Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a353030303a3a2f33392d3339203d3e20323633303533.roa
File:                     323830343a3932303a353030303a3a2f33392d3339203d3e20323633303533.roa (raw, json)
Hash identifier:          /+Kmw7+bOtEPtXFvBRMR+5m+iGuRMIS7pSKuJ0aOQns=
Subject key identifier:   4A:DB:9D:AB:C1:23:B0:B6:AE:F0:F8:38:84:65:AA:E2:41:CD:B3:0F
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       6C1266635B8160C1917D318E6F6B92771C2D199E
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a353030303a3a2f33392d3339203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:03 +0000
ROA not before:           Fri 06 Jan 2023 21:55:03 +0000
ROA not after:            Fri 05 Jan 2024 22:00:03 +0000
asID:                     263053
IP address blocks:        2804:920:5000::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:12:66:63:5b:81:60:c1:91:7d:31:8e:6f:6b:92:77:1c:2d:19:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:03 2023 GMT
            Not After : Jan  5 22:00:03 2024 GMT
        Subject: CN=4ADB9DABC123B0B6AEF0F8388465AAE241CDB30F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:b9:a3:d1:53:c2:c3:ee:20:b0:96:7f:31:
                    41:be:ee:03:e2:62:bb:2f:bd:cf:5f:b7:dc:26:95:
                    91:e9:2a:67:fe:a6:5c:d6:1b:ad:83:49:1b:b1:87:
                    2c:50:f2:eb:ff:fa:14:f9:48:42:59:bb:44:ef:e6:
                    4a:69:f3:9e:0a:71:43:40:4a:ca:24:09:18:d3:26:
                    67:9b:4c:89:13:9c:83:cd:90:2c:b7:ef:b7:45:bb:
                    38:bd:47:d4:ae:0b:ff:8a:3b:61:f3:6a:c6:ed:e6:
                    e7:94:6d:f2:59:55:42:6b:de:4a:61:3f:c7:10:62:
                    25:9c:36:fc:bd:2d:2d:f4:94:15:7e:52:77:d8:49:
                    99:22:cf:38:fe:63:c8:b4:06:82:0f:ef:ad:86:85:
                    eb:59:cb:46:a0:07:24:b4:15:e9:17:6c:36:0d:7a:
                    47:15:6e:30:2f:0e:71:d2:79:b8:08:21:50:24:78:
                    22:5b:76:dd:ed:e5:04:d8:6f:dd:d5:5f:43:aa:4d:
                    b6:37:54:5c:b9:8a:f3:16:41:6d:db:8f:37:8b:6a:
                    68:69:4e:31:93:d5:0f:9f:2c:f5:10:79:f7:48:50:
                    e7:f3:61:8e:be:2e:43:8d:8f:fa:3b:18:69:70:e6:
                    4f:87:1c:fa:73:07:fa:d8:6b:8f:0c:81:1c:12:44:
                    98:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DB:9D:AB:C1:23:B0:B6:AE:F0:F8:38:84:65:AA:E2:41:CD:B3:0F
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a353030303a3a2f33392d3339203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920:5000::/39

    Signature Algorithm: sha256WithRSAEncryption
         04:00:06:6a:1f:2f:40:61:5d:4d:f9:16:11:93:50:61:53:3a:
         62:e9:f5:7b:3f:ff:98:51:1e:58:8e:9d:d3:9d:6a:35:29:ec:
         c0:1e:a4:55:89:1d:77:51:dd:4c:70:00:cc:d9:75:bb:b1:a4:
         fd:2a:b8:93:d2:b4:16:a1:26:72:c8:d6:be:c5:97:0d:88:09:
         96:ce:8d:b9:cc:bb:8d:8b:d5:65:9e:05:84:f7:e5:fd:30:48:
         6f:7e:ab:d0:e4:00:f8:41:52:43:b2:87:10:80:2d:e4:b1:dd:
         c2:ab:8b:d7:3d:95:06:1f:44:56:79:f4:55:55:6c:90:4f:6b:
         16:00:3c:22:ee:0f:d7:76:42:75:98:67:53:32:3e:19:61:98:
         68:67:82:60:04:4a:f1:35:ee:7c:a6:fc:77:72:45:00:90:a0:
         0a:ab:97:3b:8a:27:19:61:71:0b:f8:fa:9b:21:fa:90:5b:2d:
         a1:45:46:76:a3:57:c8:8d:72:c9:20:9a:1b:8f:14:20:6a:86:
         f1:17:7f:dc:18:b8:70:a8:41:d2:20:37:c3:2e:83:7f:14:3f:
         4c:04:2d:0e:a1:9b:bd:c7:29:8b:a4:a5:35:8c:8d:c4:6a:f8:
         00:60:c6:09:07:23:a7:92:0b:63:07:8b:4d:7a:d5:b0:f0:0e:
         c0:00:b7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:46 2025 by rpki-client