Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a343030303a3a2f33342d3334203d3e20323633303533.roa
File:                     323830343a3932303a343030303a3a2f33342d3334203d3e20323633303533.roa (raw, json)
Hash identifier:          uBfsVTQrPBekmpm3VRezeT4PctPqaS09i/OKIKIHG+g=
Subject key identifier:   00:43:B9:2E:1B:28:B4:F9:1E:CF:7B:0E:6F:2C:2F:48:34:F6:3E:17
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       129DC748CDF28E5EB5464C86DD7EE2426E93845A
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a343030303a3a2f33342d3334203d3e20323633303533.roa
Signing time:             Fri 08 Dec 2023 23:00:00 +0000
ROA not before:           Fri 08 Dec 2023 22:55:00 +0000
ROA not after:            Fri 06 Dec 2024 23:00:00 +0000
asID:                     263053
IP address blocks:        2804:920:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9d:c7:48:cd:f2:8e:5e:b5:46:4c:86:dd:7e:e2:42:6e:93:84:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Dec  8 22:55:00 2023 GMT
            Not After : Dec  6 23:00:00 2024 GMT
        Subject: CN=0043B92E1B28B4F91ECF7B0E6F2C2F4834F63E17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:a0:e9:e6:db:fa:f3:5a:1b:d7:2f:a2:3d:
                    ce:75:80:df:8a:f3:d4:c7:6b:f6:ba:d3:96:a7:f5:
                    9f:b7:b9:13:57:8a:39:14:17:c6:ff:23:59:f3:f0:
                    95:af:84:e5:4b:79:8d:67:c6:7f:90:37:9e:7f:bd:
                    86:81:31:c9:5f:06:e2:27:a5:44:cd:8b:bc:4b:a9:
                    11:d2:fc:d4:84:6c:e2:3c:da:df:0e:ad:6b:10:ca:
                    f0:14:8a:7c:35:c6:fb:0e:e5:80:83:5c:c2:b4:47:
                    11:19:79:80:10:46:29:14:78:b9:bc:68:3e:c8:7c:
                    b7:e8:03:13:01:8e:fe:25:45:bb:56:43:76:19:46:
                    32:4c:cd:6a:60:1f:7c:61:f8:02:04:81:ec:77:00:
                    f7:b5:86:5f:e5:d4:81:45:95:6d:93:18:07:b1:68:
                    12:41:3e:a7:b7:d4:71:58:52:33:8a:02:da:4a:82:
                    4f:71:15:5d:cb:d3:c8:15:6e:59:44:3d:a3:62:f6:
                    09:41:20:42:59:b3:f3:28:7b:3b:f9:02:83:10:c9:
                    6d:09:f7:51:e1:a4:8d:a9:e7:65:64:0a:65:7a:6b:
                    23:95:a2:e0:08:dd:33:8c:ee:ef:9b:84:37:f6:a2:
                    69:86:1c:e2:dc:39:1e:d3:8b:8e:bc:59:2e:71:38:
                    29:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:43:B9:2E:1B:28:B4:F9:1E:CF:7B:0E:6F:2C:2F:48:34:F6:3E:17
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a343030303a3a2f33342d3334203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         80:2b:3c:40:83:5d:4c:17:7f:bc:25:2b:33:92:3c:3c:9f:90:
         87:dd:6e:74:dc:8e:e1:a4:c0:8c:cb:79:32:25:35:8b:46:29:
