Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a3a2f33322d3438203d3e203532373635.roa
File:                     323830343a6235343a3a2f33322d3438203d3e203532373635.roa (raw, json)
Hash identifier:          SeBC8m/SMsOHXvFspDSCetCD06gnBtX8SL16MSsxDcI=
Subject key identifier:   28:D7:43:EF:A3:2C:43:FE:90:0F:3E:E6:ED:95:7D:D5:12:83:90:99
Certificate issuer:       /CN=FB525337D26D99E0349C464F7EFB30E81515732D
Certificate serial:       6BEE7E2BA005507B1805011AB99817F607907E1F
Authority key identifier: FB:52:53:37:D2:6D:99:E0:34:9C:46:4F:7E:FB:30:E8:15:15:73:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB525337D26D99E0349C464F7EFB30E81515732D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a3a2f33322d3438203d3e203532373635.roa
Signing time:             Wed 13 Mar 2024 12:39:37 +0000
ROA not before:           Wed 13 Mar 2024 12:34:37 +0000
ROA not after:            Wed 12 Mar 2025 12:39:37 +0000
asID:                     52765
IP address blocks:        2804:b54::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ee:7e:2b:a0:05:50:7b:18:05:01:1a:b9:98:17:f6:07:90:7e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB525337D26D99E0349C464F7EFB30E81515732D
        Validity
            Not Before: Mar 13 12:34:37 2024 GMT
            Not After : Mar 12 12:39:37 2025 GMT
        Subject: CN=28D743EFA32C43FE900F3EE6ED957DD512839099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:92:ce:1d:9e:ea:3c:2f:99:0c:f3:f4:83:f2:
                    e0:c3:a3:f8:9c:57:15:b7:9f:fd:9c:5d:54:88:57:
                    88:fd:bb:61:64:0a:90:76:68:4c:f3:cd:b7:6b:79:
                    d1:fb:da:de:87:fa:e5:01:91:f6:99:77:4a:ba:95:
                    2d:a4:b7:f0:d3:c7:78:c2:1f:f6:5a:c9:ac:71:2e:
                    35:de:ac:41:21:e8:d8:b0:dd:34:44:8a:0a:ef:43:
                    0f:62:e1:ef:2c:e8:bf:54:53:07:78:f2:8d:c0:e2:
                    7c:0e:07:be:6c:91:22:89:71:33:3d:ce:35:ba:9d:
                    23:76:1e:e3:23:55:27:4b:3f:73:dd:ba:7c:f8:f2:
                    e4:57:21:07:29:91:1f:0b:ff:c2:1f:87:2e:b9:a1:
                    6c:02:e4:b2:73:1b:2a:5f:e3:f2:f3:8a:88:03:66:
                    74:97:94:8a:f0:8a:cb:00:72:28:7e:57:17:45:4b:
                    b1:52:b3:05:f3:9a:cb:0d:e7:d5:b6:67:14:d7:db:
                    6d:ec:55:8d:d8:ec:1d:bd:4f:89:32:1e:a7:61:a4:
                    53:04:d8:7c:8f:bf:b8:db:f1:fa:ad:c1:ce:09:e7:
                    57:ee:c6:5b:0c:3c:9d:77:f0:c6:1a:41:f0:b0:7d:
                    bf:be:93:b4:f8:2a:11:a3:ff:aa:59:ee:eb:26:c2:
                    10:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D7:43:EF:A3:2C:43:FE:90:0F:3E:E6:ED:95:7D:D5:12:83:90:99
            X509v3 Authority Key Identifier:
                keyid:FB:52:53:37:D2:6D:99:E0:34:9C:46:4F:7E:FB:30:E8:15:15:73:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/FB525337D26D99E0349C464F7EFB30E81515732D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB525337D26D99E0349C464F7EFB30E81515732D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRhmx7YeuSXNv2HN3h8n2baq3izmyM9fJHhcxSVVaeSY/0/323830343a6235343a3a2f33322d3438203d3e203532373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b54::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:53:80:cd:0f:d0:05:62:41:ae:6b:cd:15:3d:34:48:21:e7:
         40:b3:d2:05:79:71:22:fb:77:3e:bc:67:6e:88:29:8e:9a:cd:
         5d:53:96:f2:5f:77:17:6c:e8:fc:bd:5c:9e:99:e0:02:e4:3e:
         e7:4c:68:52:0f:83:14:3f:52:6d:d9:e7:e4:75:18:55:16:6b:
         8d:c0:28:cb:9c:cd:6b:1a:54:18:70:80:0c:b8:a6:88:57:ea:
         53:74:da:8f:93:8d:d4:af:11:b3:6a:3d:f0:2f:d3:f7:f4:40:
         8d:39:56:03:6f:ed:76:cd:45:cc:40:e8:96:90:93:a5:c9:75:
         aa:76:b0:68:b1:7f:36:c4:a0:b7:84:35:14:9d:5f:44:d7:67:
         3e:1d:c5:1b:fe:7e:20:ba:66:e7:f6:16:a6:7f:e5:05:f0:f0:
         8c:1b:ff:b2:ad:46:d0:d2:87:5f:b9:20:22:79:5a:4a:73:5f:
         4a:a7:d4:35:ab:79:09:b9:8a:7c:76:60:cd:9f:6b:ba:7d:ac:
         07:7c:1c:f6:11:e1:e1:94:d3:af:23:1b:f4:bc:4f:fe:cf:d8:
         f4:8d:bd:55:c7:62:95:c7:53:bf:6c:39:d5:fd:68:42:cc:7e:
         cb:33:0f:a7:64:6e:68:53:c1:16:c8:f0:8d:90:b2:06:ea:05:
         91:d2:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:55 2024 by rpki-client on console-ams.rpki-client.org