Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133382e302f32342d3234203d3e20323633303533.roa
File:                     3137372e3133372e3133382e302f32342d3234203d3e20323633303533.roa (raw, json)
Hash identifier:          EA0CvLT9CPXCRY7H7N39B+JaQTqWrHafhCX9LHJPl9g=
Subject key identifier:   44:37:35:A5:2B:3B:11:85:A1:58:66:70:B0:64:6C:2D:B1:3A:BA:B5
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       675FCDCA4AA2CAB5B970861B0437FD69C09EBC54
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133382e302f32342d3234203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:03 +0000
ROA not before:           Fri 06 Jan 2023 21:55:03 +0000
ROA not after:            Fri 05 Jan 2024 22:00:03 +0000
asID:                     263053
IP address blocks:        177.137.138.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5f:cd:ca:4a:a2:ca:b5:b9:70:86:1b:04:37:fd:69:c0:9e:bc:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:03 2023 GMT
            Not After : Jan  5 22:00:03 2024 GMT
        Subject: CN=443735A52B3B1185A1586670B0646C2DB13ABAB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:78:06:78:58:95:c5:b7:bb:b0:3f:00:49:
                    c2:40:2f:88:62:0c:43:4a:17:29:09:ae:e9:ad:9a:
                    f5:f2:75:00:d4:ae:ea:0e:30:71:70:4e:f2:e5:e2:
                    8f:af:31:e1:f2:d5:7a:16:ef:f4:9f:b1:e5:c6:12:
                    54:76:86:0b:91:14:9e:3e:e9:4a:f6:68:15:d6:01:
                    d1:39:c7:f6:a9:33:ed:e9:ab:b8:cd:12:96:ed:9a:
                    6a:2d:2e:0d:6f:44:e9:ee:b5:ba:5f:5e:7a:05:b7:
                    c9:7a:17:26:a1:b4:39:39:af:1a:76:22:82:83:1a:
                    b0:a8:92:69:47:8d:bd:ee:b3:9d:e0:cd:b5:f7:74:
                    e2:8a:e7:c0:66:53:ed:5c:2b:bd:30:02:9b:d2:c7:
                    ab:0c:18:3e:39:cc:10:86:57:94:b4:b4:20:61:36:
                    f0:77:4f:34:f1:a9:6f:5d:89:fd:3c:f5:a7:53:4f:
                    de:20:4d:4a:a3:28:1b:1c:01:b1:47:7a:de:b3:dc:
                    e4:33:f4:c4:f9:b6:4d:87:b8:41:25:8f:80:38:f0:
                    67:97:9e:e6:1b:06:22:42:70:a5:2e:d5:79:9e:61:
                    c7:fd:f7:2d:bb:aa:6c:12:d5:74:7c:bc:c7:c0:87:
                    15:8e:f0:94:84:3e:c2:ef:5f:d7:a9:e3:a2:0c:a5:
                    a1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:37:35:A5:2B:3B:11:85:A1:58:66:70:B0:64:6C:2D:B1:3A:BA:B5
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133382e302f32342d3234203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:30:ae:cb:fa:80:a7:63:bd:78:77:8f:52:26:03:28:63:df:
         f5:06:04:af:15:f1:cb:30:4d:53:9a:c5:e1:a9:42:01:b4:50:
         1a:e5:94:30:54:ba:f8:47:36:6a:63:c7:b7:c2:f7:cb:ec:a8:
         22:7e:55:25:d5:5e:18:44:a6:54:20:dc:12:a0:ae:e2:1f:e0:
         0d:1c:cf:66:02:05:d3:f4:06:c3:80:34:3b:cd:71:56:c3:0d:
         c7:b3:71:74:4c:27:f6:19:cb:81:2a:e7:39:7e:36:c7:ec:9b:
         e7:b7:eb:1a:1a:a1:2e:07:28:a6:23:13:03:66:db:69:25:af:
         e6:1b:64:dd:85:1a:ec:27:e5:de:c9:87:5e:4d:d2:a3:31:59:
         32:fc:4f:60:5b:66:39:8f:72:05:b8:e3:6b:09:0d:e7:c4:b2:
         66:f9:9e:7b:35:e9:e1:43:08:70:76:7b:c2:a9:6f:9b:04:b4:
         f4:29:b9:9e:20:09:90:a0:ff:95:b7:d3:cc:5f:47:a7:db:23:
         b5:49:ce:43:3b:b6:ba:b7:d7:d3:69:86:e0:d3:59:94:f4:a2:
         ba:05:aa:56:8f:85:d0:7f:d0:e1:16:99:f9:8f:2e:dd:a3:3e:
         f8:89:5c:d8:7b:6f:00:cd:b7:00:ba:12:45:fe:27:b8:7d:80:
         2c:dc:d9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:16 2025 by rpki-client