Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133392e302f32342d3234203d3e20323633303533.roa
File:                     3137372e3133372e3133392e302f32342d3234203d3e20323633303533.roa (raw, json)
Hash identifier:          jS8XyV9beVz4bJE3/tJR3hOf0BYLP1q1rIoeAVbsPXw=
Subject key identifier:   B5:F0:8E:77:ED:E8:14:1A:3C:1B:4C:59:74:4B:9C:46:69:30:7F:84
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       3E09D872008A8B5FFC5A9CB560D2BF84EFE5C454
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133392e302f32342d3234203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:01 +0000
ROA not before:           Fri 06 Jan 2023 21:55:01 +0000
ROA not after:            Fri 05 Jan 2024 22:00:01 +0000
asID:                     263053
IP address blocks:        177.137.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:09:d8:72:00:8a:8b:5f:fc:5a:9c:b5:60:d2:bf:84:ef:e5:c4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:01 2023 GMT
            Not After : Jan  5 22:00:01 2024 GMT
        Subject: CN=B5F08E77EDE8141A3C1B4C59744B9C4669307F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7a:9b:e9:5c:00:01:ec:ae:67:be:3c:84:f7:
                    34:80:8d:b1:09:86:7d:15:df:e9:0a:22:8f:de:1c:
                    ae:f9:71:0d:df:ae:60:c2:7a:66:07:d9:7e:24:f1:
                    65:eb:88:e7:b3:cb:54:ca:ef:3b:e4:c7:46:65:5f:
                    72:f7:e1:06:78:24:5c:1e:69:0a:84:57:9f:5a:2d:
                    2f:8c:67:64:13:cf:cc:39:2d:91:a2:f2:09:fa:e8:
                    b2:40:4c:f9:cc:2b:40:9f:25:0a:cd:29:40:8a:c0:
                    67:05:5a:37:6d:5b:ec:21:8a:8f:eb:98:97:b9:19:
                    82:81:bf:48:24:6b:2f:6b:09:03:f9:d4:1a:c7:29:
                    dd:55:67:3e:35:4c:dc:64:9b:29:cf:bd:61:4c:43:
                    a2:90:b6:69:8f:11:c7:fa:87:63:08:cb:c6:4f:05:
                    29:c5:7b:3e:9a:a9:52:17:2c:eb:01:57:9f:d6:fa:
                    63:4e:0d:df:08:21:32:8f:13:1d:1c:c7:b5:c8:34:
                    e1:b2:a7:8c:b4:e8:35:02:4f:a0:c4:38:ec:84:8b:
                    f9:9b:8d:58:7f:8d:79:90:95:ff:1b:86:0b:24:99:
                    86:36:3c:06:c1:21:51:80:ba:9e:b2:f8:fb:25:59:
                    64:51:9c:f7:79:1c:9b:89:bb:5c:f6:16:52:cd:c8:
                    3e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F0:8E:77:ED:E8:14:1A:3C:1B:4C:59:74:4B:9C:46:69:30:7F:84
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3133392e302f32342d3234203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:4e:a2:c3:82:d5:5f:d6:22:8f:26:ea:49:1a:ac:41:75:62:
         f3:14:7a:bb:1b:94:f1:1c:75:b7:d2:02:5c:6f:af:46:fd:f9:
         da:43:e7:e0:5b:ae:c3:d4:eb:93:02:a9:82:ac:67:ca:35:fa:
         d3:7e:35:70:eb:0b:1d:18:a9:e4:93:45:ca:84:42:4b:f6:cf:
         08:ce:5f:35:92:26:8d:3b:93:a2:80:58:3b:e5:34:ee:48:70:
         ad:03:99:6b:a0:8a:81:26:5c:68:e4:fa:dc:52:b2:fd:71:27:
         47:f1:82:a9:98:66:33:ab:6e:e4:83:dc:08:85:e9:3d:6d:7e:
         69:3e:bc:20:2c:1c:79:a9:2e:64:51:f4:fb:1c:40:f1:62:b1:
         7c:3d:2e:0f:93:dd:e4:72:2b:f1:71:0f:aa:ff:43:69:e9:4c:
         f5:65:9a:79:4e:f5:e2:2e:40:01:1e:6b:de:a7:73:29:d0:e4:
         de:21:6e:cf:66:7d:81:6f:4f:76:43:d0:9c:07:e8:82:0b:80:
         4c:d3:c7:24:66:41:fe:c0:1f:a3:fa:01:79:7a:c2:a0:14:78:
         6f:b0:fd:b2:b0:e0:54:46:5f:25:5a:7a:f3:5d:60:d6:92:a4:
         77:40:3d:4f:02:4a:18:6f:5c:36:36:e6:10:9e:b9:2c:16:fd:
         9b:ab:50:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org