Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133352e302f32342d3234203d3e20323633303533.roa
File:                     3137372e3133372e3133352e302f32342d3234203d3e20323633303533.roa (raw, json)
Hash identifier:          hlBvcUkwHb7I+cvclW48EvwUO+5G3diGsGGmWLArtsM=
Subject key identifier:   82:74:E2:64:10:F2:D0:C0:51:5D:89:BC:AC:02:2E:10:AB:38:56:94
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       3AB0962BFB11E5C57D4EBD137685A9F3108A0CBC
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133352e302f32342d3234203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:05 +0000
ROA not before:           Fri 06 Jan 2023 21:55:05 +0000
ROA not after:            Fri 05 Jan 2024 22:00:05 +0000
asID:                     263053
IP address blocks:        177.137.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:b0:96:2b:fb:11:e5:c5:7d:4e:bd:13:76:85:a9:f3:10:8a:0c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:05 2023 GMT
            Not After : Jan  5 22:00:05 2024 GMT
        Subject: CN=8274E26410F2D0C0515D89BCAC022E10AB385694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:f7:d2:92:54:7d:a3:06:d0:b2:29:68:3b:
                    51:7d:9f:c2:e8:85:1d:fd:19:2f:78:43:0e:57:62:
                    a6:cc:9d:db:e6:7c:e0:34:c8:36:8f:93:98:fc:00:
                    0b:18:40:b4:d4:f7:6b:74:94:9e:3a:e7:97:b6:49:
                    f7:76:f8:e9:9d:39:29:e6:a7:9c:51:c9:7a:9f:a5:
                    62:15:0f:34:08:d1:2b:e0:6d:89:3b:3b:2e:a4:10:
                    d0:0e:ee:3f:69:91:7a:ef:ca:9f:56:a1:b8:7c:d9:
                    37:7b:3e:ae:27:f4:b9:cc:8f:7f:45:12:44:f8:4b:
                    72:86:fa:d7:cb:1d:c4:34:eb:91:36:29:c6:4d:54:
                    6d:75:7e:4a:7a:6b:e7:d5:b9:75:29:05:de:57:f2:
                    25:c8:9d:49:5d:20:f1:85:ff:3d:49:aa:57:80:13:
                    50:07:13:fe:e4:e4:60:48:27:34:52:f7:e4:16:a8:
                    a3:4d:31:90:2f:6f:89:73:ce:d1:60:bd:78:10:3b:
                    3a:85:3b:22:f3:32:01:63:b2:9d:d2:dc:ff:67:97:
                    d9:5e:a7:f3:c4:3d:e1:78:f4:a0:36:e4:a7:f1:1d:
                    24:e3:2c:8a:80:be:9e:46:76:52:a6:51:34:65:aa:
                    85:6b:1e:82:b2:b6:00:bb:b6:6e:7a:41:fa:9a:68:
                    b1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:74:E2:64:10:F2:D0:C0:51:5D:89:BC:AC:02:2E:10:AB:38:56:94
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133352e302f32342d3234203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:a7:c4:86:51:ac:aa:98:42:40:71:d6:98:ea:e4:5a:5e:d2:
         ea:c8:c2:73:14:b3:63:ec:b3:0e:e6:1e:8b:b8:37:bc:50:88:
         42:9c:f9:46:da:1a:09:dd:49:c0:60:42:71:65:11:6f:4b:42:
         35:20:67:07:d6:64:ce:44:69:72:3d:96:d4:6f:ce:a0:18:ba:
         62:59:94:5a:d8:20:ba:f8:99:40:59:e8:93:a6:a6:84:3a:35:
         a4:6b:04:e0:8a:5c:b2:28:e1:72:3c:a9:01:ae:c7:41:dd:0d:
         b6:12:f5:c4:01:3d:7a:7a:68:3d:c4:3d:c1:aa:da:a6:64:17:
         3f:ab:2e:cd:1f:c0:b7:4c:03:49:35:94:b7:6d:7c:d6:3f:58:
         a6:78:f2:83:18:71:67:c3:4e:e5:07:5f:b5:f9:7e:17:a2:f2:
         19:e9:62:48:ab:2e:1e:a3:53:a7:97:ef:bc:36:02:11:5d:b7:
         4c:32:40:01:9a:f0:a4:70:0f:79:34:6d:c1:6f:5a:d5:09:d5:
         65:df:2e:d8:cd:c8:2c:68:d2:7c:9c:69:00:45:e0:b7:cc:be:
         f1:21:8a:c9:ea:04:5f:d4:78:61:9d:fe:1e:48:20:4f:ac:0d:
         3f:7c:4b:de:c6:e8:f1:7d:32:f2:17:4b:58:2b:9c:69:38:d1:
         d2:29:cf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org