Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a3a2f33342d3334203d3e20323633303533.roa
File:                     323830343a3932303a3a2f33342d3334203d3e20323633303533.roa (raw, json)
Hash identifier:          8UFdlsy2BEHsEelfwa+xIq7wRR/rPVVQUZHa1lncSo4=
Subject key identifier:   19:48:3E:8C:3A:0E:08:65:A3:FB:02:18:27:3A:61:79:19:30:63:65
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       2B8898814988981F1917153F911834BA351DB562
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a3a2f33342d3334203d3e20323633303533.roa
Signing time:             Fri 08 Dec 2023 23:00:00 +0000
ROA not before:           Fri 08 Dec 2023 22:55:00 +0000
ROA not after:            Fri 06 Dec 2024 23:00:00 +0000
asID:                     263053
IP address blocks:        2804:920::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:88:98:81:49:88:98:1f:19:17:15:3f:91:18:34:ba:35:1d:b5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Dec  8 22:55:00 2023 GMT
            Not After : Dec  6 23:00:00 2024 GMT
        Subject: CN=19483E8C3A0E0865A3FB0218273A617919306365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a4:c8:78:c9:82:fa:f4:ea:c8:54:29:77:40:
                    3a:ae:40:72:0c:ac:a0:46:a3:22:25:c3:8b:9e:9c:
                    52:29:57:2d:f5:f9:ad:64:b6:7e:3f:7d:4c:c5:9f:
                    63:81:f2:bd:9e:1f:a8:c5:32:2a:eb:ca:eb:7f:d0:
                    9c:05:63:bc:ea:f6:14:10:63:dc:cc:eb:a9:f3:08:
                    62:7a:ff:05:89:bb:9a:64:54:bc:05:84:18:a3:04:
                    e5:be:be:cb:9b:c5:4b:8e:3c:fa:5e:e1:e3:ba:72:
                    15:36:f3:ce:55:a0:a1:fd:8a:d1:91:f0:d5:f4:e0:
                    83:6d:fe:00:7e:7d:b2:46:d8:f2:d1:01:fd:8f:75:
                    78:81:6c:23:07:80:c1:84:c3:aa:70:5b:af:f0:c6:
                    55:57:8f:f1:b0:9a:5f:df:ed:51:1d:33:b4:cc:7c:
                    17:e3:ca:a3:e6:f5:f2:13:14:4f:6e:9a:e7:4b:77:
                    7b:fb:13:ca:e1:49:fd:64:5c:94:a6:00:3b:3b:2f:
                    b8:4c:81:7d:4f:6d:84:48:40:5f:89:e6:a5:4e:27:
                    97:a2:b1:52:ad:1a:26:c9:e0:1c:11:ef:d8:7a:bc:
                    10:49:bd:d2:c7:9f:10:83:b1:21:d8:33:7e:6e:e8:
                    4a:08:8e:95:82:05:ca:40:2e:dd:4f:b2:18:33:60:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:48:3E:8C:3A:0E:08:65:A3:FB:02:18:27:3A:61:79:19:30:63:65
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a3a2f33342d3334203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920::/34

    Signature Algorithm: sha256WithRSAEncryption
         85:bb:b4:e5:c7:24:af:26:6a:10:7b:a4:f7:b1:ea:f2:bb:41:
