Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133382e302f32332d3233203d3e20323633303533.roa
File:                     3137372e3133372e3133382e302f32332d3233203d3e20323633303533.roa (raw, json)
Hash identifier:          aocRA7U2cVpHWkFzpuQv9pzzCZ1j1Nw60uqIYJVNVHg=
Subject key identifier:   8A:F9:6C:C7:69:7E:56:16:61:47:CB:62:A8:CD:17:BB:D8:85:95:F5
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       44205DB481CCF5D1A8F5773E0E46D5ADC3A3F613
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133382e302f32332d3233203d3e20323633303533.roa
Signing time:             Sun 17 Dec 2023 15:00:00 +0000
ROA not before:           Sun 17 Dec 2023 14:55:00 +0000
ROA not after:            Sun 15 Dec 2024 15:00:00 +0000
asID:                     263053
IP address blocks:        177.137.138.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:20:5d:b4:81:cc:f5:d1:a8:f5:77:3e:0e:46:d5:ad:c3:a3:f6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Dec 17 14:55:00 2023 GMT
            Not After : Dec 15 15:00:00 2024 GMT
        Subject: CN=8AF96CC7697E56166147CB62A8CD17BBD88595F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:b0:4a:cf:75:01:57:90:8e:13:85:e2:8b:
                    0a:2e:6c:b6:db:fa:67:44:f7:74:10:82:65:02:a8:
                    49:02:30:6a:ce:1c:a2:92:e7:cb:71:e8:de:37:88:
                    03:95:16:63:f4:73:3b:65:2f:b0:af:c8:c4:cf:01:
                    a5:b3:81:92:77:b7:8c:33:ca:33:a7:31:0f:5b:b4:
                    d2:94:99:0e:4d:44:4e:63:05:38:04:fc:12:22:ce:
                    d1:da:29:00:27:fa:18:92:ce:05:dd:65:5f:c2:96:
                    39:07:f2:ae:a6:35:d9:b8:fb:36:38:3a:28:28:8c:
                    18:90:77:b3:16:91:51:39:a4:76:50:89:74:5d:20:
                    2e:e7:f2:48:5d:2b:2c:a6:b7:6c:76:db:cb:59:fb:
                    13:2d:54:c6:bb:5f:d8:f2:69:ec:7c:7c:92:eb:67:
                    3d:7a:70:de:78:cb:60:72:3c:3c:f0:7a:41:7c:df:
                    68:55:28:45:c1:39:06:c6:8a:32:51:de:e7:9a:77:
                    eb:71:d8:6b:2d:bb:e6:d1:43:c7:36:f4:2a:24:8a:
                    75:11:dc:36:1c:c6:70:42:9b:10:38:73:43:b5:b7:
                    49:1a:d1:37:82:18:82:a5:e1:0e:f3:05:0d:cc:77:
                    e3:53:4b:1f:df:f5:21:47:0d:23:e5:c3:ba:e2:73:
                    0d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F9:6C:C7:69:7E:56:16:61:47:CB:62:A8:CD:17:BB:D8:85:95:F5
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133382e302f32332d3233203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:64:58:e4:ec:74:db:91:5e:92:2b:fb:24:6d:1e:4c:1d:4e:
         94:ab:56:8f:5b:0c:59:47:e4:5a:ce:5c:24:9e:bf:a1:af:41:
