Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134302e302f32332d3233203d3e20323633303533.roa
File:                     3137372e3133372e3134302e302f32332d3233203d3e20323633303533.roa (raw, json)
Hash identifier:          yqQboFHmwk/6bpXdtK5aTZUZM4BYAad0r37dmpiRxHw=
Subject key identifier:   58:81:62:CE:A6:0C:93:A4:4B:15:9A:62:8A:E2:E3:3B:A9:E6:F1:D9
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       58342485EA9E6D127A38621F25F335A97086BD9E
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134302e302f32332d3233203d3e20323633303533.roa
Signing time:             Sun 17 Dec 2023 15:00:00 +0000
ROA not before:           Sun 17 Dec 2023 14:55:00 +0000
ROA not after:            Sun 15 Dec 2024 15:00:00 +0000
asID:                     263053
IP address blocks:        177.137.140.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:34:24:85:ea:9e:6d:12:7a:38:62:1f:25:f3:35:a9:70:86:bd:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Dec 17 14:55:00 2023 GMT
            Not After : Dec 15 15:00:00 2024 GMT
        Subject: CN=588162CEA60C93A44B159A628AE2E33BA9E6F1D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b9:7c:eb:70:31:b7:d5:47:16:b9:ef:71:61:
                    60:c1:07:ee:6d:5e:17:42:c0:28:54:ea:0e:e8:dc:
                    86:03:18:9a:c7:8a:b5:22:11:1b:20:82:5c:da:4f:
                    38:8a:c1:69:d7:25:2a:37:a3:60:3b:da:c8:e4:fe:
                    45:18:ad:df:21:68:83:2e:da:b3:a2:0e:3d:6d:82:
                    05:e9:c1:e0:e5:20:56:99:c2:0f:2c:69:c0:33:a5:
                    2c:89:ee:e9:fb:fd:bf:16:fb:fd:26:19:11:c2:ef:
                    3f:58:4f:f9:ea:51:7f:bb:ef:a2:59:c4:5b:63:36:
                    2f:94:4a:2d:bc:2c:1d:6c:c6:24:49:10:d9:2f:c3:
                    ad:29:cd:14:8e:c5:d0:71:7f:1b:fe:e7:ee:11:e5:
                    c3:38:b6:b6:fa:e9:d5:27:e6:06:97:06:b5:a5:d4:
                    8d:2e:4e:58:6f:c1:d6:e8:ca:18:67:df:a4:62:ab:
                    23:04:df:e6:b8:dd:e6:84:97:6a:32:5c:9a:b5:7d:
                    05:62:5f:f3:17:80:0a:d7:0d:e7:52:89:31:35:3e:
                    e0:13:4a:02:cd:46:9d:ae:d3:d0:56:e7:33:64:d6:
                    6b:fa:ba:6d:45:4c:dd:99:5d:34:47:29:15:37:89:
                    1c:97:79:fe:28:fc:97:69:ce:b9:9c:2d:b3:dc:34:
                    f7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:81:62:CE:A6:0C:93:A4:4B:15:9A:62:8A:E2:E3:3B:A9:E6:F1:D9
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134302e302f32332d3233203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:98:72:a2:c0:d6:7e:6d:e2:ea:c2:19:f4:f3:a7:3f:17:87:
         70:7e:26:e6:a4:4a:6a:1e:62:ee:54:08:b6:e4:93:b8:59:9b:
         e3:86:d9:60:05:94:75:5b:f0:53:44:a8:73:b0:1c:4b:c0:d6:
         46:2a:10:2d:e0:95:89:00:22:4c:31:2f:ca:53:ef:4e:54:59:
         0f:17:98:bf:5d:f8:68:52:4f:d0:cc:f0:df:62:f7:98:54:78:
         ba:9f:9b:c7:b1:75:16:17:1b:99:6d:be:1d:ff:d7:e0:ee:bb:
         77:fc:92:2e:fe:a3:28:b9:6c:d0:ef:2e:ab:76:ed:19:f3:97:
         3a:50:23:a7:11:77:70:8d:7f:13:f2:15:73:c5:eb:ac:f5:a7:
         19:b0:3f:32:96:27:ce:fa:38:09:64:95:17:25:d8:6f:ee:6e:
         cb:0b:1e:10:25:90:01:c5:2e:ae:0f:08:86:9c:cb:95:f8:72:
         e6:af:04:fc:c9:09:13:60:8b:b3:9f:f1:f0:df:a4:f3:3f:2f:
         63:82:90:12:f1:b9:05:53:17:a3:38:be:ff:20:7a:9c:e6:d5:
         d1:94:ae:3e:50:82:a9:ff:04:68:91:b4:ab:ea:95:01:6d:69:
         22:2f:00:38:0f:64:45:34:25:83:af:10:90:d7:8a:87:56:0c:
         67:3a:93:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:50 2025 by rpki-client