Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3830303a3a2f34302d3430203d3e203533303437.roa
File:                     323830343a3666303a3830303a3a2f34302d3430203d3e203533303437.roa (raw, json)
Hash identifier:          Vg6+MiGizsOOXYZT0XucdDxDP0uoEfdBm2qFAdrjXBs=
Subject key identifier:   B5:57:A8:DE:11:E7:71:3B:FD:9C:EB:AD:A3:B8:1A:F9:68:75:54:70
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       35FF244DCC1E474E6A02F370F7B2E16C9E2BE65F
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3830303a3a2f34302d3430203d3e203533303437.roa
Signing time:             Wed 22 Nov 2023 17:06:34 +0000
ROA not before:           Wed 22 Nov 2023 17:01:34 +0000
ROA not after:            Wed 20 Nov 2024 17:06:34 +0000
asID:                     53047
IP address blocks:        2804:6f0:800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ff:24:4d:cc:1e:47:4e:6a:02:f3:70:f7:b2:e1:6c:9e:2b:e6:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 22 17:01:34 2023 GMT
            Not After : Nov 20 17:06:34 2024 GMT
        Subject: CN=B557A8DE11E7713BFD9CEBADA3B81AF968755470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ae:bf:80:09:27:03:b1:5e:a8:cb:20:d4:e1:
                    fe:d5:1d:99:21:2a:07:b7:d4:56:17:a3:62:ce:76:
                    61:c2:10:43:9a:40:01:ce:b1:a6:d7:58:c9:72:74:
                    bc:4d:eb:ff:ea:20:45:42:45:e2:b1:3e:9b:95:81:
                    1c:8d:d5:ce:d5:bd:68:fa:dd:a7:91:4c:bb:57:bc:
                    6a:eb:a2:62:a3:9f:73:5d:a5:e8:72:34:65:2e:56:
                    a9:ae:91:c9:bd:07:02:02:6b:c7:7d:e4:21:c7:d1:
                    66:65:9a:ce:2b:d6:e0:e1:d8:22:95:6b:90:54:9b:
                    ac:ba:13:23:6e:0a:be:a5:a0:ad:35:eb:21:a6:2f:
                    7e:5e:8a:d5:73:7b:e6:05:cb:d6:bb:76:f0:57:8b:
                    f1:63:d3:9b:ad:74:96:c6:5e:7b:3d:6e:03:dd:5d:
                    9b:de:3d:34:48:0b:7d:f9:e5:59:b6:95:02:5d:10:
                    40:1c:22:37:ac:e5:21:59:1d:34:7c:5c:30:f2:10:
                    bf:1d:d5:44:5f:3e:0e:17:62:d7:95:51:ec:54:cb:
                    e6:8e:40:cd:17:99:0f:c6:39:39:b7:1a:94:bf:2a:
                    af:c3:13:cc:97:2c:0e:f0:aa:45:8b:9a:37:c1:a6:
                    94:a5:68:5b:33:77:05:25:c8:4f:f9:ed:f9:31:b3:
                    1d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:57:A8:DE:11:E7:71:3B:FD:9C:EB:AD:A3:B8:1A:F9:68:75:54:70
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3830303a3a2f34302d3430203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:4c:02:75:53:6d:28:aa:eb:90:30:4d:2b:05:81:fe:35:40:
         35:cd:23:d0:50:6f:9b:92:03:52:20:6f:0b:c9:7d:93:57:df:
         2e:1a:6e:79:e5:28:f6:d7:9d:b3:55:a5:e9:fd:ee:f9:4e:74:
         86:5f:c1:9d:d5:6c:8d:e6:3e:1a:a8:ac:0b:1c:eb:9c:fb:95:
         bb:66:99:a2:01:6d:3c:c7:ae:f4:31:fc:6f:d6:a3:a8:05:a7:
         c4:ae:03:6d:13:08:dd:b3:bd:99:38:10:0a:61:56:78:c1:74:
         f8:e2:e3:9a:2e:8a:3a:b6:b4:5f:49:45:99:6a:1d:6b:7b:7a:
         3b:f6:75:85:f4:a5:86:32:02:1f:96:ed:c6:20:1f:89:10:33:
         25:e3:5c:e6:95:02:d5:e8:db:72:d0:43:d8:56:23:aa:86:48:
         1b:d6:5c:82:d7:52:23:20:02:bd:8d:a6:f6:ae:9f:60:90:3f:
         a2:64:5e:0a:06:ce:8a:dd:a5:0d:a3:98:07:08:3b:18:8d:ae:
         da:84:f4:fa:7d:34:e7:08:47:f3:93:40:69:55:52:20:72:bc:
         20:97:76:44:58:a2:42:39:72:ec:a5:f6:85:3b:67:67:7a:7d:
         43:ce:fe:0a:0b:f7:69:da:9a:47:bf:7f:fb:11:3b:76:a3:ee:
         0d:31:67:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org