Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133342e302f32332d3233203d3e20323633303533.roa
File:                     3137372e3133372e3133342e302f32332d3233203d3e20323633303533.roa (raw, json)
Hash identifier:          WBIU1FJa6MlMPKcbbyoeqsF6T3MRK8uRHL/qZsjIQ8A=
Subject key identifier:   8B:DB:DA:B0:57:77:EC:E3:88:A5:22:53:7B:8C:D0:6A:DE:C3:96:7E
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       04F22255EA3CCDB3890149F602BC0EEB2F28A8EC
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133342e302f32332d3233203d3e20323633303533.roa
Signing time:             Fri 08 Dec 2023 22:00:00 +0000
ROA not before:           Fri 08 Dec 2023 21:55:00 +0000
ROA not after:            Fri 06 Dec 2024 22:00:00 +0000
asID:                     263053
IP address blocks:        177.137.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f2:22:55:ea:3c:cd:b3:89:01:49:f6:02:bc:0e:eb:2f:28:a8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Dec  8 21:55:00 2023 GMT
            Not After : Dec  6 22:00:00 2024 GMT
        Subject: CN=8BDBDAB05777ECE388A522537B8CD06ADEC3967E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c9:5d:c7:48:30:f0:a3:c1:74:57:7d:ed:8a:
                    50:ed:4a:bb:44:b9:a2:14:f7:e1:c5:f3:4d:e7:63:
                    bb:ac:32:db:8e:bc:5f:ae:ca:fd:73:aa:e2:e1:95:
                    c3:a7:23:a9:c4:fb:92:98:bf:f0:45:57:79:10:9b:
                    43:18:cb:1b:59:d3:0c:45:58:fd:11:20:17:f0:fd:
                    e0:9e:4f:a0:7b:29:3e:37:d1:73:a0:73:9a:30:1e:
                    f9:b7:5e:d5:96:fc:a0:97:ec:15:58:8a:6b:e2:89:
                    66:b3:33:59:38:6e:21:78:81:66:93:68:6f:cd:88:
                    a5:f3:c2:68:65:ee:14:66:d8:19:b5:19:0f:f7:74:
                    3b:59:0a:23:45:40:c4:72:ee:08:97:7b:1c:7b:96:
                    44:cf:28:02:d1:7b:5b:be:00:e1:3a:50:c4:fe:c8:
                    1f:f7:45:66:a0:19:b5:99:56:c8:d3:c8:13:62:26:
                    4c:1b:51:ad:0b:61:0f:94:c5:2e:02:4b:4a:6e:68:
                    e1:88:3d:0f:f7:39:a2:31:bc:77:73:6c:cd:fe:cd:
                    d0:0e:d0:b4:b5:84:ab:0b:74:b7:37:a8:76:4e:77:
                    a6:a6:bd:c5:15:0b:ef:ef:a5:6f:30:f7:22:2b:0d:
                    96:42:5b:9b:31:65:58:67:e6:cf:41:f6:f8:6c:fb:
                    08:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DB:DA:B0:57:77:EC:E3:88:A5:22:53:7B:8C:D0:6A:DE:C3:96:7E
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133342e302f32332d3233203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:54:57:bd:a1:51:df:a6:b3:db:56:4a:cc:8c:d3:77:2e:c5:
         52:be:35:39:bd:ba:fa:d7:80:8d:fe:55:e8:c1:72:42:65:a9:
         c4:de:3f:ef:9d:c9:d8:f2:cd:2e:1b:c2:74:e8:11:ca:e5:1d:
         5d:5a:58:dd:9e:67:45:c5:19:2d:43:aa:84:5e:d4:f1:be:bd:
         55:74:f8:f5:52:5b:e7:ef:cb:59:bf:68:16:05:9c:10:58:43:
         c7:91:d2:a3:39:2a:0a:fe:3e:19:45:5f:88:9d:60:15:a6:1e:
         f6:7a:34:d0:28:a1:36:a7:b8:ee:70:92:2e:e2:0e:2e:1f:57:
         27:62:74:89:27:e8:6f:42:6f:cd:d2:2f:b4:a8:4e:b4:ec:d9:
         84:28:f6:a8:13:56:3f:db:11:64:b6:85:5a:48:04:ee:1e:aa:
         31:8e:22:b5:d8:da:98:b6:2d:2a:3e:64:1c:09:93:81:fa:13:
         b7:44:c9:cd:83:f9:45:52:69:77:df:b1:a1:db:ac:33:6f:f2:
         0f:65:69:5c:a7:a4:08:5b:3f:7b:c1:79:53:23:b7:4e:7f:d9:
         ca:72:d6:0b:5a:4b:6b:25:8d:37:67:ab:c2:cb:d6:48:65:96:
         11:25:24:d3:d1:4f:e8:ec:aa:d7:1b:61:47:1f:5b:8e:66:25:
         8b:d2:c3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org