Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/323830343a313638303a3a2f33322d3336203d3e20323633323839.roa
File:                     323830343a313638303a3a2f33322d3336203d3e20323633323839.roa (raw, json)
Hash identifier:          nyCBpaDtE7Jkygld9BRrfAsasLISZKnXUjIq1QzatfA=
Subject key identifier:   3B:0D:2A:A0:C5:34:61:30:10:7E:21:3A:D0:F7:9B:79:D2:E1:B7:E8
Certificate issuer:       /CN=FD2B57412B07A6460C9540EC3F4E51503B32F212
Certificate serial:       35D0543941AFFFD799F530603B56E4EB74AF3A03
Authority key identifier: FD:2B:57:41:2B:07:A6:46:0C:95:40:EC:3F:4E:51:50:3B:32:F2:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD2B57412B07A6460C9540EC3F4E51503B32F212.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/323830343a313638303a3a2f33322d3336203d3e20323633323839.roa
Signing time:             Mon 03 Apr 2023 20:28:03 +0000
ROA not before:           Mon 03 Apr 2023 20:23:03 +0000
ROA not after:            Mon 01 Apr 2024 20:28:03 +0000
asID:                     263289
IP address blocks:        2804:1680::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:d0:54:39:41:af:ff:d7:99:f5:30:60:3b:56:e4:eb:74:af:3a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD2B57412B07A6460C9540EC3F4E51503B32F212
        Validity
            Not Before: Apr  3 20:23:03 2023 GMT
            Not After : Apr  1 20:28:03 2024 GMT
        Subject: CN=3B0D2AA0C5346130107E213AD0F79B79D2E1B7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:48:4d:c3:db:a3:25:27:2f:53:f0:22:55:91:
                    2f:ab:a5:1e:a0:5d:ba:06:c8:4a:e7:1a:7e:9c:b8:
                    5c:00:d6:36:b2:53:4b:8b:a8:d5:95:fd:88:51:f6:
                    24:05:e8:0b:0c:75:84:02:04:1c:86:95:4e:d6:fa:
                    ad:29:23:f7:b1:a8:d4:22:16:17:06:fd:e6:6a:6f:
                    aa:0d:b5:c8:88:19:53:a0:b0:ec:09:1e:f9:dd:0c:
                    2e:61:f6:9f:fd:aa:23:05:59:fc:aa:d9:bd:e1:4c:
                    8a:65:2a:bc:8d:61:70:1c:7f:61:c3:99:4a:e5:2a:
                    68:d6:ce:72:a7:ed:a7:46:f2:9b:3c:98:cd:3b:cb:
                    79:16:bd:61:55:43:c0:d0:e5:d1:23:d8:f6:6b:22:
                    f4:bf:8b:e2:f8:31:1d:f3:50:44:92:2e:eb:ce:06:
                    1f:e4:d7:79:57:82:f9:f9:9d:02:51:42:16:ac:f9:
                    70:ff:16:7c:8f:77:b9:90:ae:31:f4:e2:36:f2:5a:
                    1a:f2:52:f9:89:a2:39:e2:16:d1:f6:eb:84:25:76:
                    2c:27:1b:08:80:5a:3c:fd:2b:f3:fc:e3:fc:3c:bb:
                    25:87:50:e7:e2:d5:a7:c5:31:e5:03:b5:0f:29:13:
                    e0:dd:fa:17:c4:35:2b:f1:ab:06:3f:fa:5f:c6:13:
                    96:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0D:2A:A0:C5:34:61:30:10:7E:21:3A:D0:F7:9B:79:D2:E1:B7:E8
            X509v3 Authority Key Identifier:
                keyid:FD:2B:57:41:2B:07:A6:46:0C:95:40:EC:3F:4E:51:50:3B:32:F2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/FD2B57412B07A6460C9540EC3F4E51503B32F212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD2B57412B07A6460C9540EC3F4E51503B32F212.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/323830343a313638303a3a2f33322d3336203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1680::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:d7:e1:f9:82:20:88:66:8c:b2:0f:bd:ec:85:f3:d0:56:e5:
         00:dd:03:d2:fa:d5:80:96:08:55:ef:c7:5c:44:45:0b:0c:f7:
         6b:36:b3:be:a4:2e:9d:f4:44:21:de:61:82:e6:74:52:44:78:
         a9:89:fb:32:92:24:8a:5d:92:d7:b2:d9:d5:75:a6:f5:5d:1a:
         22:60:e5:57:e5:dd:86:56:fc:c1:5b:91:c8:21:e1:64:69:9d:
         91:e4:62:d4:a3:45:77:01:8e:87:41:4d:0a:3e:8b:fb:6c:f6:
         0d:e1:6d:31:f9:b5:28:53:aa:35:2b:11:13:68:f9:1d:a8:f6:
         7e:bc:02:37:de:5f:d8:0e:f1:3f:44:99:17:28:e6:ae:c6:37:
         06:2a:0e:a4:34:9a:a5:ac:62:f2:df:b3:23:6b:03:51:95:43:
         ad:4f:42:03:9e:3d:ca:75:3a:2a:56:c0:25:84:97:0b:57:6b:
         34:44:9b:39:50:92:18:c9:df:66:37:56:e2:cf:f6:f6:5f:ff:
         88:a3:38:0b:53:a6:bd:74:e1:9a:ce:65:c5:e4:1f:25:bc:bc:
         25:25:c9:59:e7:70:dd:c8:ef:d8:63:de:b1:dc:6d:16:01:3d:
         90:b1:a5:95:91:a9:43:d3:96:8e:89:a3:15:97:2d:45:e5:38:
         42:3e:63:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org