         70:f5:29:81:7f:72:6a:36:aa:97:ca:9c:0c:bf:81:d4:a6:fa:
         f4:01:eb:78:07:dc:c3:75:49:77:6e:e8:26:be:15:21:db:1b:
         ca:b9:60:d1:67:8d:f4:10:2c:77:6c:75:83:23:67:27:f5:84:
         0e:1d:b5:35:63:ac:41:31:6c:c4:e3:c1:ce:ba:74:49:f2:19:
         8e:7e:ba:ac:b5:41:9d:88:c6:67:02:49:c3:59:98:e1:85:e5:
         f6:8f:2e:53:6d:ec:56:4a:5c:00:7a:ba:20:af:b5:b0:35:92:
         86:57:ba:4c:0e:a5:df:42:8b:e5:32:4d:de:78:fd:11:3f:03:
         5c:8e:4d:09:da:7f:b5:c9:f7:f5:d4:56:fd:1d:8e:f1:d9:97:
         52:18:41:af:ab:27:ab:14:2b:4e:7b:3d:95:82:7d:ba:33:aa:
         a0:a4:54:ff:03:76:b0:b0:79:29:db:5f:fe:32:19:ad:2f:a4:
         40:29:73:d2:2d:ce:2e:80:77:53:3d:d7:8f:23:38:38:ba:94:
         ca:06:33:f0:14:7b:d8:a4:8a:0f:3b:de:66:31:23:ce:a4:87:
         04:e8:11:62
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUEp3HSM3yjl61RkyG3X7iQm6ThFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDQzkxNTc4ODExRkUyOTc5MEM3RjBGMDEwNEVDQUIx
RDA5NzVBMzAeFw0yMzEyMDgyMjU1MDBaFw0yNDEyMDYyMzAwMDBaMDMxMTAvBgNV
BAMTKDAwNDNCOTJFMUIyOEI0RjkxRUNGN0IwRTZGMkMyRjQ4MzRGNjNFMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDRqDp5tv681ob1y+iPc51gN+K
89THa/a605an9Z+3uRNXijkUF8b/I1nz8JWvhOVLeY1nxn+QN55/vYaBMclfBuIn
pUTNi7xLqRHS/NSEbOI82t8OrWsQyvAUinw1xvsO5YCDXMK0RxEZeYAQRikUeLm8
aD7IfLfoAxMBjv4lRbtWQ3YZRjJMzWpgH3xh+AIEgex3APe1hl/l1IFFlW2TGAex
aBJBPqe31HFYUjOKAtpKgk9xFV3L08gVbllEPaNi9glBIEJZs/Moezv5AoMQyW0J
91HhpI2p52VkCmV6ayOVouAI3TOM7u+bhDf2ommGHOLcOR7Ti468WS5xOCmnAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUAEO5LhsotPkez3sObywvSDT2PhcwHwYDVR0j
BBgwFoAU9cyRV4gR/il5DH8PAQTsqx0JdaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hRZGVlVm1leFJFTGJnc1BxWldDRTd2UEg5ZW9LMzNyV0t3RWMzRHRV
NmgvMC9GNUNDOTE1Nzg4MTFGRTI5NzkwQzdGMEYwMTA0RUNBQjFEMDk3NUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y1Q0M5MTU3ODgxMUZFMjk3
OTBDN0YwRjAxMDRFQ0FCMUQwOTc1QTMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIUWRlZVZtZXhSRUxiZ3NQcVpXQ0U3dlBIOWVvSzMzcldLd0VjM0R0VTZoLzAv
MzIzODMwMzQzYTM5MzIzMDNhMzQzMDMwMzAzYTNhMmYzMzM0MmQzMzM0MjAzZDNl
MjAzMjM2MzMzMDM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgYoBAkgQDANBgkqhkiG9w0BAQsFAAOC
AQEAgCs8QINdTBd/vCUrM5I8PJ+Qh91udNyO4aTAjMt5MiU1i0YpcPUpgX9yajaq
l8qcDL+B1Kb69AHreAfcw3VJd27oJr4VIdsbyrlg0WeN9BAsd2x1gyNnJ/WEDh21
NWOsQTFsxOPBzrp0SfIZjn66rLVBnYjGZwJJw1mY4YXl9o8uU23sVkpcAHq6IK+1
sDWShle6TA6l30KL5TJN3nj9ET8DXI5NCdp/tcn39dRW/R2O8dmXUhhBr6snqxQr
Tns9lYJ9ujOqoKRU/wN2sLB5Kdtf/jIZrS+kQClz0i3OLoB3Uz3XjyM4OLqUygYz
8BR72KSKDzveZjEjzqSHBOgRYg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:37 2025 by rpki-client