Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a3a2f33322d3332203d3e20323633303533.roa
File:                     323830343a3932303a3a2f33322d3332203d3e20323633303533.roa (raw, json)
Hash identifier:          DQVTeWmRxRlxs18LIif+/qQQOO79KYilf2uaGVCvq/Y=
Subject key identifier:   A4:17:CC:B8:15:B4:AB:BC:8F:58:28:EA:D4:B1:78:C1:EC:1F:31:E5
Certificate issuer:       /CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
Certificate serial:       601211759707C73DD8F354B0CB0AFCA669CA4F09
Authority key identifier: 57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a3a2f33322d3332203d3e20323633303533.roa
Signing time:             Wed 03 Apr 2024 18:30:52 +0000
ROA not before:           Wed 03 Apr 2024 18:25:52 +0000
ROA not after:            Wed 02 Apr 2025 18:30:52 +0000
asID:                     263053
IP address blocks:        2804:920::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:12:11:75:97:07:c7:3d:d8:f3:54:b0:cb:0a:fc:a6:69:ca:4f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
        Validity
            Not Before: Apr  3 18:25:52 2024 GMT
            Not After : Apr  2 18:30:52 2025 GMT
        Subject: CN=A417CCB815B4ABBC8F5828EAD4B178C1EC1F31E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5e:38:fc:53:91:ab:bc:c2:17:7e:ba:0c:62:
                    8c:e3:81:71:ed:6f:4b:64:e8:f2:e3:eb:5d:74:ad:
                    35:b1:2c:db:a8:2b:6c:79:4b:38:c0:2f:f0:5f:2e:
                    57:c4:ee:cb:9d:d4:27:04:f7:65:69:62:21:0f:78:
                    76:4d:6e:ce:6f:21:14:98:11:f3:93:9d:df:03:6d:
                    3a:10:1b:66:ae:9a:71:38:9c:08:24:57:4f:e5:4a:
                    52:e1:51:16:98:1f:56:8d:bf:35:49:49:e4:ac:09:
                    a2:33:88:80:11:b9:b2:3b:f8:2b:fa:df:db:97:16:
                    fe:ae:76:64:50:b3:70:5f:28:41:83:6c:0f:2d:6c:
                    d3:32:f8:8f:61:14:cd:a1:c6:00:de:ec:f7:8f:61:
                    6f:2b:b1:2a:50:a0:98:38:05:b0:5b:2e:bc:65:c2:
                    ec:63:b6:4e:5e:11:a6:26:bc:44:b9:d4:f1:18:10:
                    08:68:44:b4:9f:30:77:03:b3:ca:33:45:c5:e1:16:
                    4d:2b:6d:87:2c:0a:fb:2f:52:f7:3b:7e:d0:73:f0:
                    97:68:d2:fc:90:3d:71:04:f5:b1:2c:79:b0:72:c5:
                    a8:fe:57:c2:04:e3:db:b6:0b:96:98:96:f2:8f:cc:
                    e5:f6:07:56:21:60:5c:7e:99:f7:9d:92:f0:2b:37:
                    86:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:17:CC:B8:15:B4:AB:BC:8F:58:28:EA:D4:B1:78:C1:EC:1F:31:E5
            X509v3 Authority Key Identifier:
                keyid:57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a3a2f33322d3332203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:9e:e3:c2:4f:75:41:69:51:71:03:24:b1:57:1f:81:73:71:
         6b:16:df:5a:5f:c3:5b:8e:41:6c:df:ca:a2:bd:0e:52:fc:4b:
         31:fa:42:90:a0:49:38:f8:3d:35:8f:14:34:45:31:57:2c:73:
         7d:13:e7:bb:89:1d:75:f5:8a:b9:ab:df:52:20:1c:5f:3a:70:
         de:99:b7:e0:d3:39:1f:0a:37:5e:18:24:db:f3:b1:9a:58:d1:
         09:98:a9:1e:be:31:54:49:71:1c:37:e6:32:a9:bc:59:87:83:
         5a:6b:97:ce:92:ce:84:b7:f7:8b:21:41:95:92:8b:56:be:1d:
         ea:4a:e8:0b:47:b5:ce:ff:c9:bb:94:b5:34:a9:97:bf:46:c3:
         2d:31:47:c4:fa:ac:1a:7c:a0:b9:6b:b2:fa:cc:ac:09:d7:ac:
         4c:41:db:80:18:ad:a5:9d:5f:31:6a:ad:44:5a:f5:9c:7a:89:
         31:62:54:2b:83:bd:9a:49:64:d6:1b:54:1f:04:68:4e:b6:18:
         20:f2:21:5b:21:d0:d1:fb:23:cd:eb:45:d8:06:95:1c:12:d8:
         3a:c4:28:2c:d9:82:28:02:05:75:ea:6f:5e:d4:69:97:08:a1:
         f1:46:40:3d:6f:98:a6:c1:20:3c:be:26:32:5d:4f:7a:43:b9:
         45:ee:12:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org