Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134302e302f32322d3232203d3e20323633303533.roa
File:                     3137372e3133372e3134302e302f32322d3232203d3e20323633303533.roa (raw, json)
Hash identifier:          UD5pU1mQe8lL4Ho0gaAGM5cdjkYPH/5YD69yPENzLVM=
Subject key identifier:   43:EC:57:F1:E5:B2:10:5B:44:96:3F:6D:F3:96:76:94:F3:18:56:A6
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       2A719E51BC0E3C1C72AA52E739CD36DBE22535D1
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134302e302f32322d3232203d3e20323633303533.roa
Signing time:             Wed 09 Feb 2022 16:53:08 +0000
ROA not before:           Wed 09 Feb 2022 16:48:08 +0000
ROA not after:            Wed 08 Feb 2023 16:53:08 +0000
asID:                     263053
IP address blocks:        177.137.140.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:71:9e:51:bc:0e:3c:1c:72:aa:52:e7:39:cd:36:db:e2:25:35:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Feb  9 16:48:08 2022 GMT
            Not After : Feb  8 16:53:08 2023 GMT
        Subject: CN=43EC57F1E5B2105B44963F6DF3967694F31856A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:05:f3:cc:44:de:57:c7:9e:29:7a:29:67:40:
                    65:e5:f6:cc:34:0e:34:86:0a:ba:7b:f8:4f:71:5d:
                    dd:de:6e:84:21:9c:cb:98:2c:9d:dc:bd:38:d1:22:
                    4b:f4:84:9b:67:87:1b:87:03:fb:66:56:ef:93:94:
                    2a:17:15:03:ef:dc:9c:d8:c8:2a:21:62:8a:5e:df:
                    e3:b3:53:14:8e:65:9b:d0:ca:e7:83:ef:f9:5f:2f:
                    30:7e:67:d0:1a:b7:b8:e6:b7:bf:20:0d:ff:23:5f:
                    10:b2:a5:6e:66:e3:57:25:4e:09:a6:55:d1:3e:9f:
                    75:7e:e6:5d:7f:ca:23:7b:5d:c7:7c:83:96:4e:83:
                    d8:f0:e5:cd:84:9a:27:f8:ae:90:2a:a8:83:f1:0d:
                    af:f8:f3:ce:42:4c:e5:ad:08:43:59:1a:69:00:8c:
                    92:7d:d1:e9:e8:ec:2f:48:8b:71:f3:86:93:8a:7a:
                    55:3b:96:d5:5f:42:22:24:c0:66:64:e4:65:09:20:
                    28:2f:b9:99:d3:3a:2d:4d:48:3a:72:6b:35:27:24:
                    78:7f:60:16:60:9c:e3:7a:7d:12:0f:cd:d5:d8:f5:
                    bb:4a:d9:8d:84:74:8a:d7:78:43:26:e8:eb:e6:f4:
                    88:12:6f:22:44:fa:8b:00:6e:a1:d6:31:de:d1:1c:
                    01:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EC:57:F1:E5:B2:10:5B:44:96:3F:6D:F3:96:76:94:F3:18:56:A6
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134302e302f32322d3232203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:49:13:28:e0:65:08:32:37:cb:52:f5:09:03:61:91:1f:6c:
         dd:fe:9b:34:19:30:4e:a0:63:09:ca:69:ae:a5:a9:d6:41:6c:
         30:d0:66:43:9a:5b:2f:1c:af:71:c9:f9:d3:b4:87:fb:6d:95:
         9f:5b:f1:da:fa:f2:4e:30:83:29:23:79:7f:4e:5c:2f:87:93:
         7f:fa:b6:da:8e:b6:d2:ed:51:c1:75:df:c2:64:99:f0:56:53:
         44:a5:38:5f:4b:ab:c6:b3:d5:76:a5:c2:2a:13:6e:13:ee:50:
         ce:09:ea:04:45:25:1b:76:b0:04:2c:77:ee:1e:a1:3f:cf:49:
         23:da:75:10:29:91:5f:81:e6:07:82:d8:20:15:02:6b:c6:f2:
         e0:01:89:59:2b:17:a0:d5:94:e6:4c:67:b2:6c:c6:43:57:8f:
         c0:75:84:60:18:56:64:cb:c4:05:e1:85:9c:bb:8c:52:10:9b:
         1f:fb:d4:7a:06:6c:5c:ff:36:c3:7d:e7:2a:79:a1:bb:c9:c0:
         f8:80:c0:09:cd:44:94:2f:30:f3:02:df:98:3c:a5:8c:0f:1f:
         b7:90:9d:17:b4:54:5b:2d:c4:de:d0:09:da:ec:51:62:42:fb:
         8c:af:28:12:38:8a:09:01:78:e0:c1:6e:bd:57:3e:29:01:ec:
         0d:0e:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:54:04 2025 by rpki-client