Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a383030303a3a2f33332d3339203d3e20323633303533.roa
File:                     323830343a3932303a383030303a3a2f33332d3339203d3e20323633303533.roa (raw, json)
Hash identifier:          Z1/c7RHEQaU3k072lnS5mnlsVvUs2YSobxH36eC9lZU=
Subject key identifier:   86:25:52:F5:61:41:16:2C:80:6F:6F:1E:8A:7E:0C:DB:06:4B:ED:F4
Certificate issuer:       /CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
Certificate serial:       654BA623DB60BC08B3FA60E8FB15F687B02C2EC2
Authority key identifier: 57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a383030303a3a2f33332d3339203d3e20323633303533.roa
Signing time:             Wed 03 Apr 2024 18:30:51 +0000
ROA not before:           Wed 03 Apr 2024 18:25:51 +0000
ROA not after:            Wed 02 Apr 2025 18:30:51 +0000
asID:                     263053
IP address blocks:        2804:920:8000::/33 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4b:a6:23:db:60:bc:08:b3:fa:60:e8:fb:15:f6:87:b0:2c:2e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
        Validity
            Not Before: Apr  3 18:25:51 2024 GMT
            Not After : Apr  2 18:30:51 2025 GMT
        Subject: CN=862552F56141162C806F6F1E8A7E0CDB064BEDF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c8:14:33:b8:c1:33:68:b2:d3:ed:ca:f1:90:
                    5a:d2:57:90:4d:ad:84:4a:53:47:d0:bd:20:da:30:
                    35:74:29:f0:65:84:b6:bb:d3:45:00:f4:08:41:7c:
                    16:3e:1f:18:a5:d7:0d:f6:7d:1b:59:bf:a4:5d:93:
                    36:25:5a:d9:d9:3c:2c:d1:7d:91:b8:bc:07:d9:79:
                    81:db:1f:e8:e1:38:ac:57:a2:c5:89:11:1d:59:46:
                    2e:99:3c:95:99:b2:9b:0b:05:6f:71:87:59:f0:bd:
                    1d:65:a8:b0:0a:ba:fa:16:a4:1f:2d:96:56:b4:5c:
                    cb:0f:e7:de:8c:6f:05:de:68:21:46:ec:59:7b:ab:
                    51:db:90:07:5a:61:b8:14:90:c6:d4:40:07:23:a6:
                    5e:e7:df:aa:fd:d2:5c:d2:1d:e2:fb:3b:86:2c:08:
                    67:3e:12:96:18:54:49:42:91:a6:49:53:42:b0:50:
                    92:56:18:81:8f:73:12:c7:58:e2:d9:54:c4:74:8b:
                    6a:bd:23:52:6b:09:91:46:bf:63:d4:4d:8f:5b:3f:
                    72:5f:e0:49:57:88:f2:ee:01:c5:ea:47:c6:2a:60:
                    c8:f3:ea:b7:30:c5:c5:61:2d:21:e4:5e:92:8d:6b:
                    8d:1f:38:d9:5a:27:af:30:e0:2f:ce:37:f7:ea:47:
                    60:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:25:52:F5:61:41:16:2C:80:6F:6F:1E:8A:7E:0C:DB:06:4B:ED:F4
            X509v3 Authority Key Identifier:
                keyid:57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a383030303a3a2f33332d3339203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7e:d3:1b:e0:0e:32:29:ef:37:ba:cf:88:53:fe:46:5e:d7:0c:
         a9:a8:07:58:92:d5:d9:4e:d9:d0:71:19:a0:96:a2:ff:0e:c2:
         0c:a4:72:94:9a:91:09:67:ab:87:32:bd:bf:7a:85:f8:00:a6:
         c9:06:b9:3e:3c:86:55:59:0a:1a:89:e4:4f:dc:9f:c2:b4:1e:
         cb:1c:2a:7c:29:04:b3:19:27:a7:43:7c:3f:49:5b:8c:93:f3:
         9a:b2:92:01:63:f2:ae:1b:22:4b:a0:70:d8:b8:16:bc:19:8a:
         f7:28:24:db:0f:52:cc:21:9f:27:7b:32:8f:29:88:c6:72:f7:
         d9:1a:f6:c3:1c:34:84:d2:7c:82:82:bd:d7:54:4d:32:9a:02:
         d4:85:dc:b9:40:15:02:89:75:b4:45:4c:ea:15:af:83:0e:02:
         f9:f9:98:cc:01:55:e5:ed:2c:bd:00:90:1b:2a:74:cb:a1:cc:
         42:58:ec:cc:cb:fa:3f:0a:94:27:74:5b:bf:58:28:a2:f6:ed:
         ae:8e:e4:6a:8b:6c:9e:96:1d:9b:b3:d7:80:a2:3d:7b:96:57:
         9b:f9:28:b5:d7:ec:05:a2:22:f6:9f:2a:56:22:4e:03:0c:3a:
         d7:f1:70:46:97:8b:42:24:07:04:3f:f8:b5:ff:b5:f6:1b:28:
         f6:da:07:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org