Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133332e302f32342d3234203d3e20323633303533.roa
File:                     3137372e3133372e3133332e302f32342d3234203d3e20323633303533.roa (raw, json)
Hash identifier:          DZIlNZQ6kRp9BHNpDSdB4uIOUxAmgIea1ZPH25ZY2b8=
Subject key identifier:   EB:64:EC:2B:31:21:E6:89:ED:42:E4:F6:38:98:02:84:D1:25:2C:ED
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       13C43CD6D3641BABC5430DC42AE44431A03FE257
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133332e302f32342d3234203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:06 +0000
ROA not before:           Fri 06 Jan 2023 21:55:06 +0000
ROA not after:            Fri 05 Jan 2024 22:00:06 +0000
asID:                     263053
IP address blocks:        177.137.133.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c4:3c:d6:d3:64:1b:ab:c5:43:0d:c4:2a:e4:44:31:a0:3f:e2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:06 2023 GMT
            Not After : Jan  5 22:00:06 2024 GMT
        Subject: CN=EB64EC2B3121E689ED42E4F638980284D1252CED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e6:8c:56:b0:bf:8f:58:42:7e:97:94:73:29:
                    15:3f:d0:9f:1a:96:99:0b:74:03:6a:77:60:e6:35:
                    2f:b0:01:d0:aa:11:31:c4:c2:f5:93:88:b3:dd:b6:
                    45:ac:23:ff:ee:d3:76:c3:01:54:27:33:43:28:0f:
                    1b:58:fb:ae:ea:1f:9c:49:c2:b7:67:04:19:71:d0:
                    e0:d6:cf:d0:82:fc:45:0f:0d:0d:44:34:a5:9d:25:
                    b2:8d:1c:f9:c6:d2:47:00:d8:be:18:c6:ca:88:b6:
                    38:39:f7:11:39:96:bc:69:00:93:47:0a:f3:a6:c2:
                    c8:7c:73:37:dd:12:e2:4d:a2:fe:c0:0d:cb:2e:c1:
                    3e:ab:db:ba:7a:a4:c6:18:e3:50:ab:a9:33:c9:b5:
                    b1:2b:3f:d2:d5:d9:6d:f1:b8:65:8a:3b:ad:c2:f5:
                    00:37:b7:1e:51:79:14:92:af:c5:46:af:21:00:6a:
                    5e:45:fd:07:a7:bf:52:be:9e:54:af:86:07:b3:41:
                    6e:45:7d:e9:35:51:d2:c3:2e:a3:cc:31:fc:b4:0b:
                    b5:3f:5f:83:ed:c8:5e:2b:2e:d8:9a:d9:1e:09:9e:
                    ff:be:02:ae:91:d2:45:da:a1:27:17:e6:b9:14:7e:
                    7e:6b:9c:e4:bd:e5:37:b7:ed:19:8d:25:ba:55:6c:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:64:EC:2B:31:21:E6:89:ED:42:E4:F6:38:98:02:84:D1:25:2C:ED
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133332e302f32342d3234203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:ba:5d:55:52:25:6c:9e:48:0a:e2:7d:76:cd:74:a0:d6:d5:
         5b:cc:46:48:3e:fc:95:56:55:fe:34:ab:28:b3:61:0d:77:6d:
         2e:c3:05:21:a8:b9:fc:f2:67:81:69:d5:d8:ec:19:d6:3d:83:
         65:1a:90:0d:f2:75:f4:7f:ad:18:49:00:bc:d4:fa:20:e3:0b:
         c4:6c:c4:7c:79:c6:d8:06:ba:21:4e:40:82:34:a0:f8:35:92:
         68:3b:85:d1:00:28:d8:af:7d:b2:6a:00:06:04:55:62:95:70:
         72:04:34:a1:8f:d5:88:dd:db:07:b3:e3:0b:1c:d1:aa:ea:3d:
         3d:a4:f2:ca:28:16:cf:aa:be:f6:d4:e3:5b:85:8e:56:27:a9:
         7f:c3:1d:0c:09:c8:3c:f8:9b:e1:e8:39:4f:da:3e:7b:ff:3a:
         ba:c1:bb:51:ae:27:e9:56:6c:d2:e7:40:a8:4c:52:80:18:a0:
         47:b0:69:62:49:b3:f0:50:e1:bf:5e:85:bc:09:a0:fa:3b:16:
         e2:18:4f:69:3b:5d:f4:21:4b:35:68:35:8d:c7:af:fc:b9:82:
         de:90:e1:a8:fa:f6:6e:22:93:52:44:c3:11:67:a6:69:86:57:
         78:94:1a:10:c5:18:8d:bb:bc:d5:0c:ed:b5:66:3b:6f:44:cd:
         88:97:be:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:05:39 2025 by rpki-client