Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a3a2f33332d3333203d3e20323639303533.roa
File:                     323830343a356562633a3a2f33332d3333203d3e20323639303533.roa (raw, json)
Hash identifier:          VONJnKe29yGgyfRSjms7rj3w6n2UI66zknlsvhm7yW0=
Subject key identifier:   95:65:33:83:29:FE:54:81:35:1F:15:56:51:14:54:EC:B9:C2:E1:82
Certificate issuer:       /CN=FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C
Certificate serial:       2086305883A5C1B74E76C03FFD4212A36F047F87
Authority key identifier: FE:F8:DD:8F:52:EE:F0:3F:F2:CD:9C:97:A8:31:81:30:44:AA:DE:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a3a2f33332d3333203d3e20323639303533.roa
Signing time:             Sun 04 Feb 2024 03:16:23 +0000
ROA not before:           Sun 04 Feb 2024 03:11:23 +0000
ROA not after:            Sun 02 Feb 2025 03:16:23 +0000
asID:                     269053
IP address blocks:        2804:5ebc::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:86:30:58:83:a5:c1:b7:4e:76:c0:3f:fd:42:12:a3:6f:04:7f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C
        Validity
            Not Before: Feb  4 03:11:23 2024 GMT
            Not After : Feb  2 03:16:23 2025 GMT
        Subject: CN=9565338329FE5481351F1556511454ECB9C2E182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:29:38:4b:07:e2:48:14:46:81:cf:d4:0f:56:
                    87:be:6e:2f:3b:05:dd:f9:20:72:34:39:e0:89:8a:
                    34:f6:97:a1:11:b0:9f:1f:9d:f7:36:86:48:87:78:
                    2d:c7:97:49:1c:22:e2:1b:3e:06:ca:d5:28:aa:a1:
                    cc:2c:30:ad:2f:62:a7:73:3e:d1:11:e0:93:e0:62:
                    37:7e:04:5e:36:b8:4c:ce:8b:12:b6:f4:c6:94:04:
                    6c:25:66:2f:79:ef:41:86:97:74:77:6f:74:7d:92:
                    b0:e5:0a:05:27:86:37:ed:2a:ae:61:85:42:87:2e:
                    96:3a:12:15:1e:e4:54:4b:6e:59:49:d9:7b:20:f0:
                    f5:b0:1a:d6:6e:5c:14:5c:01:7e:eb:3d:c7:64:7f:
                    36:49:eb:48:fe:4d:17:28:b6:9c:67:69:fd:5f:d5:
                    56:82:77:ec:00:5c:ca:dc:3f:e2:1b:d5:f6:57:d4:
                    29:02:c3:53:f7:af:97:59:44:52:0b:ad:2f:93:8d:
                    2d:e4:04:d4:76:ec:1e:7f:35:bf:3e:d3:72:d5:f8:
                    3d:ea:c0:0d:56:04:4a:f7:50:4d:74:a3:f8:60:d1:
                    e6:be:f0:df:36:d9:ca:2b:de:28:80:33:0c:66:7a:
                    41:08:09:e1:49:73:c2:b1:7e:15:32:e7:8f:9e:ef:
                    46:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:65:33:83:29:FE:54:81:35:1F:15:56:51:14:54:EC:B9:C2:E1:82
            X509v3 Authority Key Identifier:
                keyid:FE:F8:DD:8F:52:EE:F0:3F:F2:CD:9C:97:A8:31:81:30:44:AA:DE:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEF8DD8F52EEF03FF2CD9C97A831813044AADE9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdwhVQgcDP6yL6LvqtWJ1va1s9RKRK2YXMMxgTUFzx2N/0/323830343a356562633a3a2f33332d3333203d3e20323639303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ebc::/33

    Signature Algorithm: sha256WithRSAEncryption
         18:67:74:14:c8:0d:89:8e:73:e0:84:67:09:fa:b8:7e:02:6d:
         d2:03:92:d9:32:c5:ac:11:20:fb:96:b6:ef:bb:c3:a1:ae:6b:
         00:71:1d:1f:66:fe:58:ea:75:35:88:c4:a8:1c:b8:9a:85:3b:
         8d:a8:fa:2b:a1:1f:33:cb:1b:ce:90:69:3a:8b:db:2f:31:37:
         f4:87:79:d7:ad:a5:f4:56:4a:14:cd:fd:78:e5:e8:33:0e:67:
         31:db:75:2d:e4:e6:81:7a:b4:93:98:d1:06:70:08:08:9e:aa:
         f9:94:2c:53:44:7d:29:28:c0:f7:fe:db:c5:08:c5:00:57:c3:
         24:4c:1e:0e:b6:3d:34:e8:c1:d3:31:68:9d:e0:32:ee:d4:e1:
         eb:8e:0e:25:62:14:69:84:dd:cc:fa:64:be:0b:23:a6:df:20:
         c0:3d:81:c0:b8:51:41:a8:b3:b3:01:3c:d3:85:80:2e:96:41:
         4c:56:1a:dd:4d:04:e0:42:3a:38:2b:71:1f:18:af:8e:9a:ca:
         5b:47:35:a9:39:e3:5b:6c:6e:9d:45:83:63:dc:f4:90:33:b7:
         fa:bd:87:40:42:6d:31:b4:d4:a1:98:5a:d5:84:f6:3b:80:62:
         56:2c:91:d3:86:cc:ff:de:ae:46:66:a9:ea:f3:38:75:02:96:
         cb:98:c0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org