Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133342e302f32342d3234203d3e20323633303533.roa
File:                     3137372e3133372e3133342e302f32342d3234203d3e20323633303533.roa (raw, json)
Hash identifier:          f+ozbqGxRhMp1DLZO9tA2SwLXMvGJjARf/ZYwfwMwSc=
Subject key identifier:   F5:B7:76:45:97:C4:07:26:7B:8C:7A:E2:52:D8:D6:84:C9:E2:8D:50
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       73D44F1E334051DC93DE5E5AEB194A0A13FEC9BA
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133342e302f32342d3234203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:01 +0000
ROA not before:           Fri 06 Jan 2023 21:55:01 +0000
ROA not after:            Fri 05 Jan 2024 22:00:01 +0000
asID:                     263053
IP address blocks:        177.137.134.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d4:4f:1e:33:40:51:dc:93:de:5e:5a:eb:19:4a:0a:13:fe:c9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:01 2023 GMT
            Not After : Jan  5 22:00:01 2024 GMT
        Subject: CN=F5B7764597C407267B8C7AE252D8D684C9E28D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:39:04:a0:3d:bb:a5:d4:d4:0c:f7:ee:6f:
                    c0:c7:21:5c:65:ad:ca:7e:89:9f:09:1c:e2:15:23:
                    4b:ed:2f:20:08:a5:ec:9f:0c:31:0d:dd:02:23:ab:
                    c4:35:9a:42:20:a1:9e:1f:d3:8a:69:7c:75:ef:49:
                    c0:38:9c:17:a1:fe:af:51:b7:8b:d8:03:8e:82:f7:
                    58:33:e2:19:6a:21:33:41:14:8e:9f:f6:f5:3c:ac:
                    81:20:b3:15:82:5f:b8:a1:1a:f0:7a:04:3d:7a:a7:
                    82:16:23:25:5c:60:7e:99:30:72:16:6b:c4:c4:f3:
                    ac:3b:06:91:4e:2d:7c:7c:67:37:57:b3:6c:26:cf:
                    89:08:b3:88:d6:f7:c8:1b:9d:c8:84:67:f6:4d:1b:
                    59:b5:70:59:a8:5b:b1:0a:35:8a:df:bd:94:03:9a:
                    0f:0f:5d:aa:5c:26:3d:5b:02:b0:96:8b:6f:0f:83:
                    c0:09:a3:6a:b4:54:6d:3c:a6:67:2e:0c:29:b0:3f:
                    ff:9a:18:25:43:18:e5:fb:6a:8f:c0:bf:e0:c7:1f:
                    fd:bc:ec:2c:2e:3a:b3:fe:11:09:e1:1d:21:ca:fd:
                    79:d3:a0:58:63:54:a6:10:b4:0a:38:71:48:49:95:
                    72:12:96:53:d4:2d:88:6d:f2:6b:d6:3f:59:1f:cd:
                    dd:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B7:76:45:97:C4:07:26:7B:8C:7A:E2:52:D8:D6:84:C9:E2:8D:50
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133342e302f32342d3234203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:74:81:96:97:2f:de:b9:16:2c:63:36:c9:68:31:d8:97:cc:
         64:9b:3c:ff:ad:ed:7a:55:88:04:8a:28:68:d8:ef:76:17:bc:
         ad:01:15:7b:49:c1:92:f4:db:31:ce:46:82:b5:a8:f1:0e:26:
         3a:6b:4a:fd:03:cc:b5:b3:00:42:e2:b3:7c:23:f8:b9:dd:a9:
         77:d5:a7:7b:fd:f4:aa:a0:ed:12:e0:29:5c:33:79:2c:4b:ad:
         d8:72:65:14:ad:c9:e4:3e:dd:f7:ff:20:13:e4:74:25:07:34:
         4e:ed:74:c1:05:df:66:1d:b0:8a:fc:98:f4:74:9f:1e:e4:23:
         65:b7:db:12:8d:47:fd:7b:83:83:65:21:b8:28:91:17:a9:de:
         c1:74:ac:99:59:22:c3:8d:1e:98:d8:8b:10:3f:c4:3f:d5:b7:
         a6:5f:1e:16:2c:9b:e0:a6:72:56:89:e1:7c:e8:46:f5:fc:ec:
         b9:ea:d2:56:7b:cc:c3:18:00:67:d3:f7:be:26:02:4c:19:85:
         ce:90:e8:20:86:35:ed:ad:93:08:87:38:66:00:ca:32:35:93:
         ea:91:91:68:2e:f2:c0:3d:46:9b:06:0a:89:13:0e:62:12:48:
         e0:8d:5f:61:73:02:8f:95:9d:8b:c7:95:73:f6:81:e5:88:02:
         30:16:78:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:34 2025 by rpki-client