Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/3137372e3133372e3132382e302f32332d3233203d3e20323633303533.roa
File:                     3137372e3133372e3132382e302f32332d3233203d3e20323633303533.roa (raw, json)
Hash identifier:          +unQkfkVgjNZn1FuTZs8+9DHLVOBfXUu1JvMedC++lg=
Subject key identifier:   8A:AF:84:BB:C4:B6:8F:C5:9E:D4:71:B0:57:33:79:7D:93:D9:52:7D
Certificate issuer:       /CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
Certificate serial:       7B6D1D7B0421585E2CBE7091D763919FE6821A94
Authority key identifier: 57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/3137372e3133372e3132382e302f32332d3233203d3e20323633303533.roa
Signing time:             Wed 03 Apr 2024 18:30:49 +0000
ROA not before:           Wed 03 Apr 2024 18:25:49 +0000
ROA not after:            Wed 02 Apr 2025 18:30:49 +0000
asID:                     263053
IP address blocks:        177.137.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6d:1d:7b:04:21:58:5e:2c:be:70:91:d7:63:91:9f:e6:82:1a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
        Validity
            Not Before: Apr  3 18:25:49 2024 GMT
            Not After : Apr  2 18:30:49 2025 GMT
        Subject: CN=8AAF84BBC4B68FC59ED471B05733797D93D9527D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:47:03:4c:31:93:6f:26:24:00:ef:92:4d:ef:
                    c0:42:b7:8c:8f:19:06:ff:cc:61:85:ef:ca:cd:f9:
                    8e:82:82:6f:b9:59:f9:69:29:9d:0b:4a:42:0d:8e:
                    30:6c:96:68:87:b4:db:87:8b:be:16:51:36:1d:1b:
                    d0:b6:b8:33:91:16:b0:67:a2:e1:cd:f3:f6:c8:7d:
                    a6:2c:31:2d:a3:76:c9:65:51:d0:0c:a9:a7:32:f6:
                    36:ab:64:2f:2b:d9:e3:81:19:c0:db:bc:80:b5:8c:
                    68:9d:65:6f:de:b5:8f:04:60:4c:41:a9:19:53:61:
                    82:42:92:b4:7f:6a:1b:dd:13:a8:0f:8e:f1:b6:e0:
                    d1:ae:b1:3e:86:bb:f8:8d:b6:3e:0f:80:a9:5d:72:
                    0a:78:b2:49:5f:8b:5a:f7:84:03:df:11:bd:df:7c:
                    01:f9:1c:91:fc:7c:0d:26:aa:99:08:a9:2a:ed:45:
                    e4:a4:5e:17:b5:6c:a6:42:da:5a:69:8f:ce:86:b5:
                    b5:01:94:2a:fc:98:ac:ac:9f:4d:f0:9a:bd:49:e4:
                    dc:c6:b3:90:f7:9a:3a:da:90:b3:8b:75:87:44:d1:
                    29:c9:50:4b:fc:96:c4:1d:1e:c4:13:81:a8:a2:4d:
                    aa:6a:70:0d:20:4f:47:0d:fb:cb:48:c3:14:2b:63:
                    8b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AF:84:BB:C4:B6:8F:C5:9E:D4:71:B0:57:33:79:7D:93:D9:52:7D
            X509v3 Authority Key Identifier:
                keyid:57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/3137372e3133372e3132382e302f32332d3233203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:79:90:60:1b:3d:d9:4c:85:d4:62:22:a2:28:1e:72:b8:
         e2:c5:01:3a:b2:1b:ea:55:3a:30:6a:5f:2f:08:b6:de:b5:43:
         0c:42:22:59:9e:5c:dd:f4:31:5c:2c:84:83:4d:b1:1e:a6:7d:
         4f:e5:ed:85:7f:b5:bf:56:03:55:08:75:61:9a:2b:89:2d:af:
         02:08:cd:a7:c5:32:0f:a4:c9:cf:63:30:12:1b:8b:3f:b6:27:
         cf:c0:35:5c:c0:4b:a2:1d:c3:24:a9:ab:a7:a0:84:fd:eb:d4:
         3f:a3:8d:e8:a5:18:5a:af:ce:e3:b2:90:8f:fd:fc:2b:7d:cd:
         69:e7:83:b9:80:6a:3d:cd:4e:39:2d:b7:c0:09:6b:e6:52:d3:
         f5:88:f5:38:14:8a:6f:aa:e4:3a:6f:26:8c:f8:36:f2:ed:a0:
         1e:a5:ed:01:c8:6d:b7:6e:2a:ad:90:c9:30:4a:a4:d1:d5:be:
         2f:0d:ca:56:12:fd:64:57:79:d2:ad:7c:72:ad:29:04:41:29:
         db:aa:70:74:c1:dc:61:0d:f5:63:fa:e5:f7:f8:16:86:1d:a7:
         71:8a:ee:5c:8f:1a:1d:9d:1f:b8:83:57:2f:80:8c:5a:2d:3d:
         34:0b:90:ef:1c:a2:cb:24:af:d4:aa:b7:db:93:95:f7:b3:5f:
         81:a3:19:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org