Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a3a2f33322d3336203d3e20323633303533.roa
File:                     323830343a3932303a3a2f33322d3336203d3e20323633303533.roa (raw, json)
Hash identifier:          HcpWhbjMbQD3S0b4O2JixEcWvScA5ly4Tf603YovhXY=
Subject key identifier:   23:FD:61:63:EA:28:ED:8D:0B:C2:31:9D:04:04:94:18:41:60:64:61
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       6EAACE0E0CB8ED9D02A11B37015E5B4BF2B1C35E
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a3a2f33322d3336203d3e20323633303533.roa
Signing time:             Thu 03 Feb 2022 13:51:22 +0000
ROA not before:           Thu 03 Feb 2022 13:46:22 +0000
ROA not after:            Thu 02 Feb 2023 13:51:22 +0000
asID:                     263053
IP address blocks:        2804:920::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:aa:ce:0e:0c:b8:ed:9d:02:a1:1b:37:01:5e:5b:4b:f2:b1:c3:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Feb  3 13:46:22 2022 GMT
            Not After : Feb  2 13:51:22 2023 GMT
        Subject: CN=23FD6163EA28ED8D0BC2319D0404941841606461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1f:77:5a:a4:ba:d2:4b:13:93:ea:9b:c4:48:
                    d5:bb:6f:72:00:d1:09:3c:51:eb:79:c4:4c:7e:00:
                    e4:47:c2:9b:4f:4d:e1:36:75:88:24:4e:73:5b:53:
                    d9:29:cf:b3:b8:d5:59:2c:0f:7b:58:54:a4:e2:d1:
                    42:17:84:ea:9c:87:ea:f5:d0:53:73:dc:e8:26:28:
                    d8:64:37:9a:7e:e3:79:5a:d0:53:31:9d:56:ad:fd:
                    28:f7:4a:2f:a2:68:23:8e:80:5f:a9:ef:75:0d:33:
                    c3:0b:3f:8a:5b:5a:41:66:71:05:b4:25:28:5d:06:
                    58:13:d7:af:27:ca:e6:83:b7:74:63:88:2d:87:31:
                    df:1c:01:ac:b4:ed:d1:f3:a6:5a:ca:3b:09:c5:24:
                    79:1f:8b:aa:f5:fb:35:29:3c:d7:43:de:fc:46:d3:
                    47:21:e7:4b:b6:54:6a:24:af:ce:5d:e3:12:e9:46:
                    04:6d:31:18:98:e9:38:52:39:ae:ee:e5:df:5b:4a:
                    c3:66:f7:4a:ef:91:54:01:c1:69:43:e0:03:af:ce:
                    a5:ac:66:4b:3a:5b:ef:cb:16:e3:32:ce:11:da:87:
                    a6:b0:ce:24:1c:33:f0:28:06:51:f5:69:84:a5:7e:
                    56:cd:71:01:c9:12:2b:5e:16:5a:4c:e6:6d:09:78:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FD:61:63:EA:28:ED:8D:0B:C2:31:9D:04:04:94:18:41:60:64:61
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a3a2f33322d3336203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:5c:af:4d:5a:8c:e8:9a:ca:16:67:6b:49:d5:36:0d:ed:62:
         88:4e:f4:6c:02:20:b1:24:99:b3:3b:32:3f:35:91:f3:82:21:
