Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133322e302f32342d3234203d3e20323633303533.roa
File:                     3137372e3133372e3133322e302f32342d3234203d3e20323633303533.roa (raw, json)
Hash identifier:          4rT8IrQELGH1n5FLnRAf5N4M/ZYqUEs69mx/EIheUnM=
Subject key identifier:   0F:4C:7B:EF:C1:44:28:B1:54:92:5E:B4:0D:1F:ED:F7:D6:C2:E1:3F
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       5A766828DB9F5C49EB1B8FD657FD999B0FA58852
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133322e302f32342d3234203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:05 +0000
ROA not before:           Fri 06 Jan 2023 21:55:05 +0000
ROA not after:            Fri 05 Jan 2024 22:00:05 +0000
asID:                     263053
IP address blocks:        177.137.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:76:68:28:db:9f:5c:49:eb:1b:8f:d6:57:fd:99:9b:0f:a5:88:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:05 2023 GMT
            Not After : Jan  5 22:00:05 2024 GMT
        Subject: CN=0F4C7BEFC14428B154925EB40D1FEDF7D6C2E13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:b6:66:66:ce:5e:49:c2:d4:af:6e:ce:f5:
                    2e:0e:96:ae:7a:9f:c5:8b:97:8e:71:8f:72:b3:16:
                    7d:ba:49:31:13:60:65:94:ef:c6:69:71:c3:2a:3c:
                    7b:17:aa:11:30:d0:51:4d:2e:ef:13:c1:44:c2:30:
                    33:82:dc:68:ff:38:39:2c:8e:cf:dc:e7:ea:1a:7f:
                    6a:aa:e6:86:43:d8:64:59:b1:17:ff:55:7a:a2:88:
                    8f:4b:85:3d:4e:12:0c:04:96:8f:54:87:20:21:79:
                    45:98:2d:ac:f4:fe:37:74:a2:7a:31:68:38:08:4e:
                    46:78:81:1c:09:8b:8f:1b:c0:ef:f3:ca:5d:f7:02:
                    fd:71:49:08:9b:30:97:0e:4d:7f:55:a2:74:7b:be:
                    67:bd:ef:82:6c:71:ef:ee:24:53:f1:d4:81:fa:c9:
                    bc:e3:79:f7:8b:63:84:99:71:79:b8:e5:1c:b2:15:
                    be:90:17:73:13:02:b3:57:dc:d4:b9:d6:0d:63:c2:
                    a1:a8:6f:61:bb:20:68:a0:22:aa:1a:ef:02:18:5d:
                    1f:3d:9c:e5:34:fe:4d:da:54:e2:ad:ee:0b:5f:ca:
                    63:db:6e:10:05:d1:71:40:9f:4d:f5:48:c1:57:85:
                    68:9c:23:b3:49:d9:81:19:d2:0e:e8:55:c8:7e:1f:
                    e5:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4C:7B:EF:C1:44:28:B1:54:92:5E:B4:0D:1F:ED:F7:D6:C2:E1:3F
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133322e302f32342d3234203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ce:08:3e:70:05:54:ea:33:52:85:e9:18:59:02:ab:55:5b:
         16:e6:2e:63:c0:15:b0:10:6f:85:ea:20:6f:39:2b:6e:1b:c7:
         5f:81:51:3d:32:14:11:2b:bf:8c:f8:99:66:84:0d:cf:c9:f3:
         8d:d1:08:e3:82:e5:6e:74:d6:a0:59:53:a9:d5:a4:50:4a:5e:
         f3:bf:5d:0d:46:9c:f5:7a:12:a5:6c:ae:df:dd:c3:ee:da:03:
         7f:53:cc:f8:7b:57:dd:b4:63:6f:45:dd:74:36:29:e5:5a:3d:
         b3:5b:be:19:20:4d:29:66:ee:36:29:9f:35:32:bb:7c:8d:ad:
         d3:51:ac:41:d4:85:f4:20:d2:6f:2e:98:c9:7b:ee:bc:5e:8a:
         ff:e0:d8:8a:70:83:66:41:3c:c8:4b:44:a1:08:4a:93:c0:30:
         cc:c8:7e:4c:4f:3c:2a:f6:b8:9f:c9:b9:9d:43:08:47:a7:46:
         33:78:21:7c:6f:a9:b5:29:98:1e:95:58:90:56:92:cc:f7:93:
         b3:f8:f4:9b:7b:ce:74:65:f3:0b:5f:1c:33:74:70:32:ee:11:
         5d:2e:11:e0:20:6e:25:80:2b:6a:be:7e:53:e5:7d:2e:37:e0:
         e3:e5:33:6c:60:97:86:1a:a0:7c:8a:e1:20:93:82:4c:da:2d:
         2b:39:82:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org