Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a3a2f33332d3339203d3e20323633303533.roa
File:                     323830343a3932303a3a2f33332d3339203d3e20323633303533.roa (raw, json)
Hash identifier:          97aAKBtd4CT2fuTkNQl+1s5II+eoizeUyR20AyjvvFI=
Subject key identifier:   D4:6A:94:DE:7E:32:CE:FB:F0:91:C3:21:CD:EA:12:3E:18:B1:15:7F
Certificate issuer:       /CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
Certificate serial:       0F4DF40CFADAFF051876BF52F6F0D85EAFB20C53
Authority key identifier: 57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a3a2f33332d3339203d3e20323633303533.roa
Signing time:             Wed 03 Apr 2024 18:30:49 +0000
ROA not before:           Wed 03 Apr 2024 18:25:49 +0000
ROA not after:            Wed 02 Apr 2025 18:30:49 +0000
asID:                     263053
IP address blocks:        2804:920::/33 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4d:f4:0c:fa:da:ff:05:18:76:bf:52:f6:f0:d8:5e:af:b2:0c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57735F8F04BE74A9E540B571EEB3F95A1477C8E8
        Validity
            Not Before: Apr  3 18:25:49 2024 GMT
            Not After : Apr  2 18:30:49 2025 GMT
        Subject: CN=D46A94DE7E32CEFBF091C321CDEA123E18B1157F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f5:b3:27:2b:51:98:ec:7f:01:cb:f7:2c:0f:
                    27:bd:03:89:c2:b6:99:d0:dd:a4:4e:f0:3d:85:09:
                    34:9a:15:64:26:62:f0:50:a9:e5:27:f1:d4:37:31:
                    7e:90:0f:db:48:d5:71:a9:ed:47:d4:bf:04:0b:53:
                    81:7a:bc:e6:a9:db:7c:c5:e5:bd:2f:86:21:30:03:
                    cd:69:ca:c5:77:66:7b:a4:a3:e5:e6:43:ad:5d:bb:
                    67:dc:9e:71:dd:36:9d:37:44:fb:a3:96:78:f2:c1:
                    55:ca:bd:ca:24:16:ef:4e:62:d8:1d:82:2b:be:5f:
                    97:97:b7:f9:41:c4:62:fb:18:77:b0:81:bd:93:72:
                    87:00:80:4b:9c:8b:86:e4:cc:50:39:19:57:cd:e5:
                    33:66:d7:d7:84:cb:7d:68:90:6c:00:38:d5:f1:a2:
                    b5:da:51:ac:ac:20:76:5b:09:0d:14:dc:89:a3:c7:
                    6e:99:45:ee:e5:0a:54:e9:c2:be:15:a8:34:53:55:
                    d5:28:25:8f:ed:93:21:81:73:87:10:12:2c:84:a7:
                    f8:37:82:6a:66:f1:bf:d0:f1:2e:09:a2:bd:34:2e:
                    ec:3f:64:ee:df:82:d5:e1:0e:0e:ac:46:c4:f0:67:
                    f2:69:ec:2e:4b:3c:e3:85:ad:84:11:75:33:cc:53:
                    d2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6A:94:DE:7E:32:CE:FB:F0:91:C3:21:CD:EA:12:3E:18:B1:15:7F
            X509v3 Authority Key Identifier:
                keyid:57:73:5F:8F:04:BE:74:A9:E5:40:B5:71:EE:B3:F9:5A:14:77:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57735F8F04BE74A9E540B571EEB3F95A1477C8E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/1/323830343a3932303a3a2f33332d3339203d3e20323633303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:920::/33

