Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133362e302f32342d3234203d3e20323633303533.roa
File:                     3137372e3133372e3133362e302f32342d3234203d3e20323633303533.roa (raw, json)
Hash identifier:          IMidLr6WLB/y/y8ClVZK8XHuZ0ZdT+p52gABwyjqfFk=
Subject key identifier:   37:5A:CE:D9:60:26:A3:50:37:F0:B5:37:AD:C0:16:96:94:B2:06:3C
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       6D93D5464BACF9074349E0B65F06B1CB09531DAE
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133362e302f32342d3234203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:05 +0000
ROA not before:           Fri 06 Jan 2023 21:55:05 +0000
ROA not after:            Fri 05 Jan 2024 22:00:05 +0000
asID:                     263053
IP address blocks:        177.137.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:93:d5:46:4b:ac:f9:07:43:49:e0:b6:5f:06:b1:cb:09:53:1d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:05 2023 GMT
            Not After : Jan  5 22:00:05 2024 GMT
        Subject: CN=375ACED96026A35037F0B537ADC0169694B2063C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:88:e4:15:d8:b0:4b:53:d9:27:01:c5:43:43:
                    2e:cb:16:9c:b8:56:18:ce:a2:91:0e:57:c6:0f:2f:
                    ec:ec:43:d8:e7:91:1a:60:a8:c5:cd:17:60:dd:63:
                    56:47:24:27:98:86:1f:52:65:9b:27:38:db:09:29:
                    27:aa:fe:0c:fd:80:e7:39:bd:eb:25:6f:53:ee:40:
                    30:8f:01:6a:22:51:85:fd:4e:6d:fb:9b:20:04:17:
                    f8:ac:38:e6:36:8c:34:21:29:e8:0c:ba:bf:4f:de:
                    df:2a:25:01:8d:ec:d4:2f:ac:38:47:40:a4:e3:c4:
                    64:a4:05:9e:91:02:12:36:a8:7e:7b:c9:09:d0:6b:
                    72:3d:0f:a0:54:c8:84:ad:06:bc:40:9d:a7:ca:f5:
                    54:5e:56:d2:d0:c5:90:3d:a9:fd:7f:61:0c:de:9b:
                    94:3a:6f:7a:70:5d:07:55:85:51:4c:80:aa:18:a5:
                    1b:eb:38:b6:0c:9e:2d:8a:f4:1f:aa:af:4b:56:6a:
                    4e:dd:74:a0:9e:86:f4:96:32:4e:8e:82:3b:48:8b:
                    b9:78:4c:5e:67:ef:23:fd:a8:80:05:af:8e:13:d3:
                    54:30:c4:5d:26:59:82:4b:84:ff:5d:bf:3d:dd:7d:
                    a7:ca:30:d7:fe:6a:ef:8f:dc:76:99:9f:33:5a:f3:
                    03:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5A:CE:D9:60:26:A3:50:37:F0:B5:37:AD:C0:16:96:94:B2:06:3C
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133362e302f32342d3234203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a3:8a:cf:34:4b:5c:16:f2:94:4a:4f:1b:70:8d:c4:91:1c:
         13:13:29:94:c3:99:fc:5b:69:24:22:58:4c:97:af:f8:fb:ab:
         a3:10:f3:85:bd:ad:cd:b0:9c:43:57:19:4e:83:af:0f:d0:cb:
         8a:65:e4:24:e4:57:55:a8:14:64:3d:85:60:c8:82:ae:d0:6d:
         25:33:5a:30:c3:4d:58:8c:5a:e6:6c:e8:07:ca:06:78:3c:d3:
         19:29:d5:73:2a:f9:69:93:23:c4:8e:a8:d9:81:90:97:d5:1d:
         50:f7:af:2f:a7:0f:68:3b:33:10:39:02:85:88:6f:86:c0:34:
         29:15:32:31:95:2f:88:ac:68:41:16:6e:db:34:09:e0:9e:5a:
         ed:d7:e9:7b:f2:34:9c:12:be:91:41:30:69:46:93:32:f7:8f:
         52:c1:43:26:ce:e4:61:63:4f:82:00:a7:2e:01:f0:ef:a4:f8:
         a1:46:05:9e:7c:33:dc:18:6b:85:66:d5:c7:9b:1b:73:66:e0:
         12:7f:65:0e:e4:66:6d:f7:14:37:15:12:3e:48:28:68:d4:68:
         00:4c:44:50:15:29:31:8c:2e:ec:a4:83:40:bc:50:29:03:33:
         d1:ae:df:72:f8:19:2b:4e:7f:0f:0f:82:16:09:f0:ec:a7:65:
         f2:48:25:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:50 2025 by rpki-client