Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/3137372e3133372e3134322e302f32332d3233203d3e20323633303533.roa
File:                     3137372e3133372e3134322e302f32332d3233203d3e20323633303533.roa (raw, json)
Hash identifier:          TgUwYZVnm+sW/zAm9zDMLSTlr/hgkb7/KGJolBaW62A=
Subject key identifier:   63:53:B6:72:02:49:E7:60:9A:A6:6D:13:A1:99:FE:89:A1:84:21:09
Certificate issuer:       /CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
Certificate serial:       3EDC3622F15AE0BD7CF67610834AF0FBAD958CE3
Authority key identifier: 57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/3137372e3133372e3134322e302f32332d3233203d3e20323633303533.roa
Signing time:             Wed 03 Apr 2024 18:30:52 +0000
ROA not before:           Wed 03 Apr 2024 18:25:52 +0000
ROA not after:            Wed 02 Apr 2025 18:30:52 +0000
asID:                     263053
IP address blocks:        177.137.142.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:dc:36:22:f1:5a:e0:bd:7c:f6:76:10:83:4a:f0:fb:ad:95:8c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
        Validity
            Not Before: Apr  3 18:25:52 2024 GMT
            Not After : Apr  2 18:30:52 2025 GMT
        Subject: CN=6353B6720249E7609AA66D13A199FE89A1842109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:86:9a:cb:5e:90:63:e9:4b:d3:7f:f5:9b:8d:
                    fd:bd:53:0e:47:66:8e:23:67:7c:ed:e3:de:65:be:
                    c3:19:ff:b2:9d:c0:76:8a:a8:08:39:41:96:c6:4d:
                    60:5b:32:f5:8b:08:f3:31:eb:0c:9e:15:2b:57:cd:
                    13:aa:c0:56:21:d0:27:7a:12:b4:8c:2b:32:ae:ae:
                    c9:13:ab:73:b9:b4:54:60:6f:7e:72:89:dd:26:ee:
                    1f:de:95:54:9c:4e:78:62:71:e5:e5:bc:82:8d:d4:
                    52:25:44:d9:ed:33:d9:d2:77:07:25:84:25:2c:2e:
                    df:d5:82:dd:68:bc:3d:8c:40:e9:a5:a6:59:92:8b:
                    22:82:83:0f:e8:57:73:21:93:02:88:78:8b:bb:22:
                    52:40:f9:65:84:7a:8a:0d:79:7f:b1:91:61:59:f2:
                    89:e4:de:38:63:c0:8a:9f:d0:0b:18:aa:58:2e:0a:
                    b4:8f:c0:63:3d:f9:e1:ce:d2:6b:bd:92:71:65:61:
                    92:c3:a8:e0:03:03:f5:c7:ad:bf:78:b7:bd:ea:73:
                    ac:7d:5e:09:09:b9:7e:13:3a:dd:a7:d8:76:2b:67:
                    d7:0c:21:24:ea:a8:36:3c:68:d0:5b:ee:f9:a0:2d:
                    ec:38:83:00:d4:da:ca:9f:0c:c4:7f:2a:a8:bf:6a:
                    63:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:53:B6:72:02:49:E7:60:9A:A6:6D:13:A1:99:FE:89:A1:84:21:09
            X509v3 Authority Key Identifier:
                keyid:57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/3137372e3133372e3134322e302f32332d3233203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:c1:15:1a:fa:45:b5:76:ca:20:70:4d:67:6e:d2:4b:aa:1f:
         66:37:14:2e:0d:db:88:b9:72:dc:e9:c4:ae:c4:e8:14:90:cf:
         8c:a9:87:14:3a:c1:95:c3:cd:0c:61:46:82:8a:2c:23:a1:5b:
         95:b1:8a:76:a0:05:80:c1:93:0e:96:aa:57:25:43:3b:61:be:
         ff:62:4c:e1:3b:11:50:3e:33:7e:34:bf:be:a4:e3:3f:5f:dc:
         08:23:e2:a1:83:a3:7b:27:34:38:5d:35:50:8b:59:9d:08:66:
         0b:17:9e:22:55:2d:98:8d:24:b0:bb:be:c2:87:d3:c8:6e:c6:
         7a:4d:fb:e9:db:ff:31:7c:9b:8e:68:de:29:6f:0c:06:17:42:
         46:6e:05:e0:7a:da:fe:4e:ea:49:74:c2:de:68:cb:ef:6b:91:
         2e:37:cd:1b:64:ad:ca:eb:be:92:27:56:33:c5:97:61:a4:a1:
         ce:26:cb:4a:69:30:77:d4:1f:c5:dd:5a:fe:92:ad:db:93:1a:
         a9:b4:f4:d6:47:60:f9:65:20:c7:91:f8:85:80:ca:9b:79:c2:
         c5:7b:ea:5a:a4:d4:e5:ef:05:75:d2:9a:b2:a3:74:0a:2f:53:
         24:70:ab:59:c7:c3:07:1c:ec:c8:28:f3:50:7a:c7:49:40:ce:
         40:88:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org