Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a343030303a3a2f33342d3334203d3e203532353435.roa
File:                     323830343a6531633a343030303a3a2f33342d3334203d3e203532353435.roa (raw, json)
Hash identifier:          YIxY7l3M9WbSnNbodrnar3sKNAnUbOSpcyQEHJ9v3Og=
Subject key identifier:   93:7E:95:66:7B:31:6D:8E:BE:9D:AB:C6:D7:FB:2D:86:4E:49:40:4A
Certificate issuer:       /CN=F38654E1757B49C2186636D148FED7E1055CBD91
Certificate serial:       039EC378C06D364B64AEE893684EF1F2D807451F
Authority key identifier: F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a343030303a3a2f33342d3334203d3e203532353435.roa
Signing time:             Mon 04 Mar 2024 11:04:55 +0000
ROA not before:           Mon 04 Mar 2024 10:59:55 +0000
ROA not after:            Mon 03 Mar 2025 11:04:55 +0000
asID:                     52545
IP address blocks:        2804:e1c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9e:c3:78:c0:6d:36:4b:64:ae:e8:93:68:4e:f1:f2:d8:07:45:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38654E1757B49C2186636D148FED7E1055CBD91
        Validity
            Not Before: Mar  4 10:59:55 2024 GMT
            Not After : Mar  3 11:04:55 2025 GMT
        Subject: CN=937E95667B316D8EBE9DABC6D7FB2D864E49404A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a0:44:5f:5b:14:74:8f:41:d3:42:6b:f0:68:
                    bf:20:11:43:cd:5f:67:bc:85:d0:fe:30:9e:f2:28:
                    9c:c0:e4:a9:5b:1e:0b:bc:8d:30:ca:89:a8:22:56:
                    66:19:71:62:63:33:4d:f0:ac:04:27:19:6d:48:1e:
                    54:a6:02:82:d8:5b:cd:af:4c:99:77:b5:d2:23:3c:
                    47:ef:55:28:f6:23:1e:f1:ab:e8:71:ec:90:97:f0:
                    4d:9c:3c:a9:6a:aa:71:f3:79:d0:50:1e:b5:bb:93:
                    20:72:c2:25:f6:fa:77:ca:0d:42:3e:1e:e5:8d:ef:
                    c1:b8:95:f9:2b:43:22:28:90:d0:92:f5:09:a3:10:
                    2a:33:10:31:a6:01:39:e0:3a:05:90:7b:f3:d8:2d:
                    f0:a9:ef:28:55:66:74:89:18:22:67:71:77:79:56:
                    ef:40:99:ae:53:a5:20:3a:b6:04:75:ae:22:1f:8f:
                    ed:67:1c:ca:38:5a:34:1f:15:aa:75:46:d7:38:af:
                    cd:a5:ee:53:b5:58:fe:90:f8:71:90:1b:f3:9a:ef:
                    20:7e:0f:e8:97:5e:0b:13:9c:ba:2e:b4:99:1b:80:
                    cd:7f:2a:da:8e:ae:70:92:99:bf:78:9c:ae:fb:55:
                    c5:e9:09:61:22:16:14:8f:b2:d4:14:13:7a:9a:69:
                    bf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7E:95:66:7B:31:6D:8E:BE:9D:AB:C6:D7:FB:2D:86:4E:49:40:4A
            X509v3 Authority Key Identifier:
                keyid:F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/F38654E1757B49C2186636D148FED7E1055CBD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a343030303a3a2f33342d3334203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c7:ed:17:f3:0b:79:1b:d8:6f:8c:bf:c5:10:5d:5d:40:ab:ad:
         51:00:43:f2:7a:f6:1c:52:92:6b:7b:32:ca:1e:2d:3d:14:db:
         25:eb:ec:29:94:1d:d5:c4:ba:9c:9f:6f:6b:ba:f2:24:52:19:
         dd:3d:f8:79:1e:95:ed:06:8b:0e:54:eb:25:bd:48:61:07:60:
         65:64:48:d3:0e:0e:ab:fa:1d:94:95:65:f7:75:2f:bc:44:a1:
         6d:f6:f1:60:4a:f3:91:36:e4:f0:47:b5:95:8d:9c:87:31:a1:
         00:e7:c6:93:c0:b2:62:ea:c1:a4:4e:17:e9:38:70:5b:cb:5f:
         36:b6:d1:7c:a4:fb:09:e1:75:0d:c5:e7:4f:37:81:02:13:f8:
         d8:fd:c1:54:27:b9:1f:b5:2c:bc:de:c8:8a:38:96:8a:12:fc:
         c4:e8:f1:e6:5f:72:a3:0c:4c:36:25:d8:da:83:cd:75:4f:78:
         ff:1a:b4:ff:d8:fd:6f:0a:af:37:ac:5d:28:db:96:82:1b:34:
         fb:0d:86:4f:3a:ac:4a:40:6e:9d:a6:41:e6:3b:3a:b1:f2:12:
         bf:ec:48:50:36:1c:8d:ab:f3:e9:a3:b5:50:8e:1a:25:70:17:
         db:95:80:6b:0c:12:3a:ea:67:84:6b:c9:7a:32:20:7e:2e:29:
         92:24:5a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:09 2024 by rpki-client on console-fra.rpki-client.org