Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a633030303a3a2f33342d3334203d3e203532353435.roa
File:                     323830343a6531633a633030303a3a2f33342d3334203d3e203532353435.roa (raw, json)
Hash identifier:          irep5rJtGTH3rHZKKuEPdpEV+lU6eMQI1RA9b1cyxBE=
Subject key identifier:   E7:AF:72:F0:5E:BE:AA:40:C6:35:E3:BB:67:6F:84:A6:C1:1C:EE:1A
Certificate issuer:       /CN=F38654E1757B49C2186636D148FED7E1055CBD91
Certificate serial:       48E375F79E726B06140ECAF196FA8BA33C672562
Authority key identifier: F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a633030303a3a2f33342d3334203d3e203532353435.roa
Signing time:             Mon 04 Mar 2024 11:04:55 +0000
ROA not before:           Mon 04 Mar 2024 10:59:55 +0000
ROA not after:            Mon 03 Mar 2025 11:04:55 +0000
asID:                     52545
IP address blocks:        2804:e1c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e3:75:f7:9e:72:6b:06:14:0e:ca:f1:96:fa:8b:a3:3c:67:25:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38654E1757B49C2186636D148FED7E1055CBD91
        Validity
            Not Before: Mar  4 10:59:55 2024 GMT
            Not After : Mar  3 11:04:55 2025 GMT
        Subject: CN=E7AF72F05EBEAA40C635E3BB676F84A6C11CEE1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f6:08:6c:eb:95:cf:e9:53:7c:d4:16:d5:4f:
                    b3:ce:dc:60:73:d5:8d:6f:f8:8a:23:18:11:8b:77:
                    39:37:7f:d5:e4:a2:6a:14:f0:cd:df:78:65:08:08:
                    f2:2c:0d:43:c6:90:16:3c:b5:42:49:13:ed:5f:d5:
                    49:56:f4:ae:fa:78:d0:66:0d:7a:2e:9a:83:9e:dc:
                    3e:ac:3b:c0:60:f7:e7:c5:e1:d6:b3:17:57:4a:a1:
                    d0:fb:c8:f2:80:68:37:dd:5d:38:38:95:77:6e:1b:
                    13:de:3b:85:da:53:ad:39:1e:72:6f:71:92:29:32:
                    76:e3:7b:ec:49:e5:e1:22:e2:6a:be:8e:ac:8c:5e:
                    23:6f:02:21:59:a8:e3:9c:ab:51:62:be:60:7a:18:
                    cd:2d:e7:76:d6:ae:19:39:9e:82:b4:dd:47:58:1b:
                    8a:03:28:78:f9:a3:a4:c8:b3:55:87:42:e4:fe:69:
                    bf:0e:74:7e:bf:22:84:8b:3d:c6:fc:9f:95:d2:ad:
                    0d:57:70:2a:20:4b:16:4a:a8:6b:ca:53:0f:42:0c:
                    ce:70:50:f0:c4:cf:0b:ce:a5:26:c5:1f:09:74:88:
                    a3:8e:72:ad:fb:32:4e:81:8f:24:83:c0:6b:c1:54:
                    78:61:1f:80:18:5c:2b:81:5f:62:7e:6d:71:38:67:
                    29:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AF:72:F0:5E:BE:AA:40:C6:35:E3:BB:67:6F:84:A6:C1:1C:EE:1A
            X509v3 Authority Key Identifier:
                keyid:F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/F38654E1757B49C2186636D148FED7E1055CBD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a633030303a3a2f33342d3334203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a5:56:52:77:3a:a7:28:ba:14:dd:ad:a7:c2:5e:02:1c:ad:8f:
         9f:3a:38:da:66:d9:31:03:05:5e:92:db:b6:d7:d8:1e:8d:bc:
         0e:db:ae:b4:74:64:8a:58:59:3d:06:9c:85:58:34:71:dd:9f:
         eb:03:1f:b9:de:a8:0a:4f:cd:d2:31:38:24:02:e6:d6:e5:89:
         bb:f1:67:e3:6c:b1:f8:fc:4d:ae:94:24:da:b8:cb:93:2d:3c:
         f2:3f:60:8b:fc:0d:d8:93:b1:6c:41:0f:78:ef:0e:6c:4f:62:
         ba:5e:26:65:21:31:54:3a:b9:72:1f:e3:c4:a8:12:d6:7c:b0:
         bb:d4:8e:ec:63:cd:a1:05:06:fc:2d:31:9a:da:e3:1e:a1:61:
         84:67:58:db:4c:22:67:fc:e9:b0:58:a0:da:51:1a:40:42:91:
         7e:1e:b6:5f:d7:0d:6f:a1:ca:00:a4:58:f6:01:4d:a1:8d:a7:
         f4:85:0b:74:ae:8e:00:8a:e6:23:ac:03:32:45:c8:99:2e:21:
         ca:79:ba:e2:83:91:d4:39:32:07:18:e0:84:c1:a9:8b:88:b4:
         4c:9b:fd:29:3a:cc:0b:37:d2:2a:82:50:a5:dc:2d:fc:9b:60:
         23:6b:65:d5:ed:96:ec:39:fa:2d:4f:12:f4:ca:94:a5:a3:d5:
         69:8e:4f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:09 2024 by rpki-client on console-fra.rpki-client.org