Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3132382e302f32322d3232203d3e20323633303533.roa
File:                     3137372e3133372e3132382e302f32322d3232203d3e20323633303533.roa (raw, json)
Hash identifier:          XWghFOlU62sQQOtxrmepvD4DnxNjgSgqEGnKLwE8klk=
Subject key identifier:   B2:5F:38:96:EC:BE:F2:F1:C1:D6:2D:91:E8:10:2B:69:4D:F4:00:7D
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       0C18FE84B78D5886503CA85CC9D0285041EF7E71
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3132382e302f32322d3232203d3e20323633303533.roa
Signing time:             Wed 09 Feb 2022 16:52:48 +0000
ROA not before:           Wed 09 Feb 2022 16:47:48 +0000
ROA not after:            Wed 08 Feb 2023 16:52:48 +0000
asID:                     263053
IP address blocks:        177.137.128.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:18:fe:84:b7:8d:58:86:50:3c:a8:5c:c9:d0:28:50:41:ef:7e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Feb  9 16:47:48 2022 GMT
            Not After : Feb  8 16:52:48 2023 GMT
        Subject: CN=B25F3896ECBEF2F1C1D62D91E8102B694DF4007D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:df:1f:8c:c4:4e:52:3a:2f:05:57:d2:3a:
                    c3:77:d3:e8:60:39:c3:c4:40:22:76:a8:28:ec:85:
                    04:15:d6:74:63:22:cc:81:7d:98:92:6a:93:c1:7d:
                    00:2e:87:e1:8d:a3:e7:d3:6b:93:4b:6e:7b:04:ac:
                    56:7a:e1:6e:3f:34:35:e1:b6:87:3a:30:51:fe:04:
                    4e:77:39:0b:fc:9f:bd:6a:56:78:df:44:c6:84:22:
                    aa:f3:ea:05:e7:7f:42:b2:95:38:bb:e7:5c:d7:cb:
                    9c:1a:f9:91:9b:64:ed:90:fe:f8:92:a1:43:e1:9d:
                    a3:f1:e5:5c:33:d3:c8:83:b5:a4:ef:41:8f:dc:71:
                    07:9e:ed:ef:a2:c6:fc:a7:00:22:b1:3e:74:56:a0:
                    73:97:d7:fb:65:eb:bd:61:3b:e6:c7:d8:ca:f7:e8:
                    dc:d5:1c:90:ef:6c:76:87:63:d2:69:f7:ac:c9:73:
                    e5:e5:09:b5:26:65:27:9a:20:25:10:54:75:f2:0e:
                    63:22:63:31:6e:1e:cc:9a:25:65:90:e3:74:73:5c:
                    f4:20:bb:b7:b5:66:d9:42:c1:43:96:93:0f:7b:a8:
                    40:95:38:61:e9:f3:ce:72:ec:50:11:1a:cf:29:81:
                    63:b2:56:70:63:a8:ae:e3:80:8b:47:9c:b2:5c:4c:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5F:38:96:EC:BE:F2:F1:C1:D6:2D:91:E8:10:2B:69:4D:F4:00:7D
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3132382e302f32322d3232203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:50:00:61:fe:59:fa:5f:4f:70:3e:fb:bc:59:84:a9:74:60:
         5a:69:a4:b9:a3:be:33:cd:14:44:6f:b3:0c:61:1c:eb:50:87:
         e8:e7:35:c4:24:ef:6b:68:1e:f4:de:82:89:9c:a0:b5:30:89:
         70:b7:06:a6:81:22:d0:a9:53:5e:64:ab:8f:6f:03:9a:32:05:
         32:96:af:f7:75:6e:00:61:4c:83:4e:5c:97:83:f9:08:24:b5:
         25:77:33:5c:25:ec:ff:4f:35:e7:f5:43:03:c1:a9:d6:86:13:
         47:46:a0:1b:56:90:04:e3:4b:76:49:a6:75:f2:36:36:39:ed:
         8e:7a:4e:17:fc:49:9d:ba:db:0c:03:ec:ce:89:2a:26:83:7f:
         bd:6e:1f:ce:af:76:9a:02:ff:3b:eb:fd:4b:a2:f4:7d:97:ce:
         9e:95:9b:e8:ab:c9:96:a1:bd:93:51:58:b9:81:80:75:6a:26:
         20:09:6a:db:1e:bf:c7:53:25:d5:25:a2:2c:2e:90:2a:59:fc:
         10:a5:43:49:ea:16:ce:5f:06:23:37:ba:fd:0f:9f:8d:5a:a1:
         38:aa:22:8e:1f:8a:93:a5:b5:fb:3d:45:0d:43:a3:a4:59:44:
         27:57:8c:34:0c:c8:68:f1:6c:b4:9e:da:c8:94:9c:a7:1d:48:
         67:70:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:52 2025 by rpki-client