Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a356330303a3a2f33392d3339203d3e20323633303533.roa
File:                     323830343a3932303a356330303a3a2f33392d3339203d3e20323633303533.roa (raw, json)
Hash identifier:          fA5wWSFfbIspWYOJ8qHNAHMY4vkpfPcjYZMRGV89U5g=
Subject key identifier:   C6:96:CD:6D:72:DB:A9:E3:48:56:6C:61:A1:6C:3A:72:FF:3F:37:33
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       4F8F07DAAEE83CD22A0722E157988D02350BE524
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a356330303a3a2f33392d3339203d3e20323633303533.roa
Signing time:             Thu 03 Feb 2022 15:43:01 +0000
ROA not before:           Thu 03 Feb 2022 15:38:01 +0000
ROA not after:            Thu 02 Feb 2023 15:43:01 +0000
asID:                     263053
IP address blocks:        2804:920:5c00::/39 maxlen: 39
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:8f:07:da:ae:e8:3c:d2:2a:07:22:e1:57:98:8d:02:35:0b:e5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Feb  3 15:38:01 2022 GMT
            Not After : Feb  2 15:43:01 2023 GMT
        Subject: CN=C696CD6D72DBA9E348566C61A16C3A72FF3F3733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:25:ef:e5:e1:57:d8:08:a1:87:7d:57:2d:6f:
                    7b:94:b7:9a:e7:a9:19:87:b4:3f:70:b4:a3:d9:7a:
                    72:9a:01:87:84:52:f0:32:76:6b:97:fd:d3:a3:42:
                    a1:1c:b8:8d:c1:a2:c1:37:43:d1:3e:d5:f8:96:97:
                    f7:a7:49:db:aa:54:b2:2f:09:a1:ca:2b:1e:00:82:
                    83:4c:27:53:97:71:ee:f7:de:6c:d2:90:11:02:42:
                    de:af:58:6d:78:3c:05:e3:b6:70:db:1f:67:9a:7b:
                    65:42:42:ca:95:ca:99:1b:d6:6b:b2:34:f6:af:ee:
                    70:4b:73:2f:d3:8e:7b:8c:82:18:a5:47:34:b3:62:
                    ba:cc:c4:64:c7:29:ef:eb:99:fc:05:bc:91:ae:55:
                    0a:0b:5b:ac:d8:e5:93:79:48:5a:86:95:3b:98:f4:
                    56:88:a9:b1:e4:a3:9c:ee:66:8a:3f:d7:82:29:fc:
                    7f:58:4e:54:f3:4c:60:60:28:69:fc:cb:07:cc:8c:
                    b9:3f:7c:86:3a:9f:dc:b9:c3:4f:32:7b:13:00:fa:
                    17:8e:b9:3e:14:e9:dc:77:ee:61:b3:db:e4:e5:4b:
                    92:d4:b4:80:fc:7a:1b:1f:fb:aa:8c:aa:0d:11:76:
                    77:44:79:46:c4:2e:4b:c8:4c:e0:d2:b6:9a:df:fd:
                    04:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:96:CD:6D:72:DB:A9:E3:48:56:6C:61:A1:6C:3A:72:FF:3F:37:33
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a356330303a3a2f33392d3339203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920:5c00::/39

    Signature Algorithm: sha256WithRSAEncryption
         31:4d:59:e4:c6:af:50:ef:f9:38:f0:e1:99:cd:8e:f7:6e:8b:
         ad:56:2a:be:ae:9a:16:59:03:2a:70:f3:6e:81:f4:38:68:9d:
         36:30:9e:fb:e4:99:1a:31:7c:69:92:c6:78:6e:20:6d:08:e2:
         58:76:60:4c:17:cd:cb:b1:9f:f1:2a:ff:97:02:70:82:0d:0d:
         f8:54:a9:9c:49:cd:41:8e:80:39:cc:8e:76:b7:01:a1:2b:13:
         50:89:d2:42:3e:75:4f:79:cb:94:f5:d0:dc:c9:16:3b:95:de:
         2e:cf:3e:35:60:b8:2e:8a:3a:23:2f:1c:d0:cf:ce:ee:5b:6e:
         4d:8c:ec:45:9a:fa:d6:5d:de:ff:48:0d:1d:e6:7a:de:c2:b6:
         88:8b:b4:80:c6:2b:dd:a8:2c:c8:c9:c0:b0:5c:f0:02:88:50:
         3e:73:2d:c9:e1:27:d4:e1:e8:67:a0:fa:5d:2b:ad:15:19:7a:
         6c:eb:d9:f5:f2:b1:b0:11:5e:1c:96:23:da:bd:8b:85:29:33:
         d9:1a:b4:35:4b:89:c7:51:9f:45:df:36:9a:67:15:44:70:9e:
         36:8a:d5:31:f8:7f:22:09:2c:27:e4:23:5b:2b:73:54:5e:f7:
         9c:6b:cf:06:be:f7:7c:12:50:74:c1:61:4d:c5:7e:d1:42:16:
         66:4f:12:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:09:50 2025 by rpki-client