         96:9f:b4:24:f0:ce:5f:37:51:46:e2:5d:5f:71:09:9b:fe:9e:
         d0:d8:05:d0:a5:ac:1e:76:a0:d6:a9:17:9f:f1:7b:97:66:57:
         a2:fd:30:8b:95:5a:da:c7:62:65:2a:29:fa:87:af:b8:9f:52:
         41:a3:e4:60:4e:07:e2:45:e0:13:d7:6d:4d:1d:7e:38:17:6a:
         87:7e:75:62:91:83:92:6d:5b:df:8b:66:a7:9d:bd:58:98:44:
         a2:2e:58:cf:44:2e:a5:cc:ab:2a:b2:46:92:67:12:f6:f1:25:
         12:b9:b2:58:84:25:d7:23:ce:34:ee:c0:9b:20:aa:b1:1a:81:
         51:8c:94:91:25:05:62:28:c1:20:b0:94:fd:a5:86:74:19:a1:
         cb:18:af:2f:86:84:28:8d:1d:9f:e7:3f:c0:63:8e:0a:f0:48:
         38:01:9d:cc:6d:24:21:e1:04:18:a4:c9:e8:02:87:5e:c6:60:
         1f:bf:89:f1:38:a7:bb:a5:c5:00:65:77:e2:b9:75:c4:09:67:
         34:75:ba:78:1f:e5:a0:3b:64:e7:98:ca:a4:63:e6:c4:11:b4:
         cc:64:40:22:13:79:10:58:bb:bd:f7:c6:35:c8:b6:fa:51:10:
         4c:e7:80:e8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUK4iYgUmImB8ZFxU/kRg0ujUdtWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVDQzkxNTc4ODExRkUyOTc5MEM3RjBGMDEwNEVDQUIx
RDA5NzVBMzAeFw0yMzEyMDgyMjU1MDBaFw0yNDEyMDYyMzAwMDBaMDMxMTAvBgNV
BAMTKDE5NDgzRThDM0EwRTA4NjVBM0ZCMDIxODI3M0E2MTc5MTkzMDYzNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJpMh4yYL69OrIVCl3QDquQHIM
rKBGoyIlw4uenFIpVy31+a1ktn4/fUzFn2OB8r2eH6jFMirryut/0JwFY7zq9hQQ
Y9zM66nzCGJ6/wWJu5pkVLwFhBijBOW+vsubxUuOPPpe4eO6chU2885VoKH9itGR
8NX04INt/gB+fbJG2PLRAf2PdXiBbCMHgMGEw6pwW6/wxlVXj/Gwml/f7VEdM7TM
fBfjyqPm9fITFE9umudLd3v7E8rhSf1kXJSmADs7L7hMgX1PbYRIQF+J5qVOJ5ei
sVKtGibJ4BwR79h6vBBJvdLHnxCDsSHYM35u6EoIjpWCBcpALt1PshgzYE5nAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUGUg+jDoOCGWj+wIYJzpheRkwY2UwHwYDVR0j
BBgwFoAU9cyRV4gR/il5DH8PAQTsqx0JdaMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hRZGVlVm1leFJFTGJnc1BxWldDRTd2UEg5ZW9LMzNyV0t3RWMzRHRV
NmgvMC9GNUNDOTE1Nzg4MTFGRTI5NzkwQzdGMEYwMTA0RUNBQjFEMDk3NUEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y1Q0M5MTU3ODgxMUZFMjk3
OTBDN0YwRjAxMDRFQ0FCMUQwOTc1QTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIUWRlZVZtZXhSRUxiZ3NQcVpXQ0U3dlBIOWVvSzMzcldLd0VjM0R0VTZoLzAv
MzIzODMwMzQzYTM5MzIzMDNhM2EyZjMzMzQyZDMzMzQyMDNkM2UyMDMyMzYzMzMw
MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBigECSAAMA0GCSqGSIb3DQEBCwUAA4IBAQCFu7TlxySv
JmoQe6T3seryu0GWn7Qk8M5fN1FG4l1fcQmb/p7Q2AXQpawedqDWqRef8XuXZlei
/TCLlVrax2JlKin6h6+4n1JBo+RgTgfiReAT121NHX44F2qHfnVikYOSbVvfi2an
nb1YmESiLljPRC6lzKsqskaSZxL28SUSubJYhCXXI8407sCbIKqxGoFRjJSRJQVi
KMEgsJT9pYZ0GaHLGK8vhoQojR2f5z/AY44K8Eg4AZ3MbSQh4QQYpMnoAodexmAf
v4nxOKe7pcUAZXfiuXXECWc0dbp4H+WgO2TnmMqkY+bEEbTMZEAiE3kQWLu998Y1
yLb6URBM54Do
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org