Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/12BmCufNcKH4uRUH9CeSn1ed6pmBoizQa9tpCzgdVPR6/0/323830343a353062303a3a2f33322d3438203d3e20323638343034.roa
File:                     323830343a353062303a3a2f33322d3438203d3e20323638343034.roa (raw, json)
Hash identifier:          8Sru/RE0wPM9Ygb/ChGyZD+J/x8FWl6exwqI/pDLMbQ=
Subject key identifier:   30:F5:41:82:34:4E:3B:6B:3F:9C:E4:27:F6:9A:4C:28:89:8B:3D:58
Certificate issuer:       /CN=FFF8DD08B3EB55667363E91A9D201548D74DBC5B
Certificate serial:       2E55AE37A4D24F94F0FF8BD1E914ED4890914475
Authority key identifier: FF:F8:DD:08:B3:EB:55:66:73:63:E9:1A:9D:20:15:48:D7:4D:BC:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF8DD08B3EB55667363E91A9D201548D74DBC5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/12BmCufNcKH4uRUH9CeSn1ed6pmBoizQa9tpCzgdVPR6/0/323830343a353062303a3a2f33322d3438203d3e20323638343034.roa
Signing time:             Mon 19 Dec 2022 20:39:12 +0000
ROA not before:           Mon 19 Dec 2022 20:34:12 +0000
ROA not after:            Mon 18 Dec 2023 20:39:12 +0000
asID:                     268404
IP address blocks:        2804:50b0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:55:ae:37:a4:d2:4f:94:f0:ff:8b:d1:e9:14:ed:48:90:91:44:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FFF8DD08B3EB55667363E91A9D201548D74DBC5B
        Validity
            Not Before: Dec 19 20:34:12 2022 GMT
            Not After : Dec 18 20:39:12 2023 GMT
        Subject: CN=30F54182344E3B6B3F9CE427F69A4C28898B3D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:70:71:6f:be:bd:bd:4d:78:6e:78:12:c2:
                    a1:06:bb:1e:96:fb:8f:fb:5b:ca:7d:9e:37:90:1d:
                    76:59:9e:d8:41:35:de:c1:86:3a:e6:a3:e2:bc:37:
                    3b:9a:1a:42:f1:32:07:4d:7a:a2:5a:fa:e0:cb:cb:
                    86:db:da:7a:df:60:ee:47:1d:82:8a:af:0d:9d:52:
                    aa:14:73:fa:67:63:9e:9d:de:3d:d7:6a:9a:c6:32:
                    ae:44:cc:ca:d5:23:28:72:3d:4f:2a:fe:b0:fb:94:
                    68:36:eb:81:57:e2:1d:b8:02:15:03:25:19:55:9b:
                    f6:3b:2c:65:df:3b:b5:0f:1d:e0:63:18:a5:e4:0d:
                    95:7e:59:fd:4a:6e:3a:48:d1:2f:7c:78:71:ed:e6:
                    01:71:c8:ce:93:0f:67:9b:9d:81:aa:80:df:8e:c0:
                    f9:86:c9:b8:a8:4f:c7:82:29:6e:05:e9:fa:04:99:
                    6e:1a:17:45:50:92:c7:01:74:e2:ae:b2:dd:e5:25:
                    7d:f9:14:85:bc:24:e8:31:38:03:3d:db:ef:b6:24:
                    13:28:6e:4c:d2:fa:e2:02:c9:0c:e8:e1:e8:aa:80:
                    28:f5:24:3d:5b:84:40:e0:63:ec:d4:4b:6b:55:53:
                    83:b5:84:ff:bb:94:c0:6d:bc:fd:f0:99:17:be:41:
                    0a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F5:41:82:34:4E:3B:6B:3F:9C:E4:27:F6:9A:4C:28:89:8B:3D:58
            X509v3 Authority Key Identifier:
                keyid:FF:F8:DD:08:B3:EB:55:66:73:63:E9:1A:9D:20:15:48:D7:4D:BC:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/12BmCufNcKH4uRUH9CeSn1ed6pmBoizQa9tpCzgdVPR6/0/FFF8DD08B3EB55667363E91A9D201548D74DBC5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FFF8DD08B3EB55667363E91A9D201548D74DBC5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/12BmCufNcKH4uRUH9CeSn1ed6pmBoizQa9tpCzgdVPR6/0/323830343a353062303a3a2f33322d3438203d3e20323638343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:50b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:0a:32:23:19:c8:2a:88:04:e8:5b:97:c9:67:31:11:04:9c:
         53:0c:02:bf:33:70:27:e4:c3:99:b0:eb:d4:d6:bc:d8:1e:a6:
         3b:bf:17:80:f2:ab:7a:0e:85:10:8d:14:b2:3e:9d:77:6e:ea:
         bf:34:e5:15:ff:31:21:7b:4c:23:49:bf:a3:94:19:68:0a:ef:
         dc:4d:05:65:44:81:10:42:15:17:33:86:62:4d:59:28:a5:d7:
         d0:bb:2e:9c:64:68:9e:7a:3a:21:72:5e:d4:e2:56:5c:6b:96:
         63:a5:00:51:73:ea:f9:6a:46:b7:ce:7d:f2:c2:3f:5c:26:79:
         8f:de:4c:06:80:1b:c5:f3:d4:13:97:2e:3f:a4:86:42:63:b1:
         8e:c3:d1:1e:1b:ae:db:38:5a:ac:8c:88:74:b6:57:2f:7b:8b:
         6b:8e:dc:52:bb:b2:da:70:d2:2b:49:23:d0:7a:e3:5c:67:61:
         99:23:7e:09:3a:1c:64:6c:08:be:05:6d:72:14:16:f1:80:64:
         60:e8:b4:25:ae:1c:66:d7:2a:34:10:3c:bb:5a:73:1a:91:55:
         da:60:a9:df:51:55:38:1c:89:dd:c5:23:82:4a:b4:19:36:df:
         c3:cd:35:6b:d3:86:70:a1:48:bd:8c:d5:54:72:c7:aa:bb:c9:
         33:3e:23:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org