Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134302e302f32342d3234203d3e20323633303533.roa
File:                     3137372e3133372e3134302e302f32342d3234203d3e20323633303533.roa (raw, json)
Hash identifier:          pWW/kGyQqWy0KQfpNZ/M5r5o8gCx/o45F5Tk6n1djdI=
Subject key identifier:   32:84:37:6F:2A:31:41:5E:3B:56:F9:B8:CB:6A:C4:C5:84:1F:41:95
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       380C5EAA1C5D81A0A91A7553D6F8EFFA053AA5
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134302e302f32342d3234203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:03 +0000
ROA not before:           Fri 06 Jan 2023 21:55:03 +0000
ROA not after:            Fri 05 Jan 2024 22:00:03 +0000
asID:                     263053
IP address blocks:        177.137.140.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0c:5e:aa:1c:5d:81:a0:a9:1a:75:53:d6:f8:ef:fa:05:3a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:03 2023 GMT
            Not After : Jan  5 22:00:03 2024 GMT
        Subject: CN=3284376F2A31415E3B56F9B8CB6AC4C5841F4195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:48:29:4e:98:39:53:48:7a:aa:11:1f:22:
                    c0:e9:a3:c0:1c:66:f2:3f:2c:61:51:a2:e8:8c:38:
                    b1:23:d9:e4:e0:39:61:cd:6f:70:f9:83:13:b1:fe:
                    ef:7b:bf:f0:ba:48:03:d1:8e:d9:9d:91:9a:72:e8:
                    d6:93:bd:f7:73:73:e9:c8:3f:c2:5d:24:df:70:26:
                    45:11:8d:82:25:2e:38:26:16:5c:08:46:fd:63:11:
                    85:71:5d:13:57:50:64:23:9c:d0:ea:f1:a8:79:ad:
                    c7:f7:d1:89:92:b8:6a:f5:cf:03:59:b9:16:4d:d0:
                    b6:29:95:7f:cd:2b:9e:99:7f:78:4a:5b:ea:a0:6f:
                    b3:9d:69:ad:84:3a:d9:c2:e5:d6:28:6e:55:be:bb:
                    29:74:df:fc:5f:5a:08:c9:96:d6:60:3e:c3:f0:32:
                    95:8a:e2:a9:0a:70:96:70:05:df:39:27:3f:58:26:
                    16:33:1f:e8:8b:77:55:b9:4c:9e:57:dd:ff:d8:dd:
                    f5:ef:8d:9d:83:1c:4c:59:51:46:dd:a7:20:3e:0d:
                    c9:dd:ed:68:bb:d0:12:d6:90:fd:ed:a1:1d:c5:2d:
                    8e:12:bb:9e:28:85:4a:9d:cb:c2:4b:58:ba:fc:89:
                    ec:9e:d5:be:0f:a4:f3:6b:55:7f:48:cc:70:92:9b:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:84:37:6F:2A:31:41:5E:3B:56:F9:B8:CB:6A:C4:C5:84:1F:41:95
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134302e302f32342d3234203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:d2:4a:57:78:80:69:21:11:ed:a2:e6:f5:c3:e0:c6:86:3d:
         d1:83:88:c5:8c:63:da:15:1a:b3:d5:70:bd:62:1c:4e:b5:95:
         e5:a1:33:6e:cc:d1:f5:36:8e:2d:f5:0b:f7:ee:84:c3:d6:b3:
         06:5d:42:14:73:2a:7c:5e:9e:e9:84:d7:b6:d1:08:66:2a:f3:
         9e:c8:c1:e2:e7:9b:62:99:c7:4d:60:45:54:9d:91:52:e9:a9:
         5c:dd:e9:40:2b:66:9f:54:5a:d4:db:5d:c8:c2:82:4a:4c:39:
         58:eb:5a:10:56:2f:db:cf:7d:ca:1b:8c:c4:eb:74:2c:1b:be:
         02:cf:61:8d:2d:86:3c:5d:cc:54:1c:9f:71:a7:f7:0e:86:5c:
         bf:80:bd:a6:e2:7a:4e:6a:2d:70:7a:6f:42:46:10:52:8d:b7:
         cc:b2:ac:a0:fd:31:e6:86:de:44:70:65:d8:ef:c2:3d:c1:95:
         be:0b:ad:df:b2:2b:2b:6f:2e:85:43:09:29:8a:9c:f4:1e:ab:
         b7:5e:1d:98:cc:56:a0:c3:f6:f3:5a:76:4d:23:14:55:e1:98:
         3b:ed:62:05:a0:49:bc:a2:a0:b2:7f:db:6b:f6:04:e1:c5:ea:
         50:cd:49:e7:c9:ca:fd:14:13:f5:7e:2e:c8:34:f7:4f:69:e4:
         14:ca:d9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org