Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134332e302f32342d3234203d3e20323633303533.roa
File:                     3137372e3133372e3134332e302f32342d3234203d3e20323633303533.roa (raw, json)
Hash identifier:          e4+NPLqEOrXope1yNGuxxMbKdP0/gjCgpZPAD1GoTtY=
Subject key identifier:   43:9F:04:0B:AD:E6:76:31:38:19:24:B6:0C:13:C6:F8:CC:E0:D0:38
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       747EB0BB77C316516B38562E16EAA56D5F1D839E
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134332e302f32342d3234203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:01 +0000
ROA not before:           Fri 06 Jan 2023 21:55:01 +0000
ROA not after:            Fri 05 Jan 2024 22:00:01 +0000
asID:                     263053
IP address blocks:        177.137.143.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:7e:b0:bb:77:c3:16:51:6b:38:56:2e:16:ea:a5:6d:5f:1d:83:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:01 2023 GMT
            Not After : Jan  5 22:00:01 2024 GMT
        Subject: CN=439F040BADE67631381924B60C13C6F8CCE0D038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:9f:a9:22:34:8e:23:46:eb:f4:61:5e:2b:
                    a6:bd:22:f2:d2:d8:4e:ed:4b:43:55:d5:aa:60:a6:
                    94:5c:18:6d:43:1e:83:c3:6b:12:30:8a:25:e1:89:
                    49:b9:40:59:87:90:50:79:c8:33:dc:db:3f:9d:36:
                    b4:6d:d4:9d:23:f0:1d:11:78:b5:c2:28:9a:2c:46:
                    ad:d6:62:f4:85:f5:77:2b:e7:1f:3f:55:77:19:64:
                    8a:a5:51:73:74:56:a5:12:16:ba:88:9b:7d:bd:cd:
                    b3:bb:43:aa:4f:13:09:fc:ef:54:ca:90:30:08:5b:
                    b3:89:3a:1a:bb:d8:03:94:63:4b:4a:52:c5:f9:10:
                    29:b0:77:06:45:aa:95:f9:4e:c1:b9:f3:df:82:1f:
                    74:81:45:68:18:b1:aa:be:d1:c3:c9:74:75:64:e4:
                    b8:b4:9e:72:bd:bd:10:0c:c8:40:4e:ba:b6:0d:84:
                    e5:53:79:b4:67:0c:41:ba:ce:a8:4b:51:02:9e:a6:
                    a5:18:ca:87:b9:b8:87:58:27:9d:e7:89:5c:58:a2:
                    9f:25:83:0b:37:5a:b9:24:27:04:d8:01:9f:b1:cb:
                    47:47:c2:67:ef:d8:0e:7c:ae:e2:16:60:2e:01:ed:
                    15:10:ca:76:5a:75:31:60:5b:6f:bf:7b:dc:37:66:
                    2c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9F:04:0B:AD:E6:76:31:38:19:24:B6:0C:13:C6:F8:CC:E0:D0:38
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/3137372e3133372e3134332e302f32342d3234203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:55:d9:0c:73:68:ba:d9:0e:e4:1c:c8:04:b9:16:09:4e:80:
         ef:4a:60:88:d2:98:3b:d4:c4:f2:6d:45:d5:41:8e:93:e3:d0:
         46:af:f9:cd:0d:a0:17:f0:be:d1:75:07:c2:19:8b:f9:f8:d6:
         73:33:ea:0e:13:80:03:23:66:1b:61:c9:3a:f6:6a:e9:a2:7a:
         79:ca:b8:01:8d:33:30:c1:81:9b:44:66:f2:e6:65:36:e7:12:
         64:3f:b8:52:42:8a:79:a8:cc:20:79:ea:5a:95:09:24:2d:23:
         e8:98:54:d3:6f:fd:b5:bb:28:85:cc:3d:fc:ed:1d:5b:8d:1c:
         54:1f:31:58:a7:05:c6:88:51:ea:80:a7:8c:6c:62:2e:1e:08:
         63:69:d7:a1:b3:bd:74:2e:11:21:f4:dd:fe:ac:c1:72:86:26:
         47:f4:49:7d:cc:c0:62:89:df:8a:50:21:24:97:77:68:ac:a1:
         8a:d0:1c:7b:be:2f:ea:dd:4a:64:03:ee:55:6b:4b:d4:2c:54:
         45:c5:60:9f:c6:b2:cf:04:44:76:09:97:68:1a:85:61:98:c2:
         59:46:7e:7f:53:dd:86:92:dd:75:e0:a9:a9:cd:66:5f:7d:6d:
         72:77:09:30:be:11:c0:c7:ea:c2:90:ba:4e:11:dd:01:45:94:
         44:06:d6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:43 2025 by rpki-client