Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a383030303a3a2f33332d3333203d3e20323633303533.roa
File:                     323830343a3932303a383030303a3a2f33332d3333203d3e20323633303533.roa (raw, json)
Hash identifier:          S5lenrnaSZbi4ghoPeZ40DqOQilucdrJJh6gy1z4GRM=
Subject key identifier:   7F:50:BC:CE:10:AC:74:5B:0F:E4:02:BC:B4:64:BC:6D:F8:04:D0:0E
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       4CDF6FA20A9DF4F092C4FD5D27C27F3B37ED0CF8
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a383030303a3a2f33332d3333203d3e20323633303533.roa
Signing time:             Fri 28 Jul 2023 18:00:26 +0000
ROA not before:           Fri 28 Jul 2023 17:55:26 +0000
ROA not after:            Fri 26 Jul 2024 18:00:26 +0000
asID:                     263053
IP address blocks:        2804:920:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:df:6f:a2:0a:9d:f4:f0:92:c4:fd:5d:27:c2:7f:3b:37:ed:0c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jul 28 17:55:26 2023 GMT
            Not After : Jul 26 18:00:26 2024 GMT
        Subject: CN=7F50BCCE10AC745B0FE402BCB464BC6DF804D00E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:98:e9:b1:7d:2b:a5:bc:33:b0:f2:c6:9d:ff:
                    b7:b7:94:72:48:44:0e:37:00:b3:82:33:c5:2b:5f:
                    63:50:b6:41:fe:b6:b3:87:cb:ec:8b:1c:29:cd:7b:
                    f8:4d:c9:78:8a:00:f0:61:4f:16:e2:e0:bd:1b:c7:
                    85:a1:06:89:1d:66:de:b6:07:ce:56:00:7d:14:c3:
                    89:f7:a5:e8:44:98:a8:2f:88:79:bb:ed:fc:ee:be:
                    96:13:9d:50:9e:fa:d7:c2:ba:16:73:84:4c:0d:13:
                    a0:ec:01:a1:de:db:12:39:bf:ed:c7:ac:d4:66:39:
                    f7:a6:19:36:58:b4:c6:a6:f3:09:6d:17:4d:26:84:
                    3d:70:99:da:af:db:4d:45:e6:f1:0e:55:59:df:77:
                    f9:b4:cf:0b:04:09:5a:f8:c6:35:27:cd:0d:9e:3f:
                    cf:1e:fe:fd:7a:f0:0d:2d:65:e8:2f:9f:e2:77:62:
                    01:3d:53:96:97:4b:df:b9:e3:91:ff:92:c8:a8:d5:
                    b9:d2:43:0e:00:c1:36:81:7b:bd:07:ee:f5:a8:4d:
                    5b:15:b4:e5:a9:78:87:75:92:74:2c:40:58:fd:f0:
                    0d:3d:68:6f:ae:bb:d3:c5:c4:8f:c0:8b:68:8c:d4:
                    f3:81:07:71:76:be:ed:f0:e3:1d:cc:d4:b0:c0:b3:
                    b3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:50:BC:CE:10:AC:74:5B:0F:E4:02:BC:B4:64:BC:6D:F8:04:D0:0E
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a383030303a3a2f33332d3333203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8f:bb:9a:4d:09:bb:d4:cb:40:5c:e9:d3:e3:56:2c:cb:3b:a7:
         6a:0b:e4:01:c1:7e:5f:d1:9f:96:7b:64:8b:02:de:c1:d3:4d:
         e1:6a:3b:58:df:14:1d:ec:78:eb:74:86:2b:9e:5f:f4:ed:d9:
         b6:15:88:81:ff:c4:d4:47:ff:10:ea:28:b1:c3:ca:cd:6f:03:
         c8:a6:0c:67:5e:14:ad:fa:cc:b0:c7:1a:18:af:be:83:92:ac:
         18:a8:b8:15:bc:c8:a5:f8:08:7d:50:67:7a:ef:dd:b6:36:68:
         e8:13:05:71:db:f6:9a:25:ed:7d:37:c0:82:ec:07:97:4d:84:
         69:4f:de:77:a3:00:fd:83:86:22:71:57:d9:ea:a5:bb:66:6b:
         8e:68:2b:81:3d:ae:ee:61:ad:25:a5:1e:c6:cf:06:00:75:a9:
         f8:33:39:a1:36:e1:15:4a:6a:26:6c:04:c1:b3:62:89:2c:65:
         6d:c9:2c:5f:5e:c5:50:ea:65:de:4d:c8:f9:25:f2:f4:bc:7f:
         16:f1:d2:d3:60:4a:a5:3a:2c:69:03:c3:0d:2a:f9:6f:7a:a7:
         3a:3d:bd:56:10:51:5f:e9:54:9b:0a:08:6f:bb:ee:cb:87:46:
         7b:7f:9a:7a:73:75:48:e0:9c:66:23:45:7d:85:4d:33:2a:eb:
         69:a6:f1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:56 2025 by rpki-client