Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133312e302f32342d3234203d3e20323633303533.roa
File:                     3137372e3133372e3133312e302f32342d3234203d3e20323633303533.roa (raw, json)
Hash identifier:          2zmZoSD9FfFbOi592DolLJjd4wBtAkgELH6kAyy8wbs=
Subject key identifier:   B8:91:69:5C:EA:B8:E8:79:99:00:4E:A4:92:60:27:CA:AC:7E:A9:32
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       224F8EE50F42E994E8FBBDF9A5E10B973D40422B
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133312e302f32342d3234203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:02 +0000
ROA not before:           Fri 06 Jan 2023 21:55:02 +0000
ROA not after:            Fri 05 Jan 2024 22:00:02 +0000
asID:                     263053
IP address blocks:        177.137.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:4f:8e:e5:0f:42:e9:94:e8:fb:bd:f9:a5:e1:0b:97:3d:40:42:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:02 2023 GMT
            Not After : Jan  5 22:00:02 2024 GMT
        Subject: CN=B891695CEAB8E87999004EA4926027CAAC7EA932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:74:e6:11:db:9f:50:74:b1:a2:13:ad:a4:f1:
                    c7:de:c5:34:77:ed:6d:3f:79:a4:3f:c7:23:6c:83:
                    9c:0f:a9:0f:c1:96:8b:f4:8e:b9:8f:5c:29:71:8a:
                    bf:5f:2d:88:af:d9:4e:58:9b:e2:0e:10:c1:f4:f8:
                    2a:6c:57:cd:90:81:4a:85:d7:1d:93:61:a9:38:5b:
                    5f:58:74:a2:4a:82:8e:94:90:32:37:2e:05:ba:77:
                    78:85:4b:f9:97:31:9b:00:11:25:ea:a9:89:7c:d9:
                    c5:e4:bf:b0:b8:a4:dc:67:6a:6c:d0:e8:e1:f1:c0:
                    8c:bb:7e:60:b1:c8:0f:f0:b1:ac:a8:a5:55:00:79:
                    b2:15:d9:df:e2:94:4b:ab:94:c6:ad:2d:8f:2f:1e:
                    0d:12:1b:3c:ff:ae:4d:49:ac:aa:62:3a:e2:50:c2:
                    f2:95:fc:42:a8:cb:d2:cc:25:53:48:20:85:b8:c9:
                    3c:a1:9d:53:86:ed:9a:5c:5a:06:58:42:15:5b:9b:
                    e7:0f:46:ca:3a:a4:0b:51:ba:f5:bc:82:78:2c:2b:
                    dc:05:92:4e:46:27:f9:b5:ac:a0:ac:5f:1e:96:11:
                    30:a1:a2:57:d2:0f:e9:4d:9d:57:4b:a8:5f:91:d7:
                    07:ff:18:b8:e6:70:3e:48:d2:b5:e3:42:dc:2d:63:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:91:69:5C:EA:B8:E8:79:99:00:4E:A4:92:60:27:CA:AC:7E:A9:32
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133312e302f32342d3234203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:87:5f:ae:78:60:33:8d:49:32:42:21:12:04:b6:f2:d2:e1:
         85:a4:37:4f:0d:87:79:57:6b:21:97:34:be:f1:1c:3f:da:ff:
         ef:84:83:e5:21:7b:2d:09:3d:7f:2b:d2:c6:78:ba:8b:36:73:
         06:b8:75:25:03:71:9a:77:34:33:6a:bc:8b:ab:6e:32:68:e4:
         4e:f0:3c:59:fc:7f:d9:cb:ad:da:74:81:99:01:02:66:9c:10:
         9f:96:90:55:8d:9f:39:1c:d3:68:41:de:cc:7b:bb:00:a4:ef:
         4b:cb:35:5b:dd:ce:3b:81:b8:a0:f5:63:1e:84:29:df:d4:9e:
         cd:ab:0c:da:4a:14:35:21:2b:89:80:6f:91:76:d5:ff:f4:50:
         6c:f7:a5:2e:94:05:d4:1f:37:d0:ed:d2:05:2a:ee:92:c6:70:
         7d:cd:a4:9d:7f:17:9e:0d:df:dc:5a:fb:f1:ed:a2:e1:2a:3a:
         23:7c:73:1e:a0:c6:5f:6a:02:5b:e0:80:a3:70:cf:10:4d:23:
         27:a9:ce:f7:e5:59:1c:d8:a9:04:ed:bb:90:ff:f7:bc:bb:3a:
         28:01:ef:c9:75:67:f4:2d:9b:90:6f:f0:53:8d:75:01:93:3b:
         93:ff:0d:47:52:57:a1:62:10:35:07:8d:f8:0f:04:c1:8a:35:
         65:f1:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org