Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133322e302f32322d3232203d3e20323633303533.roa
File:                     3137372e3133372e3133322e302f32322d3232203d3e20323633303533.roa (raw, json)
Hash identifier:          45xoqVZiXQ387dNg4qrHnWi6oYBJF1DWm8kQGQ7kYC0=
Subject key identifier:   C2:5B:57:3C:3A:60:9C:53:BB:07:E8:2A:8D:AF:27:10:89:B1:45:53
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       3C4A3637428CF2002BC4628BD7AE5419A427C94F
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133322e302f32322d3232203d3e20323633303533.roa
Signing time:             Wed 09 Feb 2022 16:52:35 +0000
ROA not before:           Wed 09 Feb 2022 16:47:35 +0000
ROA not after:            Wed 08 Feb 2023 16:52:35 +0000
asID:                     263053
IP address blocks:        177.137.132.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:4a:36:37:42:8c:f2:00:2b:c4:62:8b:d7:ae:54:19:a4:27:c9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Feb  9 16:47:35 2022 GMT
            Not After : Feb  8 16:52:35 2023 GMT
        Subject: CN=C25B573C3A609C53BB07E82A8DAF271089B14553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:e8:49:3c:b3:c1:08:49:10:ea:e1:d7:32:
                    be:b3:de:10:37:8f:42:27:46:83:0e:8d:95:9c:58:
                    ab:b3:f4:fb:a5:6f:1a:94:1a:71:3f:4e:fa:1e:5d:
                    6d:59:53:67:d0:c1:ce:fe:be:ed:69:48:47:96:6d:
                    26:e8:c9:1e:15:77:fb:5e:59:7b:d7:01:36:30:96:
                    be:fa:6b:90:32:10:df:a0:8e:c8:09:db:44:30:97:
                    93:de:b3:8c:ad:cf:d0:37:92:a3:b8:7b:ab:27:2e:
                    1f:0f:1b:67:5d:e8:35:39:ea:e2:3b:0f:e2:86:23:
                    9d:e6:2f:e5:7a:1e:5e:5d:94:b6:cb:78:2b:cc:38:
                    f6:42:8b:7d:38:38:aa:29:d2:84:4d:f4:61:88:ed:
                    98:b0:b4:e5:6a:d6:99:f8:79:a6:3d:f6:2a:95:9a:
                    c0:e2:4b:d1:92:1e:d9:8a:32:1b:16:5c:76:10:81:
                    f5:93:ee:57:59:8e:f5:73:a6:c9:6d:b7:82:86:d4:
                    ea:b5:1e:7e:5c:3f:9a:77:51:89:92:de:42:30:b6:
                    ff:c9:32:26:dc:7d:8e:28:19:78:66:2f:18:26:0f:
                    40:51:20:7f:10:05:4d:01:90:a3:06:51:fd:ae:95:
                    2c:f7:42:ec:ca:a5:77:ed:06:e5:fe:d0:22:1e:c8:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5B:57:3C:3A:60:9C:53:BB:07:E8:2A:8D:AF:27:10:89:B1:45:53
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133322e302f32322d3232203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:a1:fa:a0:c8:e5:01:4f:1f:7e:34:d2:50:91:25:11:a5:82:
         e9:14:06:11:27:2f:7f:9a:42:88:40:a8:ed:49:de:6e:14:4c:
         d5:c7:4c:82:d8:68:91:3a:24:f7:11:4e:1e:e8:9c:16:39:49:
         c9:c2:98:e1:59:f8:fc:f7:6b:6e:ce:6f:90:83:ae:1f:75:be:
         d2:63:79:5c:38:82:5b:90:86:69:46:30:5f:83:ce:b2:b7:3d:
         5c:04:ef:0d:f6:45:d1:cc:84:f3:74:c5:cf:47:f3:65:af:58:
         28:da:f5:90:c1:f4:85:bb:10:24:c9:0c:7d:c0:3a:8a:74:1b:
         fd:4b:8e:4d:c0:4a:b9:22:da:93:cb:43:c1:e6:d7:de:55:52:
         59:c5:76:e0:b5:ea:77:d1:fc:1b:f0:a3:73:96:6a:e4:3a:f4:
         9a:85:3d:0c:1a:7f:89:62:ee:bc:5d:a4:94:8f:4f:d9:9a:9b:
         8c:59:0c:f1:b6:cd:fe:17:b6:c4:71:f3:08:28:25:4c:21:4b:
         52:4e:2b:28:da:bc:ea:7a:d2:20:78:69:f2:a7:82:3e:fb:2b:
         51:48:ca:a1:b1:05:da:09:6f:f2:e9:24:6b:ae:d3:34:51:c8:
         bb:78:ee:cf:ef:5c:10:bf:20:00:f8:5e:5e:79:33:4e:a8:70:
         dd:4a:4c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:00 2025 by rpki-client