Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/3137372e3133372e3133302e302f32332d3233203d3e20323633303533.roa
File:                     3137372e3133372e3133302e302f32332d3233203d3e20323633303533.roa (raw, json)
Hash identifier:          iBsUew2B7DqIAoKlYSGro7U8zFsvnbopzaDCDjmOZ34=
Subject key identifier:   C0:1F:E4:23:F6:A7:68:67:EC:F9:FB:21:5D:DA:17:A8:81:58:35:5C
Certificate issuer:       /CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
Certificate serial:       1A37DF17C682D2E30DEE5695C1EBF0362C7AAF0E
Authority key identifier: 57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/3137372e3133372e3133302e302f32332d3233203d3e20323633303533.roa
Signing time:             Wed 03 Apr 2024 18:30:52 +0000
ROA not before:           Wed 03 Apr 2024 18:25:52 +0000
ROA not after:            Wed 02 Apr 2025 18:30:52 +0000
asID:                     263053
IP address blocks:        177.137.130.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:37:df:17:c6:82:d2:e3:0d:ee:56:95:c1:eb:f0:36:2c:7a:af:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
        Validity
            Not Before: Apr  3 18:25:52 2024 GMT
            Not After : Apr  2 18:30:52 2025 GMT
        Subject: CN=C01FE423F6A76867ECF9FB215DDA17A88158355C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:52:13:1e:a6:94:d2:ae:22:7a:48:85:7f:
                    d6:ae:d5:88:94:d4:dc:03:84:4b:b1:75:64:75:fd:
                    fc:42:81:0b:ca:dc:6f:0a:d3:b8:9f:62:4d:01:c7:
                    41:50:a4:2f:1b:70:5e:22:82:11:4c:34:6c:f4:88:
                    76:45:56:fa:60:61:bf:cc:94:4b:1e:59:18:bb:99:
                    f8:72:1a:9e:61:bb:4c:ff:b6:8a:7b:49:e6:33:d6:
                    2a:18:9c:7f:08:93:6d:e8:63:0a:88:33:d9:f2:68:
                    40:14:46:d8:42:ca:f5:0a:30:15:ec:cc:a0:d8:7d:
                    07:df:7c:f2:a4:95:fb:19:f0:49:f7:3b:67:2e:c7:
                    3a:49:62:c4:78:ad:96:ba:c5:f2:ce:6f:1f:0f:ca:
                    8d:0c:c3:74:77:44:a6:77:b5:14:2d:d3:0f:67:9b:
                    9c:62:8d:37:44:80:8e:eb:88:b6:bf:df:6d:6e:8e:
                    b7:93:61:28:d5:39:6c:5e:af:b2:a4:3d:c9:95:a4:
                    06:cf:14:d9:be:85:bf:b3:ca:62:a3:d3:3a:f2:9b:
                    b2:9a:10:a3:db:bc:10:e4:3e:6b:b7:56:f9:6f:5c:
                    a8:17:3b:23:59:5e:5d:3f:a1:d3:e8:46:59:3d:fa:
                    37:ab:3a:9e:a3:77:bc:91:bc:20:1b:77:40:f2:61:
                    9e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1F:E4:23:F6:A7:68:67:EC:F9:FB:21:5D:DA:17:A8:81:58:35:5C
            X509v3 Authority Key Identifier:
                keyid:57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/3137372e3133372e3133302e302f32332d3233203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:2f:35:eb:22:73:86:4f:76:34:73:9c:3b:2c:88:a1:05:10:
         3d:7a:30:b6:1e:bb:ce:bf:32:08:09:f0:9d:fb:51:3d:68:af:
         5b:67:69:56:7a:d5:fa:bd:79:bf:90:1c:e2:3e:fa:49:52:d1:
         e1:e3:4c:aa:07:30:23:44:28:83:08:20:3c:d8:05:ad:68:0f:
         52:ba:47:d4:dc:b2:5a:3b:9c:cf:0c:44:2a:fa:88:d0:72:17:
         71:9b:4e:b4:3f:e3:5a:1a:a7:41:c1:98:32:ce:d0:85:1f:e8:
         3b:bc:16:15:bd:c6:1b:14:c0:e2:15:73:04:a3:a7:96:e5:07:
         0d:02:c1:99:dd:9c:b3:a1:d8:d4:e5:23:46:20:8b:f4:a6:55:
         0d:70:ef:ce:26:23:6b:8d:4a:41:5e:bc:ba:0b:54:73:c7:93:
         f3:f9:25:0f:f2:db:a1:d5:2c:05:cc:58:6a:10:53:b0:56:92:
         14:7f:3c:c7:b4:f5:31:21:f5:6a:3b:cb:97:a7:84:da:75:d0:
         1d:b0:32:b5:70:97:19:e7:65:14:16:b9:c9:af:69:8a:48:c7:
         63:9f:0d:29:6e:1a:51:0f:bb:6e:d5:88:38:6a:2f:20:81:d3:
         36:df:d0:84:c3:04:20:b8:7b:8a:7b:66:5c:7f:f5:31:87:24:
         87:31:70:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org