Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134322e302f32342d3234203d3e20323633303533.roa
File:                     3137372e3133372e3134322e302f32342d3234203d3e20323633303533.roa (raw, json)
Hash identifier:          y6si190BqnTRuxTtxqVghtmza7X4bHag6UcGIvBGFuM=
Subject key identifier:   A5:C3:79:29:93:AE:BF:DA:FB:46:D0:79:12:81:53:45:6F:4F:C7:15
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       234F163083A0CF2C7040B62D1E4D868F79864454
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134322e302f32342d3234203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:01 +0000
ROA not before:           Fri 06 Jan 2023 21:55:01 +0000
ROA not after:            Fri 05 Jan 2024 22:00:01 +0000
asID:                     263053
IP address blocks:        177.137.142.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4f:16:30:83:a0:cf:2c:70:40:b6:2d:1e:4d:86:8f:79:86:44:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:01 2023 GMT
            Not After : Jan  5 22:00:01 2024 GMT
        Subject: CN=A5C3792993AEBFDAFB46D079128153456F4FC715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9f:67:93:a5:b1:f1:b2:46:8e:ce:35:bd:26:
                    9a:1b:ca:c4:89:a6:53:49:1d:cb:81:7b:01:b4:a6:
                    4b:c5:a6:fa:1e:a4:1a:fd:64:30:11:eb:d3:82:3a:
                    d4:0c:2b:61:1f:a2:e9:12:05:c3:78:86:f6:3d:a7:
                    28:19:2b:f6:35:b9:d7:07:b8:de:7f:5a:86:27:5c:
                    a3:fb:7b:d0:6b:a8:3e:62:9c:5a:90:9d:eb:31:a0:
                    13:7d:fd:ef:15:37:5a:08:57:d2:60:1f:ef:9c:78:
                    f4:36:54:0d:c9:85:22:98:e6:0c:85:7d:35:31:ef:
                    aa:60:0f:74:d7:30:28:9c:06:89:bd:e0:b5:19:59:
                    6b:47:0e:c2:b2:26:5e:09:48:39:52:cb:0d:d4:ff:
                    67:2b:d0:e3:ee:cb:61:b8:a3:f0:b5:b8:85:6e:aa:
                    c8:c0:d7:c0:82:d1:1b:30:aa:4b:dd:a8:62:fc:ff:
                    03:f6:ec:03:79:3d:5a:f1:70:12:fa:8b:3a:e4:4c:
                    46:e3:d5:60:7a:9e:4b:4b:00:13:cd:ac:cf:87:f4:
                    ae:39:21:21:d7:56:6e:92:02:ff:85:c1:88:b6:ee:
                    c4:d4:a4:e3:73:12:69:a4:e3:15:7a:ae:18:4c:b3:
                    94:a6:31:ca:f8:60:35:94:97:ff:b7:b0:52:b1:84:
                    b4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C3:79:29:93:AE:BF:DA:FB:46:D0:79:12:81:53:45:6F:4F:C7:15
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134322e302f32342d3234203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ab:99:f3:cd:a1:1e:4c:1e:bc:d4:6f:c8:3b:6c:c5:8d:0e:
         25:26:7d:2d:95:60:66:44:5d:71:57:43:ce:74:be:95:f2:ec:
         74:df:ed:44:31:12:cf:c5:b4:44:e5:a5:47:b5:52:b9:df:ab:
         5b:42:28:62:aa:47:64:df:89:a1:f3:10:bf:cc:d9:e2:ac:36:
         4f:1a:90:b3:c6:49:40:7e:12:0c:cf:3b:bb:3e:b9:92:4b:b8:
         f1:32:c4:8a:32:05:5e:da:52:9a:94:28:39:49:21:16:b3:3a:
         fd:6c:b9:1e:e5:a1:7d:88:f7:68:c7:13:81:8a:b7:0a:d3:95:
         23:da:c3:50:38:8d:60:e0:aa:47:f5:df:98:d4:25:ea:e3:30:
         d8:59:9e:aa:b9:2e:80:a0:a9:a8:3a:13:5e:fc:0c:9c:70:80:
         d9:68:c2:27:a5:d9:b6:d7:38:4c:a9:bd:01:78:0d:94:51:f9:
         49:35:e6:66:3a:39:29:12:e3:33:2d:0d:95:28:bb:c9:d1:7e:
         26:9b:00:13:cc:d3:4f:78:f2:f9:ce:ba:11:90:bb:ce:45:2e:
         6d:00:71:b6:23:13:ce:1b:55:b6:4f:3d:8f:9b:68:4a:58:77:
         d4:e3:cb:6b:c2:eb:6a:26:1d:8f:8e:38:d3:78:9b:f2:37:66:
         46:60:2a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:18:54 2025 by rpki-client