Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a356130303a3a2f33392d3339203d3e20323633303533.roa
File:                     323830343a3932303a356130303a3a2f33392d3339203d3e20323633303533.roa (raw, json)
Hash identifier:          o0SOHkLTsPEC/7aLuEAin+XyQceFMLP1YZk1Z9HzywE=
Subject key identifier:   A2:D0:76:CA:70:A3:DB:F6:7E:13:11:51:1F:F3:FF:FE:49:FC:5E:96
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       440649CB95723F83E27E26F7C5C8E8AF0B8734BB
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a356130303a3a2f33392d3339203d3e20323633303533.roa
Signing time:             Thu 03 Feb 2022 15:43:00 +0000
ROA not before:           Thu 03 Feb 2022 15:38:00 +0000
ROA not after:            Thu 02 Feb 2023 15:43:00 +0000
asID:                     263053
IP address blocks:        2804:920:5a00::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:06:49:cb:95:72:3f:83:e2:7e:26:f7:c5:c8:e8:af:0b:87:34:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Feb  3 15:38:00 2022 GMT
            Not After : Feb  2 15:43:00 2023 GMT
        Subject: CN=A2D076CA70A3DBF67E1311511FF3FFFE49FC5E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4f:21:2c:a6:c8:88:bd:27:57:48:91:5a:d9:
                    63:26:b4:31:b5:66:57:7e:f6:1e:7a:2a:48:a8:c1:
                    ec:f1:9f:80:86:ec:65:40:02:24:26:0c:a2:62:bf:
                    ac:24:4d:58:f3:f5:db:13:e5:94:b3:35:17:78:da:
                    4c:4e:5e:b0:cc:a3:90:cf:0a:a8:6c:2f:f2:03:07:
                    8c:e4:c5:df:d7:50:b0:61:b8:17:ac:a0:a1:8d:99:
                    ff:7c:e6:db:31:eb:ed:24:6e:66:16:8b:44:fa:f2:
                    61:e1:e4:b7:d3:51:05:96:cf:7d:15:7e:43:d5:37:
                    0e:73:47:d5:37:07:44:a8:1f:0a:20:db:62:53:e5:
                    de:98:11:1d:0b:36:29:ce:bf:86:bf:30:32:4f:bb:
                    11:f6:9b:90:af:35:58:59:08:97:be:7d:d9:d9:65:
                    ea:a4:3f:1c:39:47:6a:dc:f5:0f:a8:16:d8:b9:53:
                    ec:c4:80:e7:20:ac:d9:b8:e3:f0:fb:73:90:82:78:
                    07:2b:90:50:15:55:98:54:57:8f:d4:fb:fd:d4:ad:
                    df:5b:bc:de:87:df:2f:e7:48:48:a8:6e:6c:7c:6f:
                    04:fd:fb:a7:93:76:29:71:b0:35:44:e2:5e:92:d3:
                    f4:a6:2a:12:25:ba:33:42:0b:99:55:df:a4:56:da:
                    80:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D0:76:CA:70:A3:DB:F6:7E:13:11:51:1F:F3:FF:FE:49:FC:5E:96
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a356130303a3a2f33392d3339203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920:5a00::/39

    Signature Algorithm: sha256WithRSAEncryption
         53:4a:80:22:95:68:d0:d0:7d:eb:2d:72:4d:d5:82:a1:95:9c:
         2b:ae:67:76:35:9f:96:76:9a:e0:25:de:e0:02:4f:fd:95:c8:
         d0:a4:52:e3:2a:30:ff:fc:12:a9:29:c4:cd:9d:c1:d6:b0:37:
         a9:56:b2:6f:4b:0d:35:7c:59:48:33:21:2d:bd:f1:44:43:07:
         60:55:9a:9c:44:08:2d:07:5c:d1:01:ee:96:88:33:8b:ca:b1:
         7f:72:df:0a:d2:79:5d:a6:59:30:ca:8a:ba:29:f4:ad:4a:49:
         d4:c7:43:4e:f1:04:78:63:70:18:4e:20:f3:79:04:72:92:ed:
         f9:4e:c3:05:fe:1e:ad:4d:b7:00:7b:7d:a7:e8:01:c9:72:32:
         ba:97:c5:13:58:c0:72:58:e0:07:3b:df:6d:c0:c9:27:ec:ca:
         27:62:22:ec:7a:07:c7:79:3f:c0:ca:3b:65:ff:b1:62:1e:24:
         1d:58:92:1c:7a:44:1b:08:d8:8c:9b:9e:de:92:b1:d1:c0:36:
         fa:c9:2f:15:03:2d:3e:56:12:d7:66:17:21:c6:ff:59:40:af:
         53:be:22:f2:dd:45:39:d9:28:56:0b:4a:d7:ab:91:9d:66:a0:
         2e:17:d8:51:54:dc:9e:21:4f:bf:9f:ad:8e:d2:49:09:7f:65:
         2d:bc:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org