Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134312e302f32342d3234203d3e20323633303533.roa
File:                     3137372e3133372e3134312e302f32342d3234203d3e20323633303533.roa (raw, json)
Hash identifier:          SGFdhiur81JxhxV8qiz/KYiw6DJViSWbDdnp8IQ/lOs=
Subject key identifier:   CB:E2:A8:2E:B5:64:53:D3:35:F4:63:AD:46:9F:5A:8A:C3:EE:70:E0
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       3CEA17A356F55F893193F0AA20E0C7747D92CF67
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134312e302f32342d3234203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:05 +0000
ROA not before:           Fri 06 Jan 2023 21:55:05 +0000
ROA not after:            Fri 05 Jan 2024 22:00:05 +0000
asID:                     263053
IP address blocks:        177.137.141.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ea:17:a3:56:f5:5f:89:31:93:f0:aa:20:e0:c7:74:7d:92:cf:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:05 2023 GMT
            Not After : Jan  5 22:00:05 2024 GMT
        Subject: CN=CBE2A82EB56453D335F463AD469F5A8AC3EE70E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fd:c8:a0:b4:8c:af:68:6e:fb:e0:b4:a6:bb:
                    44:b8:f0:07:78:82:91:d2:3f:87:f4:25:cc:89:c8:
                    ca:05:e8:e4:16:e9:02:9b:01:a0:a1:67:d7:c5:ff:
                    a7:5f:57:c1:3c:e2:b5:62:5c:22:45:b2:bc:55:af:
                    bd:ef:39:c1:b8:30:70:fc:aa:e0:81:ee:f4:80:42:
                    cb:2e:d6:02:77:b9:12:e5:14:6e:7f:ee:e9:fe:af:
                    42:35:8b:c9:dd:be:3e:77:d6:d8:ce:c2:28:b0:1b:
                    84:c6:57:25:08:05:d8:5a:53:dc:3d:40:20:12:b0:
                    73:e7:62:ee:7a:9b:49:4a:6f:09:98:64:cc:10:b8:
                    c4:9d:1d:7e:ce:8d:0b:02:41:7b:bd:e3:fd:cd:9c:
                    57:a4:44:58:40:3c:f5:9b:a7:1d:a6:b5:2d:bb:c1:
                    16:c2:32:d4:e9:b0:a0:90:8e:49:55:de:03:80:62:
                    37:34:b7:7e:2c:2a:48:c2:dc:aa:3d:80:52:7b:76:
                    0d:f4:f4:a1:af:f9:40:ea:b7:3d:63:ab:a2:a6:57:
                    40:45:93:ab:3f:8a:75:a3:cb:ae:59:cd:46:ff:3f:
                    5f:cc:1a:ba:5d:eb:6d:20:02:e1:33:81:07:69:d0:
                    e1:48:10:bf:a2:4c:2a:17:1a:9c:8e:0e:7d:f5:db:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E2:A8:2E:B5:64:53:D3:35:F4:63:AD:46:9F:5A:8A:C3:EE:70:E0
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134312e302f32342d3234203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:52:f5:c9:d5:9f:ea:5a:19:76:4e:6d:f0:59:aa:00:54:0c:
         4d:b9:55:c5:01:0a:b9:3f:a8:45:87:37:60:0b:e2:d4:57:49:
         94:e5:88:e9:d5:42:27:ef:c2:48:29:36:d1:10:2a:89:17:b2:
         45:d2:bf:59:e8:ae:d6:3e:b8:de:47:b6:18:ea:10:1e:02:9b:
         dd:57:72:25:f5:e5:87:ec:9e:aa:ef:18:36:1e:c1:09:22:68:
         78:12:31:23:b4:88:0c:f3:66:c7:6f:dd:81:ca:a9:2e:5d:dd:
         23:34:d3:36:0c:b9:27:d9:37:9c:fd:ba:c4:a2:3d:7d:ea:7c:
         67:dd:6f:48:a7:03:cd:9d:a2:78:eb:ef:c1:4b:0d:84:6a:af:
         06:3e:c6:28:e8:bd:68:62:d6:8d:8e:f9:d3:e3:54:08:ce:06:
         10:d8:4c:48:01:65:ea:bd:c1:0e:b1:86:1b:be:f7:44:be:0d:
         35:5a:6f:67:3f:a9:95:21:fc:17:28:fd:5f:1a:28:e4:22:99:
         2d:e5:89:79:f4:28:92:2f:9b:be:a4:f6:88:db:be:21:0a:89:
         4b:df:3d:53:20:fb:9a:02:75:90:fc:b7:47:94:da:f9:5d:8c:
         a5:3a:1f:8f:c9:24:74:5f:3a:34:61:47:03:dd:97:f2:c2:fb:
         0d:7c:7a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org