         b2:4d:06:f9:94:1e:b3:2b:a0:40:59:a3:70:3f:20:26:3d:e0:
         36:70:28:20:88:97:eb:e2:44:e4:10:b9:33:72:f9:00:e3:29:
         00:e7:27:f0:07:dd:34:f6:4a:c5:b0:3e:0a:36:88:62:fc:c2:
         a3:26:8b:5c:bf:c8:c4:80:f0:76:3a:44:3a:d5:b3:70:c9:4c:
         7e:22:9d:e3:0a:26:cd:4a:5c:7c:da:4c:49:c6:6b:01:84:83:
         65:19:f8:8f:57:e7:62:f5:f7:cc:0d:bf:00:41:61:0d:b5:0c:
         97:81:f8:16:f7:e3:8f:48:e3:ed:6a:f4:7e:08:68:81:0e:32:
         4e:61:81:d4:d2:02:02:e0:c2:66:b4:e3:99:87:b6:b3:c9:0d:
         63:39:8b:c3:28:a7:c6:30:a6:3d:72:42:36:e5:8f:06:06:14:
         d8:ed:83:85:6a:9c:a1:03:ed:c2:2b:fd:fc:03:ac:10:2e:6d:
         3b:51:d1:e1:31:08:6f:71:66:c8:ec:f1:e0:93:52:4f:6b:ad:
         7f:02:f2:77:4f:1b:c1:d1:b6:40:b6:f6:79:b8:d6:b5:84:7f:
         e2:fa:e6:d3
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUbqrODgy47Z0CoRs3AV5bS/Kxw14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDQzkxNTc4ODExRkUyOTc5MEM3RjBGMDEwNEVDQUIx
RDA5NzVBMzAeFw0yMjAyMDMxMzQ2MjJaFw0yMzAyMDIxMzUxMjJaMDMxMTAvBgNV
BAMTKDIzRkQ2MTYzRUEyOEVEOEQwQkMyMzE5RDA0MDQ5NDE4NDE2MDY0NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtH3dapLrSSxOT6pvESNW7b3IA
0Qk8Uet5xEx+AORHwptPTeE2dYgkTnNbU9kpz7O41VksD3tYVKTi0UIXhOqch+r1
0FNz3OgmKNhkN5p+43la0FMxnVat/Sj3Si+iaCOOgF+p73UNM8MLP4pbWkFmcQW0
JShdBlgT168nyuaDt3RjiC2HMd8cAay07dHzplrKOwnFJHkfi6r1+zUpPNdD3vxG
00ch50u2VGokr85d4xLpRgRtMRiY6ThSOa7u5d9bSsNm90rvkVQBwWlD4AOvzqWs
Zks6W+/LFuMyzhHah6awziQcM/AoBlH1aYSlflbNcQHJEiteFlpM5m0JeHsLAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUI/1hY+oo7Y0LwjGdBASUGEFgZGEwHwYDVR0j
BBgwFoAU9cyRV4gR/il5DH8PAQTsqx0JdaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hRZGVlVm1leFJFTGJnc1BxWldDRTd2UEg5ZW9LMzNyV0t3RWMzRHRV
NmgvMC9GNUNDOTE1Nzg4MTFGRTI5NzkwQzdGMEYwMTA0RUNBQjFEMDk3NUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y1Q0M5MTU3ODgxMUZFMjk3
OTBDN0YwRjAxMDRFQ0FCMUQwOTc1QTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIUWRlZVZtZXhSRUxiZ3NQcVpXQ0U3dlBIOWVvSzMzcldLd0VjM0R0VTZoLzAv
MzIzODMwMzQzYTM5MzIzMDNhM2EyZjMzMzIyZDMzMzYyMDNkM2UyMDMyMzYzMzMw
MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB
/wQRMA8wDQQCAAIwBwMFACgECSAwDQYJKoZIhvcNAQELBQADggEBAAdcr01ajOia
yhZna0nVNg3tYohO9GwCILEkmbM7Mj81kfOCIbJNBvmUHrMroEBZo3A/ICY94DZw
KCCIl+viROQQuTNy+QDjKQDnJ/AH3TT2SsWwPgo2iGL8wqMmi1y/yMSA8HY6RDrV
s3DJTH4ineMKJs1KXHzaTEnGawGEg2UZ+I9X52L198wNvwBBYQ21DJeB+Bb3449I
4+1q9H4IaIEOMk5hgdTSAgLgwma045mHtrPJDWM5i8Mop8Ywpj1yQjbljwYGFNjt
g4VqnKED7cIr/fwDrBAubTtR0eExCG9xZsjs8eCTUk9rrX8C8ndPG8HRtkC29nm4
1rWEf+L65tM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org