Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a383030303a3a2f33342d3334203d3e20323633303533.roa
File:                     323830343a3932303a383030303a3a2f33342d3334203d3e20323633303533.roa (raw, json)
Hash identifier:          uqCnUF8ih463PMTFHCLSdqaUxBObkyS+Beauq/hzIDU=
Subject key identifier:   7C:01:F5:7B:25:49:13:2D:38:03:81:94:19:81:86:55:B1:D4:9B:FF
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       39CAEF7634A4142EDD55035FBE4A2600E7DC82E3
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a383030303a3a2f33342d3334203d3e20323633303533.roa
Signing time:             Thu 27 Jul 2023 08:12:36 +0000
ROA not before:           Thu 27 Jul 2023 08:07:36 +0000
ROA not after:            Thu 25 Jul 2024 08:12:36 +0000
asID:                     263053
IP address blocks:        2804:920:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ca:ef:76:34:a4:14:2e:dd:55:03:5f:be:4a:26:00:e7:dc:82:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jul 27 08:07:36 2023 GMT
            Not After : Jul 25 08:12:36 2024 GMT
        Subject: CN=7C01F57B2549132D3803819419818655B1D49BFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:38:8d:8b:d5:f0:23:e7:3d:00:51:f2:95:6d:
                    af:cb:d6:e7:a4:0f:9d:a1:d7:2e:15:8b:88:ca:69:
                    d3:9e:cb:53:f6:57:b9:37:97:74:e1:04:1f:2e:21:
                    67:b1:c5:19:78:8e:75:16:08:af:18:b5:ab:34:2e:
                    d4:e8:2d:fb:55:cb:e0:6f:38:62:38:e7:d4:e7:a5:
                    14:11:ef:09:be:b7:a4:14:d5:f0:a4:4d:b7:56:fe:
                    b1:ec:f3:92:18:ae:c4:0d:37:cf:f0:53:70:2c:49:
                    9a:00:f0:a1:6f:08:c1:0a:9a:d1:78:27:e6:06:82:
                    b2:68:e4:b6:0f:a3:a4:d3:5a:28:7b:5f:28:04:69:
                    cc:56:bf:18:64:28:da:d3:10:14:66:20:ec:8a:74:
                    74:f9:64:59:d3:c7:fd:71:6f:12:37:0b:58:74:a2:
                    88:ec:3a:f5:6d:df:16:f6:03:04:0a:19:60:13:5c:
                    68:c1:5c:60:b6:9a:49:99:34:a4:2e:d5:97:f6:d6:
                    5d:27:16:79:0c:1d:bb:63:45:9e:52:97:0a:d3:f1:
                    0e:b3:c2:50:8a:e9:39:5b:29:fa:d0:d3:ff:ef:a8:
                    2f:b6:9e:2e:6c:df:75:a3:68:1f:b4:2d:a4:4e:fc:
                    99:af:db:49:b1:4b:8a:de:cd:45:38:8e:89:ef:09:
                    a1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:01:F5:7B:25:49:13:2D:38:03:81:94:19:81:86:55:B1:D4:9B:FF
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a383030303a3a2f33342d3334203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         2a:af:8e:3c:e4:3b:cb:e5:8d:1e:81:cb:d6:79:72:5b:c4:04:
         2a:49:30:6d:d8:54:08:63:bd:e6:01:1b:98:75:6e:71:69:cc:
         cc:c8:c8:30:d9:a2:8e:8c:b4:70:67:e8:41:e6:a0:55:69:44:
         7a:35:72:94:16:2e:be:89:91:84:31:c9:1f:bc:11:0d:e4:8e:
         79:c2:1f:33:14:8c:b9:67:7a:0e:19:b8:0f:18:81:42:90:63:
         4e:7c:62:5c:a7:d4:bb:17:21:1f:72:60:68:38:a7:e8:07:10:
         56:a5:d7:b3:93:45:e3:47:8c:89:89:a6:86:9d:f3:33:30:7d:
         d6:46:6f:8e:33:31:8d:7a:6d:0a:2f:b6:f1:db:5a:2a:d0:7a:
         5b:84:7b:b2:07:35:25:90:b7:71:39:42:e9:a9:41:24:68:12:
         89:94:1b:78:3b:e2:7e:b9:23:af:fd:f0:15:4b:ec:34:88:e7:
         43:36:a0:9f:ef:be:ad:3b:41:c5:34:ae:ed:86:53:60:e8:7d:
         6c:d6:4e:4d:39:4f:d7:4e:1e:18:ac:1e:2f:e8:b5:18:3f:92:
         3f:66:f3:79:7b:02:1c:a7:ba:8a:b9:85:36:8d:8c:e0:fb:8a:
         0b:1d:50:43:9e:3a:30:ac:c9:1b:d6:50:83:fa:10:e7:5c:b8:
         4c:c3:0e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:12 2025 by rpki-client