Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133362e302f32332d3233203d3e20323633303533.roa
File:                     3137372e3133372e3133362e302f32332d3233203d3e20323633303533.roa (raw, json)
Hash identifier:          p0+XfC6zCsCO9lCDr8yqo/6wd2O4VaTPCrQBcJChJn4=
Subject key identifier:   CC:A1:BA:DD:CE:79:2F:FD:43:5E:4E:C5:9A:5B:11:74:D9:F3:AC:E9
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       22E810CE2931156D18C1FA6ACDDB2B6BE14EC4A2
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133362e302f32332d3233203d3e20323633303533.roa
Signing time:             Fri 08 Dec 2023 23:00:00 +0000
ROA not before:           Fri 08 Dec 2023 22:55:00 +0000
ROA not after:            Fri 06 Dec 2024 23:00:00 +0000
asID:                     263053
IP address blocks:        177.137.136.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e8:10:ce:29:31:15:6d:18:c1:fa:6a:cd:db:2b:6b:e1:4e:c4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Dec  8 22:55:00 2023 GMT
            Not After : Dec  6 23:00:00 2024 GMT
        Subject: CN=CCA1BADDCE792FFD435E4EC59A5B1174D9F3ACE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:eb:4d:b3:83:1b:c9:49:20:34:63:c6:df:ab:
                    7e:93:43:f2:cc:06:b9:6a:dc:8d:50:d3:c7:7d:62:
                    34:d6:51:03:ae:60:b7:ed:31:ea:3d:7b:44:0f:2e:
                    54:68:36:28:f3:70:89:a6:35:70:75:75:2d:e2:60:
                    ac:3e:d0:54:94:e1:9f:00:76:91:35:5e:c6:ab:42:
                    d7:03:bb:39:84:2d:55:6a:a4:1d:a3:ea:31:21:3e:
                    00:6b:5c:4e:f3:4b:41:e0:89:6b:42:16:56:50:5f:
                    43:53:d8:30:84:44:b8:77:39:8d:d3:ab:f8:63:67:
                    d5:17:c7:ff:40:8e:43:62:6b:84:23:52:25:f7:b3:
                    65:30:c2:63:48:99:c8:44:be:ea:64:22:52:aa:ce:
                    87:c9:03:a7:b0:3b:76:a2:a1:c3:5c:92:25:53:02:
                    ae:1b:f8:3f:96:94:56:23:0b:0e:4a:66:68:42:2a:
                    61:33:be:b4:15:06:b3:93:d7:e4:fa:04:da:54:11:
                    fb:e4:c3:d8:99:1a:df:50:24:20:6a:14:e2:96:47:
                    8f:e5:37:cc:5f:3e:29:3b:de:34:f6:49:6b:d2:da:
                    00:65:2a:4f:fe:68:88:45:92:6e:80:bb:34:25:92:
                    72:62:36:f3:30:61:22:0f:3d:b0:d8:2b:d8:b0:a3:
                    85:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A1:BA:DD:CE:79:2F:FD:43:5E:4E:C5:9A:5B:11:74:D9:F3:AC:E9
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133362e302f32332d3233203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:73:b5:45:38:29:0c:ea:a0:ba:05:f6:75:ca:c7:1a:00:04:
         6b:6b:7b:0e:21:47:a7:ed:00:fc:68:30:04:22:1b:24:ba:ef:
         c9:a8:7e:28:2a:d5:6a:fd:b8:b2:5e:f3:f5:20:4e:fc:be:b6:
         0f:fe:69:65:90:c4:0f:f9:56:fd:df:df:e3:10:ba:ad:04:a3:
         db:f4:39:2d:d5:5e:78:df:19:b6:1f:67:72:6f:be:c7:cc:c2:
         4b:d8:3c:0b:65:66:07:85:ce:bd:ec:e5:10:21:2e:d3:71:48:
         20:28:64:56:7a:c4:20:ab:6a:bb:22:00:b2:fb:8a:17:6d:45:
         be:aa:f5:e1:06:08:76:0f:cc:f7:b6:38:db:70:d9:f4:39:86:
         29:91:f4:91:e7:7b:69:c7:45:58:6c:dc:15:f3:fc:d1:51:09:
         88:d3:bb:8d:7b:e6:68:b1:49:be:a3:81:3e:40:42:9b:09:eb:
         f5:50:c6:a0:b4:48:0c:af:e3:b9:86:4e:19:24:2a:b5:5a:57:
         2f:f0:0d:0b:9e:f4:e0:79:72:77:57:76:4f:46:1e:01:2d:72:
         81:d3:25:75:ae:cf:7e:41:31:55:72:0a:4f:d0:eb:02:9e:64:
         cb:b9:fe:b7:35:8c:cd:f7:04:40:74:0f:90:35:d3:3e:1c:b1:
         2d:2e:c8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org