Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/323830343a346133343a3a2f33342d3334203d3e20323637323234.roa
File:                     323830343a346133343a3a2f33342d3334203d3e20323637323234.roa (raw, json)
Hash identifier:          WDRVAMSeMjCnfE8UMpeWf+NQptmLTN8hkM9fQVFYOOY=
Subject key identifier:   53:DE:4B:DF:AE:98:B0:53:2C:F2:61:26:42:06:FC:3A:E2:2C:43:50
Certificate issuer:       /CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
Certificate serial:       41089FAA098BBD79937CDCE290445826FDAF85CD
Authority key identifier: FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/323830343a346133343a3a2f33342d3334203d3e20323637323234.roa
Signing time:             Tue 14 Nov 2023 19:34:04 +0000
ROA not before:           Tue 14 Nov 2023 19:29:04 +0000
ROA not after:            Tue 12 Nov 2024 19:34:04 +0000
asID:                     267224
IP address blocks:        2804:4a34::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:08:9f:aa:09:8b:bd:79:93:7c:dc:e2:90:44:58:26:fd:af:85:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
        Validity
            Not Before: Nov 14 19:29:04 2023 GMT
            Not After : Nov 12 19:34:04 2024 GMT
        Subject: CN=53DE4BDFAE98B0532CF261264206FC3AE22C4350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b1:47:10:d3:9f:bc:4c:50:35:26:1c:14:35:
                    3f:12:77:b8:31:8d:4c:69:4b:52:04:65:c4:21:c6:
                    a6:6b:76:a5:e1:02:ff:8b:fe:7d:1f:ff:e6:a9:75:
                    cf:fd:f1:b4:67:f0:57:38:7f:f0:d0:48:18:d0:39:
                    67:4d:65:8d:2e:bc:0a:d4:93:0c:97:6c:10:af:3c:
                    95:f8:8e:c4:01:48:17:ea:ef:a4:cc:bb:f5:bd:81:
                    47:57:ff:93:fe:64:f0:93:7c:4a:72:8d:27:76:02:
                    29:c7:07:d0:4e:3c:1a:c5:f9:62:74:3c:06:30:ae:
                    6a:a4:6b:fb:09:3f:6b:1e:cd:2b:5b:c6:f7:6c:5e:
                    0f:0c:ef:d4:a8:e9:69:19:d2:55:ef:4f:94:a8:59:
                    11:85:b6:9b:c4:a8:e8:75:70:93:1d:f3:1d:fc:ea:
                    dd:27:31:21:b9:27:43:ac:e3:c7:ba:83:c1:b9:79:
                    4b:bb:8f:04:77:a3:f6:cc:7a:67:d6:48:dd:52:2c:
                    db:c6:b0:14:07:c1:62:cd:af:92:e0:a2:33:8d:63:
                    fb:42:b3:85:d7:ff:48:66:d8:0d:eb:e5:6b:49:47:
                    bf:44:36:e9:e9:7c:ea:45:48:2c:5a:bd:8d:d1:d3:
                    3a:d4:9b:27:b9:e4:d7:cf:f3:68:6a:ea:77:5c:11:
                    97:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DE:4B:DF:AE:98:B0:53:2C:F2:61:26:42:06:FC:3A:E2:2C:43:50
            X509v3 Authority Key Identifier:
                keyid:FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/323830343a346133343a3a2f33342d3334203d3e20323637323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a34::/34

    Signature Algorithm: sha256WithRSAEncryption
         cb:72:a5:08:7a:89:54:50:15:b8:69:48:25:77:c1:be:88:6a:
         1e:09:b7:8c:54:bb:fa:85:a9:ee:04:7b:93:e4:dd:25:1e:13:
         77:d5:ab:42:62:d8:20:33:92:51:ed:09:b0:df:a4:b1:78:1d:
         f1:7c:cf:53:bb:38:8c:a8:b0:24:d4:bc:3c:10:51:c4:46:99:
         fc:17:66:37:f4:8a:2d:81:27:77:43:d2:50:70:9e:90:88:38:
         d2:ba:63:1c:7b:20:9a:a6:00:ed:68:72:ce:ca:01:33:9c:e2:
         ee:62:ea:48:b3:9c:18:ba:84:e9:6c:cd:e8:b1:63:31:0f:e9:
         4c:7d:69:9a:d0:89:ce:52:1b:7e:67:2b:0c:ea:e4:0b:e5:f4:
         50:7b:11:0e:fe:c0:0d:9e:e7:68:55:fa:88:a0:33:80:de:86:
         f3:ef:dc:3b:43:ae:bf:d3:3c:df:9b:8f:4b:b4:2b:e6:70:52:
         33:9f:46:e2:f7:aa:b8:aa:c4:9c:cd:82:16:af:ce:2b:54:89:
         66:7a:cc:b6:c0:24:0b:27:99:d7:6b:e7:c7:59:24:bd:56:29:
         fd:14:c7:12:90:3e:a6:d7:dc:b6:df:6c:7a:ff:c1:29:b4:ea:
         37:46:42:d1:63:17:69:6b:b8:44:de:30:58:e0:80:80:b0:f8:
         f8:30:41:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org