Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a343030303a3a2f33392d3339203d3e20323633303533.roa
File:                     323830343a3932303a343030303a3a2f33392d3339203d3e20323633303533.roa (raw, json)
Hash identifier:          7YuHTW2MNgqL8THHK4JBHWT0DdiaLaJPZwfg7388mX4=
Subject key identifier:   93:57:12:A6:4F:04:5A:70:4E:29:15:57:11:87:2F:8A:00:39:98:00
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       0522E85070CE8F44F1CB4AEB45527EF386E0BE79
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a343030303a3a2f33392d3339203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:05 +0000
ROA not before:           Fri 06 Jan 2023 21:55:05 +0000
ROA not after:            Fri 05 Jan 2024 22:00:05 +0000
asID:                     263053
IP address blocks:        2804:920:4000::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:22:e8:50:70:ce:8f:44:f1:cb:4a:eb:45:52:7e:f3:86:e0:be:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:05 2023 GMT
            Not After : Jan  5 22:00:05 2024 GMT
        Subject: CN=935712A64F045A704E29155711872F8A00399800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:cb:8a:35:53:ab:76:29:1c:2d:31:70:fc:
                    e2:8b:d7:24:b1:16:e0:a4:11:51:72:b5:32:71:98:
                    1e:c0:c0:99:18:bc:7c:ac:4a:e1:f4:a3:6b:be:c8:
                    8e:d8:36:d7:87:51:0e:83:a4:55:7e:ac:7e:d3:bc:
                    3a:e6:c0:1a:c1:39:0d:79:6f:ae:33:77:a1:ed:0e:
                    ac:db:8c:0f:4f:de:94:3c:f1:d9:76:7b:04:3c:7b:
                    f3:ae:fc:e2:4d:16:48:3e:54:be:89:4c:e7:24:11:
                    17:0b:d6:02:06:ae:82:40:65:06:e3:1f:72:ae:95:
                    50:95:18:5d:12:1c:b7:f6:2d:ba:aa:7e:88:11:ec:
                    b0:63:24:f8:d0:ac:3e:ba:5a:c5:8e:21:22:bd:b5:
                    33:a4:c1:17:ab:b9:fd:d9:4c:22:54:e7:b5:5e:70:
                    34:6d:e1:f3:f1:b3:66:fb:51:16:d5:db:1a:a6:ed:
                    53:79:3a:2d:48:41:3c:e3:8d:8b:74:75:19:53:f6:
                    eb:a3:d3:77:02:bc:1f:0c:75:7a:93:82:3f:0e:d5:
                    a0:bc:5d:af:bf:23:4e:d5:03:71:70:0a:63:df:19:
                    83:66:70:a4:ee:fe:67:d1:b5:55:73:4a:0c:19:0b:
                    62:df:ba:63:91:94:b2:af:43:ea:ef:ad:fc:d8:7e:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:57:12:A6:4F:04:5A:70:4E:29:15:57:11:87:2F:8A:00:39:98:00
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a343030303a3a2f33392d3339203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         ae:e3:fd:47:a2:cd:10:36:79:0a:c2:8d:32:e3:60:d2:d0:d4:
         82:e1:a0:f2:48:b7:bf:c8:42:14:73:10:fc:ab:c2:53:92:ad:
         26:a8:80:e4:88:ad:1b:5d:d4:9d:78:e4:c6:ea:48:9b:c8:32:
         6e:ac:15:fb:88:6c:00:b4:60:88:e7:05:6a:df:73:f1:93:07:
         2e:12:20:1e:ac:3e:a4:21:45:01:56:e4:12:77:c8:0b:ae:ed:
         c9:cc:55:3d:68:32:14:8e:c9:a5:29:35:2a:c4:49:09:67:fa:
         b5:59:c4:17:87:8a:fc:55:3a:f6:83:0d:33:c0:aa:0e:73:a7:
         6a:67:d2:e6:03:e2:9c:1a:87:c7:95:33:93:74:70:32:a1:8e:
         21:ae:61:5a:ca:e3:cb:f7:6f:03:34:0e:9f:6c:27:b7:ac:3f:
         b3:bc:f4:6f:cc:b3:f5:79:08:d9:84:36:50:da:a2:a5:54:6f:
         88:75:19:64:49:aa:8e:13:0d:75:3f:c3:65:cb:0f:f6:49:a0:
         88:36:18:61:b3:e3:76:79:05:ae:93:d1:82:6f:ce:72:59:4f:
         98:8c:fa:d1:99:cb:82:76:de:6f:6a:4e:33:13:95:54:d7:bb:
         90:9b:01:b5:44:f0:27:25:07:5f:fb:53:49:26:cb:3b:3e:a4:
         14:44:3e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:09:06 2025 by rpki-client