F80CC7B9A5190.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5r6PbywKUX6xSkq7vRe9GZCa71K1KJjJcGnBUis3ryHA/0/3137372e35352e39312e302f32342d3234203d3e20323633353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:05:4c:14:fa:43:c2:d0:cf:d9:ab:8b:86:03:04:cf:c5:70:
         b3:5e:09:44:44:6b:92:bd:75:33:1b:14:6a:0f:67:93:db:ed:
         e0:b2:7f:19:62:b6:43:aa:f5:87:bd:13:ba:32:01:55:24:e7:
         b5:10:8e:7c:2e:f0:2b:7b:cb:66:e6:95:63:e6:99:82:74:0e:
         82:d2:49:8f:c6:34:31:e4:e6:b7:f9:a7:ea:6b:2b:69:fc:a5:
         86:05:93:1f:b0:d1:5a:1e:93:b1:3f:6b:e4:04:ec:ae:d1:a7:
         2a:ba:a5:0e:64:27:12:48:56:9e:6f:4a:33:4d:d9:d3:0a:dd:
         3a:b3:f8:58:0a:0b:22:38:7a:ff:32:b0:a7:ec:43:c6:6d:64:
         cd:cc:37:ae:11:10:46:26:ef:05:fd:e7:93:0a:c4:36:f9:26:
         74:0c:4d:74:d9:eb:af:ef:48:53:c0:7e:df:b7:98:82:d4:9e:
         e4:ec:10:36:4f:3b:9a:b9:c0:98:73:01:df:8f:42:f0:30:eb:
         b3:60:10:5e:69:71:c9:31:5d:0f:4e:80:ad:5d:96:5f:36:15:
         8c:9c:86:14:e7:1d:0d:09:53:88:a0:96:cf:8b:7a:de:ce:7f:
         73:c4:51:5a:96:b2:1d:c6:7d:12:4c:03:4a:87:29:3f:2b:c7:
         33:41:23:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:43:50 2025 by rpki-client