Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a3a2f33362d3336203d3e20323633303533.roa
File:                     323830343a3932303a3a2f33362d3336203d3e20323633303533.roa (raw, json)
Hash identifier:          oA2NQPfDzFEZOvIBjXvdwb1K6pL+zAiEy0Dllo4JLdU=
Subject key identifier:   26:A6:8E:3E:2E:30:60:1C:AB:5A:E8:E0:42:B8:D6:22:22:34:B2:95
Certificate issuer:       /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial:       2B91FBC4514F4530A66B04F541B0B0ED56DB8638
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a3a2f33362d3336203d3e20323633303533.roa
Signing time:             Fri 06 Jan 2023 22:00:00 +0000
ROA not before:           Fri 06 Jan 2023 21:55:00 +0000
ROA not after:            Fri 05 Jan 2024 22:00:00 +0000
asID:                     263053
IP address blocks:        2804:920::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:91:fb:c4:51:4f:45:30:a6:6b:04:f5:41:b0:b0:ed:56:db:86:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
        Validity
            Not Before: Jan  6 21:55:00 2023 GMT
            Not After : Jan  5 22:00:00 2024 GMT
        Subject: CN=26A68E3E2E30601CAB5AE8E042B8D6222234B295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:da:fb:0e:92:f7:30:d2:d3:bf:92:11:a4:38:
                    3e:4e:98:84:70:80:5f:e8:dd:00:f5:e7:a9:61:62:
                    b8:d3:fd:65:68:f1:f2:0c:77:b0:91:35:64:d3:cc:
                    ed:93:bc:57:de:5a:49:85:79:69:f0:36:0a:bd:9d:
                    1a:60:05:ff:41:5a:b4:2f:07:85:85:e5:d0:19:ab:
                    d1:f8:13:71:51:7a:3e:83:21:65:9d:c4:8c:53:d0:
                    31:9a:c5:94:6f:e7:d5:a0:5f:e3:18:13:fc:bf:e7:
                    2b:52:bd:df:e1:3e:5a:29:02:2f:32:4e:ba:e8:16:
                    1b:2f:d7:2b:15:40:f4:55:f2:0c:b7:59:43:be:c1:
                    1a:c2:c8:f8:7d:11:9f:85:ff:ac:b7:4c:31:4c:1e:
                    2b:08:d5:6c:ad:a9:90:9d:98:27:a1:6c:d6:5e:8d:
                    ef:a5:98:38:9b:9e:a0:95:96:c4:ab:04:1a:9a:f9:
                    9f:94:79:e7:b2:ef:cd:7f:d2:15:e7:e3:ce:6e:ce:
                    db:c8:cb:e0:81:d8:64:c2:74:9a:b8:40:7d:a6:9c:
                    95:e6:26:66:ea:50:1c:fd:4a:49:1b:05:21:11:26:
                    5b:6e:4c:a9:2b:1a:24:31:23:bd:52:2f:e0:c4:f7:
                    ac:32:08:bc:9e:ac:2b:1c:12:01:b7:14:02:ab:f4:
                    c9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A6:8E:3E:2E:30:60:1C:AB:5A:E8:E0:42:B8:D6:22:22:34:B2:95
            X509v3 Authority Key Identifier:
                keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a3a2f33362d3336203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920::/36

    Signature Algorithm: sha256WithRSAEncryption
         4a:9f:0f:34:e2:6a:d4:89:df:f1:9a:de:68:0a:1d:1a:22:9b:
         42:a6:b6:7e:46:b7:ae:24:b2:0a:5d:4f:53:79:dc:9e:d0:0e:
         a9:de:72:1d:ce:4b:5b:8f:ca:f7:de:64:56:aa:67:aa:fa:06:
         d7:80:46:b0:00:cc:9a:e9:7d:24:35:40:87:ec:66:68:e0:96:
         8b:fa:95:f7:2b:29:fe:2c:ca:c0:2e:73:57:72:71:56:b8:00:
         19:13:7d:73:2b:8a:01:2a:1f:f5:b5:ed:5f:58:d7:5a:0b:59:
         be:1e:22:a9:ea:80:b0:49:15:3c:cd:2b:35:83:42:34:e5:65:
         fa:ea:b0:34:b3:ce:59:bb:45:82:1f:88:14:44:ba:81:e2:e9:
         72:df:af:d6:a9:66:63:0f:5e:9e:f5:2e:38:3a:23:20:7f:56:
         d9:c1:6c:41:d1:4f:83:77:02:f6:fa:dd:b0:56:a8:0a:96:ad:
         15:5a:0c:34:26:82:a8:e6:7e:80:9b:09:04:93:e6:6a:68:f9:
         1c:b4:3c:cd:bc:28:7b:81:d8:e1:be:26:da:46:7e:e6:3a:09:
         14:09:28:7c:1a:0f:07:7e:64:d9:0a:5f:08:e3:f2:22:b1:ae:
         77:cb:e0:da:4f:3d:82:25:15:6b:c2:be:79:ea:35:60:76:22:
         e5:38:f5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org