    Signature Algorithm: sha256WithRSAEncryption
         6d:2d:fc:e9:b2:6b:e6:b0:f4:1d:0b:52:7b:56:c8:b9:37:f7:
         54:75:24:2b:38:ee:fd:f9:4c:8a:45:1f:c5:0d:8a:f3:61:c3:
         75:49:1c:9e:9c:56:66:4e:d8:cf:db:cb:92:bf:aa:37:47:01:
         50:3e:af:8b:c4:d8:8d:00:13:32:39:34:f7:1e:33:7b:b7:76:
         bb:1e:40:5b:a8:50:84:b8:e1:84:25:47:aa:c2:2d:e2:67:97:
         a2:17:67:1f:5a:02:71:3a:f4:69:e4:90:59:fa:d7:a9:d5:66:
         ab:bd:6d:9b:41:de:3a:e5:15:a5:ec:a0:c9:7f:1d:65:bb:3a:
         d5:c8:ff:8a:62:2f:2b:8a:ef:3f:4f:c7:3c:cc:df:83:dc:93:
         7e:97:9a:aa:34:1b:de:fb:c4:e9:69:e7:26:0d:92:c6:3d:41:
         39:37:e4:9b:14:d0:30:ec:74:25:66:dd:b5:5c:92:19:9b:ce:
         9f:e3:51:69:52:d3:25:e8:fc:d2:fc:da:cf:db:ac:b7:56:9c:
         46:01:a3:31:96:9f:ec:4d:dd:8c:b4:fd:ae:66:df:31:09:cd:
         8d:b6:fc:74:b7:d2:67:8b:62:8f:11:b1:18:f1:4d:1c:df:ea:
         25:f0:71:d8:d9:4c:43:b0:38:e2:47:3c:65:80:90:d4:d8:fa:
         2a:c2:b1:ca
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD030DPra/wUYdr9S9vDYXq+yDFMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc3MzVGOEYwNEJFNzRBOUU1NDBCNTcxRUVCM0Y5NUEx
NDc3QzhFODAeFw0yNDA0MDMxODI1NDlaFw0yNTA0MDIxODMwNDlaMDMxMTAvBgNV
BAMTKEQ0NkE5NERFN0UzMkNFRkJGMDkxQzMyMUNERUExMjNFMThCMTE1N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs9bMnK1GY7H8By/csDye9A4nC
tpnQ3aRO8D2FCTSaFWQmYvBQqeUn8dQ3MX6QD9tI1XGp7UfUvwQLU4F6vOap23zF
5b0vhiEwA81pysV3Znuko+XmQ61du2fcnnHdNp03RPujlnjywVXKvcokFu9OYtgd
giu+X5eXt/lBxGL7GHewgb2TcocAgEuci4bkzFA5GVfN5TNm19eEy31okGwAONXx
orXaUaysIHZbCQ0U3Imjx26ZRe7lClTpwr4VqDRTVdUoJY/tkyGBc4cQEiyEp/g3
gmpm8b/Q8S4Jor00Luw/ZO7fgtXhDg6sRsTwZ/Jp7C5LPOOFrYQRdTPMU9LtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1GqU3n4yzvvwkcMhzeoSPhixFX8wHwYDVR0j
BBgwFoAUV3NfjwS+dKnlQLVx7rP5WhR3yOgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hRZGVlVm1leFJFTGJnc1BxWldDRTd2UEg5ZW9LMzNyV0t3RWMzRHRV
NmgvMS81NzczNUY4RjA0QkU3NEE5RTU0MEI1NzFFRUIzRjk1QTE0NzdDOEU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU3NzM1RjhGMDRCRTc0QTlF
NTQwQjU3MUVFQjNGOTVBMTQ3N0M4RTguY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIUWRlZVZtZXhSRUxiZ3NQcVpXQ0U3dlBIOWVvSzMzcldLd0VjM0R0VTZoLzEv
MzIzODMwMzQzYTM5MzIzMDNhM2EyZjMzMzMyZDMzMzkyMDNkM2UyMDMyMzYzMzMw
MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBygECSAAMA0GCSqGSIb3DQEBCwUAA4IBAQBtLfzpsmvm
sPQdC1J7Vsi5N/dUdSQrOO79+UyKRR/FDYrzYcN1SRyenFZmTtjP28uSv6o3RwFQ
Pq+LxNiNABMyOTT3HjN7t3a7HkBbqFCEuOGEJUeqwi3iZ5eiF2cfWgJxOvRp5JBZ
+tep1WarvW2bQd465RWl7KDJfx1luzrVyP+KYi8riu8/T8c8zN+D3JN+l5qqNBve
+8TpaecmDZLGPUE5N+SbFNAw7HQlZt21XJIZm86f41FpUtMl6PzS/NrP26y3VpxG
AaMxlp/sTd2MtP2uZt8xCc2Ntvx0t9Jni2KPEbEY8U0c3+ol8HHY2UxDsDjiRzxl
gJDU2PoqwrHK
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:50 2024 by rpki-client on console-fra.rpki-client.org