         b9:67:52:99:51:c8:80:2a:13:61:e2:8f:5c:4c:26:d5:9c:9a:
         78:29:1b:03:a4:d2:d2:1e:59:4b:68:2e:3a:1e:ec:9b:de:91:
         07:37:16:3a:c7:0f:4d:c1:43:be:dc:e7:b5:c1:44:5b:b0:41:
         61:2e:64:29:1f:0d:84:08:75:87:79:9f:37:5d:ce:5c:21:61:
         ec:5c:63:fa:ab:82:fd:03:a0:33:aa:c0:75:1e:5e:c4:52:e8:
         bd:b9:d6:df:70:20:90:e4:58:b8:35:25:21:99:ac:74:3a:c0:
         21:95:e6:88:75:9d:58:11:04:69:ff:d0:40:92:38:43:23:28:
         79:5b:4f:65:42:a6:23:7f:92:29:eb:e1:90:fa:c3:22:48:9b:
         17:15:b3:f9:a3:cd:ad:db:96:34:e5:f0:de:d8:1f:f0:c0:a2:
         a2:c3:2e:31:1e:38:64:7e:9c:d7:3a:00:47:fb:9f:b2:6e:31:
         77:fd:56:63:9a:d9:08:cb:86:e5:55:1e:3e:6c:35:22:d4:13:
         3f:84:45:8e:b9:00:3a:8d:d0:ae:33:24:ad:32:b7:4c:44:53:
         6b:75:0e:e9
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIURCBdtIHM9dGo9Xc+DkbVrcOj9hMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDQzkxNTc4ODExRkUyOTc5MEM3RjBGMDEwNEVDQUIx
RDA5NzVBMzAeFw0yMzEyMTcxNDU1MDBaFw0yNDEyMTUxNTAwMDBaMDMxMTAvBgNV
BAMTKDhBRjk2Q0M3Njk3RTU2MTY2MTQ3Q0I2MkE4Q0QxN0JCRDg4NTk1RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7N7BKz3UBV5COE4XiiwoubLbb
+mdE93QQgmUCqEkCMGrOHKKS58tx6N43iAOVFmP0cztlL7CvyMTPAaWzgZJ3t4wz
yjOnMQ9btNKUmQ5NRE5jBTgE/BIiztHaKQAn+hiSzgXdZV/CljkH8q6mNdm4+zY4
OigojBiQd7MWkVE5pHZQiXRdIC7n8khdKyymt2x228tZ+xMtVMa7X9jyaex8fJLr
Zz16cN54y2ByPDzwekF832hVKEXBOQbGijJR3uead+tx2Gstu+bRQ8c29CokinUR
3DYcxnBCmxA4c0O1t0ka0TeCGIKl4Q7zBQ3Md+NTSx/f9SFHDSPlw7ricw3dAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUivlsx2l+VhZhR8tiqM0Xu9iFlfUwHwYDVR0j
BBgwFoAU9cyRV4gR/il5DH8PAQTsqx0JdaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hRZGVlVm1leFJFTGJnc1BxWldDRTd2UEg5ZW9LMzNyV0t3RWMzRHRV
NmgvMC9GNUNDOTE1Nzg4MTFGRTI5NzkwQzdGMEYwMTA0RUNBQjFEMDk3NUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y1Q0M5MTU3ODgxMUZFMjk3
OTBDN0YwRjAxMDRFQ0FCMUQwOTc1QTMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIUWRlZVZtZXhSRUxiZ3NQcVpXQ0U3dlBIOWVvSzMzcldLd0VjM0R0VTZoLzAv
MzEzNzM3MmUzMTMzMzcyZTMxMzMzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMzMwMzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbGJijANBgkqhkiG9w0BAQsFAAOCAQEAG2RY
5Ox025Fekiv7JG0eTB1OlKtWj1sMWUfkWs5cJJ6/oa9BuWdSmVHIgCoTYeKPXEwm
1ZyaeCkbA6TS0h5ZS2guOh7sm96RBzcWOscPTcFDvtzntcFEW7BBYS5kKR8NhAh1
h3mfN13OXCFh7Fxj+quC/QOgM6rAdR5exFLovbnW33AgkORYuDUlIZmsdDrAIZXm
iHWdWBEEaf/QQJI4QyMoeVtPZUKmI3+SKevhkPrDIkibFxWz+aPNrduWNOXw3tgf
8MCiosMuMR44ZH6c1zoAR/ufsm4xd/1WY5rZCMuG5VUePmw1ItQTP4RFjrkAOo3Q
rjMkrTK3TERTa3UO6Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:07 2025 by rpki-client