Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133362e302f32332d3234203d3e20323639353137.roa
File:                     3137372e3133372e3133362e302f32332d3234203d3e20323639353137.roa (raw, json)
Hash identifier:          tsJOTUN73RcD+ZkdW+6Z7/6UodXxYB27WD3kYJTQeDs=
Subject key identifier:   4F:27:96:8A:09:8F:BD:3E:41:13:8B:0F:A8:FB:8D:26:C4:F0:8C:82
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       36F722C67B75E4EFE270C1FC2BFC1CD30CD55E52
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133362e302f32332d3234203d3e20323639353137.roa
Signing time:             Thu 03 Feb 2022 16:40:58 +0000
ROA not before:           Thu 03 Feb 2022 16:35:58 +0000
ROA not after:            Thu 02 Feb 2023 16:40:58 +0000
asID:                     269517
IP address blocks:        177.137.136.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:f7:22:c6:7b:75:e4:ef:e2:70:c1:fc:2b:fc:1c:d3:0c:d5:5e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Feb  3 16:35:58 2022 GMT
            Not After : Feb  2 16:40:58 2023 GMT
        Subject: CN=4F27968A098FBD3E41138B0FA8FB8D26C4F08C82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:6a:e6:f0:44:57:db:1f:70:a9:14:53:a4:
                    8e:64:58:75:4e:39:18:14:65:d0:7a:e7:42:ae:84:
                    f6:48:7b:f7:ae:85:9c:cb:d2:25:31:ce:a2:b8:5b:
                    27:6d:83:6e:cd:f2:9e:10:39:2d:31:f5:0d:25:a2:
                    4e:18:55:bd:ff:06:f1:34:e1:a1:bf:85:91:d5:32:
                    f6:00:fb:b8:73:35:7a:94:ab:24:b8:56:8c:ec:f3:
                    d8:81:97:2e:2a:6f:37:23:9f:9d:80:97:da:d1:4a:
                    c9:bf:ea:f5:dc:22:d8:b3:9d:e4:1a:d9:f4:57:13:
                    36:75:8e:52:13:07:fc:20:28:89:d6:89:42:1e:f6:
                    a3:44:24:a5:35:90:dd:66:46:47:5b:8f:69:96:f5:
                    50:49:b6:1f:db:26:3d:07:b2:7b:ba:1f:68:c8:35:
                    ee:7c:6f:d3:ab:c9:ca:a4:ad:1e:ae:62:fd:82:69:
                    77:12:52:33:19:c9:23:1f:ef:43:c3:fb:b0:64:e2:
                    8b:fa:ad:e1:27:34:7c:17:82:3a:85:54:d1:92:4c:
                    4b:08:ca:85:dc:69:0b:b3:2e:82:b6:fa:eb:52:be:
                    26:3a:5d:af:93:d4:68:de:c4:cf:eb:ec:b8:09:29:
                    34:8b:f6:ae:6b:21:bd:bf:5d:07:86:3b:c9:71:e0:
                    e2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:27:96:8A:09:8F:BD:3E:41:13:8B:0F:A8:FB:8D:26:C4:F0:8C:82
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133362e302f32332d3234203d3e20323639353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:cc:c7:94:e6:26:8f:4d:5c:42:05:c2:2c:84:b9:b1:1f:fb:
         9b:b6:4c:44:09:6c:94:5d:9b:1d:78:e1:71:61:73:9d:e3:35:
         0c:d3:17:3c:ce:94:f6:1f:0c:1b:a3:1a:f3:31:4d:1a:92:69:
         ab:cf:7f:82:fc:9b:21:64:ce:67:4c:37:14:66:41:5e:61:81:
         90:8c:ac:33:54:8e:74:88:e6:20:fc:32:5e:f3:56:20:df:d9:
         be:81:92:39:7c:b6:f6:e0:31:9b:16:c6:5e:ad:7f:19:4b:5f:
         d0:ec:e2:dd:53:c3:5f:08:ea:df:83:47:f0:7b:94:89:b7:2d:
         4e:ef:cb:bb:0d:45:89:13:57:cf:ab:51:04:d0:b4:57:46:c7:
         22:95:95:97:09:ee:80:a3:2c:60:38:c3:8f:da:ad:e0:ae:b1:
         53:93:ea:e7:fd:f8:bb:0d:b7:33:cf:ec:e3:9c:d7:d6:0f:88:
         ae:26:89:59:de:08:df:c3:5d:77:18:5d:4b:e5:e5:fd:7d:ff:
         20:99:aa:80:b7:ad:27:2b:3e:3c:62:17:e1:4a:4b:c4:82:fa:
         ac:9a:68:63:e5:1f:f7:6a:b2:c2:ab:a5:dd:08:13:fa:c0:b9:
         a3:21:f8:54:82:12:18:98:23:77:19:d6:04:15:9d:5c:49:53:
         31:81:13:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:25 2025 by rpki-client