Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3132382e302f32342d3234203d3e20323633303533.roa
File:                     3137372e3133372e3132382e302f32342d3234203d3e20323633303533.roa (raw, json)
Hash identifier:          ruuyOwQvfbADhweDlJmDKVOB47azmzVmurHFdKyWnLg=
Subject key identifier:   CD:7A:D3:66:CE:C3:2B:90:FA:67:94:E9:29:EB:48:E0:C7:A0:EA:06
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       70675B8FDB4AD09D133CD6E9C3C74061D854AB44
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3132382e302f32342d3234203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:03 +0000
ROA not before:           Fri 06 Jan 2023 21:55:03 +0000
ROA not after:            Fri 05 Jan 2024 22:00:03 +0000
asID:                     263053
IP address blocks:        177.137.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:67:5b:8f:db:4a:d0:9d:13:3c:d6:e9:c3:c7:40:61:d8:54:ab:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:03 2023 GMT
            Not After : Jan  5 22:00:03 2024 GMT
        Subject: CN=CD7AD366CEC32B90FA6794E929EB48E0C7A0EA06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0f:9a:e8:82:0e:e9:b3:a7:bf:32:8d:9a:86:
                    77:e9:66:06:5d:32:fd:ab:c3:6d:ef:1c:26:79:64:
                    a9:28:77:ad:1d:8e:31:fe:44:dc:03:2e:df:a1:3a:
                    04:21:69:d5:af:f0:ad:4d:07:83:3f:c5:af:e3:81:
                    1e:71:13:06:a6:79:d8:66:31:28:2a:22:7e:e4:51:
                    af:bd:fb:4f:1d:cc:58:fd:c5:31:91:64:a6:44:b3:
                    b9:db:d0:1a:98:43:cd:1a:fd:56:39:3a:66:2a:76:
                    2d:1a:c9:24:93:78:65:06:50:60:26:e7:0f:07:72:
                    01:7d:17:2b:c9:f9:ec:ff:bf:de:67:9a:79:07:88:
                    6d:9a:27:50:4e:d7:c5:83:c6:6f:8c:39:a4:67:8f:
                    06:79:0e:28:32:5c:4a:13:8e:46:2b:c2:99:cc:21:
                    93:73:d7:5d:7f:98:c9:a0:7f:af:2c:66:47:64:e9:
                    81:2e:80:68:73:75:99:16:4c:bf:6f:d3:ac:fa:e7:
                    05:96:a3:1c:59:06:63:ff:02:83:78:04:49:68:e8:
                    eb:86:ff:81:2e:e4:d0:47:15:2a:09:b7:80:7d:73:
                    00:6f:47:d1:c8:f1:d6:eb:37:f9:f2:9e:5f:98:b9:
                    c5:5a:47:3f:1a:02:a7:8c:55:fb:12:ee:d0:87:15:
                    e8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7A:D3:66:CE:C3:2B:90:FA:67:94:E9:29:EB:48:E0:C7:A0:EA:06
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3132382e302f32342d3234203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:de:c5:b8:2b:6a:9d:64:5f:64:82:7d:1f:89:73:72:9a:2e:
         4c:91:d1:a3:45:f4:bb:2a:95:4d:9b:b1:1a:db:a8:8f:cc:85:
         84:9a:b1:6f:1f:ac:af:c1:25:d8:3a:40:c9:95:5a:ec:3e:98:
         b1:8b:88:3b:8c:4e:6c:e1:17:7c:ba:42:bc:3f:3f:e1:c0:e2:
         e8:b1:46:30:57:58:a7:14:bf:b6:82:9b:37:5a:f8:c2:59:32:
         ad:d7:50:5e:e7:1d:c8:b3:15:fb:32:d5:55:55:38:ed:5f:54:
         7f:75:9a:ee:fe:56:e2:bd:84:4f:b2:07:60:57:11:3c:71:63:
         2f:0e:2c:d0:99:44:a5:61:cb:ae:a7:62:c8:8d:c9:47:b6:5e:
         e6:54:99:9f:2a:49:f0:cf:77:02:c5:72:bf:22:ff:9d:23:be:
         4d:79:1c:b7:eb:d7:1a:ac:94:07:83:d4:d9:7d:a0:92:92:82:
         34:8e:01:67:2c:85:99:72:bf:e4:a2:55:c8:f1:89:2f:5f:7b:
         5d:78:ad:5b:45:f5:6f:3d:a0:3e:34:4d:b6:e1:75:17:1c:c7:
         96:33:48:43:21:c9:75:fa:de:54:82:0d:49:92:52:98:a0:50:
         ed:b2:49:a0:42:eb:df:b4:99:74:c1:89:d9:8a:f6:dd:ea:09:
         7c:f7:cf:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org