Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3132382e302f32312d3231203d3e20323633303533.roa
File:                     3137372e3133372e3132382e302f32312d3231203d3e20323633303533.roa (raw, json)
Hash identifier:          hSagEwiP+AVMjr2SgcmFNlBACzHF27uqiV4YbQyFHvA=
Subject key identifier:   25:4A:3B:3A:4D:6C:9A:65:FF:39:EC:7E:56:37:B3:EB:AE:20:D2:CD
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       7974E059BD48A66B9F4EC68EC9AFA89D7DAF8102
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3132382e302f32312d3231203d3e20323633303533.roa
Signing time:             Wed 09 Feb 2022 16:52:17 +0000
ROA not before:           Wed 09 Feb 2022 16:47:17 +0000
ROA not after:            Wed 08 Feb 2023 16:52:17 +0000
asID:                     263053
IP address blocks:        177.137.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:74:e0:59:bd:48:a6:6b:9f:4e:c6:8e:c9:af:a8:9d:7d:af:81:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Feb  9 16:47:17 2022 GMT
            Not After : Feb  8 16:52:17 2023 GMT
        Subject: CN=254A3B3A4D6C9A65FF39EC7E5637B3EBAE20D2CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:a1:39:b3:29:81:59:f9:c4:eb:c2:a1:1f:
                    88:49:d7:93:04:1e:c2:12:56:05:7a:9b:63:e5:47:
                    f3:ee:6a:f6:37:69:0b:5d:ce:56:7d:2f:74:16:92:
                    86:39:2a:a0:26:bd:d6:6a:d1:9c:2b:82:11:44:89:
                    31:f2:89:93:49:56:ce:8f:ec:d3:c2:68:a3:67:05:
                    fd:51:fe:13:a4:8e:d6:84:7d:c8:95:ed:a2:cc:09:
                    98:8f:fe:67:4c:1c:68:4b:4d:21:59:58:2d:01:3a:
                    ec:b7:28:ba:85:55:fa:87:87:d9:21:23:84:b2:cc:
                    fa:2a:80:0e:2c:8e:41:bb:96:42:0f:92:9d:df:f9:
                    fe:7c:b3:97:ef:d4:50:49:b3:49:fc:16:4e:bc:2a:
                    71:64:09:37:91:7c:ef:68:bf:50:48:e0:8c:69:f9:
                    d3:e6:d0:d0:8f:20:13:b3:95:7a:ba:48:0a:ca:ce:
                    79:ab:b5:30:58:17:01:fc:80:5c:ee:2a:b1:89:d2:
                    e4:9b:91:04:60:3f:fb:91:2d:bd:3d:c5:71:cd:6b:
                    1b:9a:c0:20:71:5d:64:5e:f7:0b:02:80:f6:a7:7a:
                    ed:db:34:da:11:09:46:ff:95:b3:1a:e6:55:6e:b4:
                    de:88:f2:e1:ae:d3:2f:6d:74:bc:c6:9b:3a:b1:61:
                    e4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:4A:3B:3A:4D:6C:9A:65:FF:39:EC:7E:56:37:B3:EB:AE:20:D2:CD
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3132382e302f32312d3231203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:28:2f:e8:51:d0:38:4f:bf:69:e5:d9:16:0c:b2:df:8d:fc:
         5c:78:89:fe:e9:bf:6c:f2:ee:ab:21:2a:1d:f7:8d:98:32:1b:
         f9:e0:f3:f4:d1:5b:3d:ab:00:82:d4:0a:d6:74:23:a4:05:d1:
         06:29:5f:56:0a:4d:c1:11:ed:a8:c2:27:03:3f:95:07:90:67:
         8e:87:a4:df:6e:64:56:6c:a9:58:f7:85:38:12:2d:23:f1:d2:
         40:48:4f:49:f1:7b:4a:de:be:6c:46:34:92:fa:7d:a3:b5:e2:
         00:d0:50:d1:5d:6d:6f:34:8f:0b:9a:b1:11:9a:54:00:66:98:
         b2:73:96:de:37:dd:87:41:4c:b8:b6:4a:36:b3:63:45:d6:40:
         9d:af:8f:3f:4a:b0:c5:06:20:8e:99:c8:a7:6e:4a:c0:ca:4b:
         26:48:eb:a2:75:b3:e7:83:47:1b:6a:48:e9:bc:5d:c8:20:b7:
         81:41:e8:3b:be:88:e1:7f:14:6b:be:6c:73:bf:42:54:3d:0f:
         a1:48:58:e2:dc:1c:00:72:a8:44:82:29:6b:61:5e:89:5e:51:
         c5:a9:65:a8:29:a1:50:e3:cb:bb:fd:79:51:16:41:a4:db:1c:
         51:2d:35:bf:84:0f:45:89:e7:2e:be:cb:2d:16:8e:bb:1c:30:
         23:c0:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:06:06 2025 by rpki-client