Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3132392e302f32342d3234203d3e20323633303533.roa
File:                     3137372e3133372e3132392e302f32342d3234203d3e20323633303533.roa (raw, json)
Hash identifier:          55d4gEhpZTbRaxS0LFmrDvnOzUe0I+DvLQRhbc30d/Y=
Subject key identifier:   17:E5:CA:A1:73:28:34:58:A1:A6:46:77:9D:10:F4:BF:53:52:AD:C0
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       7BD970E7B758623DE45A4E3A42B116DA605AF476
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3132392e302f32342d3234203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:05 +0000
ROA not before:           Fri 06 Jan 2023 21:55:05 +0000
ROA not after:            Fri 05 Jan 2024 22:00:05 +0000
asID:                     263053
IP address blocks:        177.137.129.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d9:70:e7:b7:58:62:3d:e4:5a:4e:3a:42:b1:16:da:60:5a:f4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:05 2023 GMT
            Not After : Jan  5 22:00:05 2024 GMT
        Subject: CN=17E5CAA173283458A1A646779D10F4BF5352ADC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9d:25:20:36:01:bf:7f:ac:cb:60:4c:07:7a:
                    6a:b9:5d:e0:f8:07:03:f5:eb:17:e3:a4:67:83:a9:
                    9d:28:20:23:82:62:7f:d4:e3:cd:5b:77:62:79:bd:
                    5f:35:cf:0c:62:ba:64:67:63:e4:26:41:dc:bc:59:
                    50:9a:4c:f6:d5:a6:ce:39:ec:50:03:a2:91:dd:96:
                    8b:7f:0c:04:ac:7d:05:86:27:ad:48:eb:91:fb:95:
                    b4:87:7a:31:95:c9:28:51:17:45:7f:cb:2c:ee:bf:
                    cd:c7:42:80:33:55:1e:8c:04:a1:10:a7:08:0e:db:
                    0b:08:96:58:4a:95:b0:d7:4d:f3:4a:c7:0a:a1:55:
                    4b:09:2f:40:8e:37:07:ec:c9:7f:95:af:ff:a4:7a:
                    54:09:0c:0b:2b:7c:84:dd:cf:52:a8:2e:e1:e0:6a:
                    b0:b6:bc:fb:65:49:55:a1:c5:34:19:b3:21:10:eb:
                    aa:dc:03:65:84:01:3c:2e:06:12:ca:22:a2:d0:55:
                    58:9a:55:5a:b1:8a:cb:17:56:1d:bf:ea:65:47:47:
                    24:90:60:fa:38:1d:e2:cc:eb:08:10:85:d4:07:e1:
                    83:2c:10:de:7b:0b:05:2d:34:4e:4f:44:de:6f:4a:
                    d0:fb:71:9a:e4:80:9d:9b:fb:77:80:92:24:91:70:
                    d7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E5:CA:A1:73:28:34:58:A1:A6:46:77:9D:10:F4:BF:53:52:AD:C0
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3132392e302f32342d3234203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:15:85:d7:9e:68:3c:d6:3b:d8:cc:f7:5f:79:36:0e:13:27:
         48:9a:72:eb:e8:04:5f:bd:60:02:9d:89:27:cd:b8:fd:78:c1:
         6b:a4:0d:3c:53:03:79:3b:de:96:4c:62:79:ae:4b:1c:d7:00:
         96:cb:77:18:45:0f:a0:27:b7:fe:c8:60:70:3a:dc:58:78:ab:
         b9:84:9e:7b:b9:fa:19:83:b6:5e:65:54:6d:68:eb:86:ae:be:
         14:18:e9:0e:76:04:7a:ad:62:9e:b2:1c:30:b0:01:e0:d4:8b:
         90:68:96:5a:12:df:5e:58:04:55:ec:12:8c:a3:8e:a6:c4:81:
         b2:c7:ac:ce:53:22:64:df:0e:a8:a6:6a:9d:3d:aa:17:f6:8d:
         d3:12:46:d6:58:6d:e3:8e:04:ce:d1:3c:da:6f:c7:95:29:b6:
         16:24:e5:6f:75:9d:ec:0e:e8:08:5d:33:6c:d5:a4:c6:28:62:
         f0:38:aa:f1:e8:2d:0f:4c:96:08:d2:d1:f3:7c:19:ea:09:07:
         4e:bb:6c:1c:7c:35:c1:7e:ed:96:8d:a2:0b:5b:3e:92:75:a0:
         81:8e:a5:ba:80:21:ec:35:cb:da:7d:82:47:84:fe:49:fc:3a:
         6e:c9:6b:bf:7a:09:31:cd:25:f4:d7:fc:01:24:3a:3b:13:94:
         46:7f:8a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:53 2025 by rpki-client