Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/323830343a363439303a3a2f33322d3438203d3e20323639343335.roa
File:                     323830343a363439303a3a2f33322d3438203d3e20323639343335.roa (raw, json)
Hash identifier:          DFxBvdMhl2yhA9h2W/fBVhSyrOBrlO6gAtA0QLsLN9o=
Subject key identifier:   4A:91:71:67:8D:61:6E:E9:03:25:3A:AE:A9:5A:58:A5:8A:B1:4E:8B
Certificate issuer:       /CN=FB3862529E205770549D2C9C549C9466E5CB21B5
Certificate serial:       2E3C5DB07449758479857BD8079BA236563049D2
Authority key identifier: FB:38:62:52:9E:20:57:70:54:9D:2C:9C:54:9C:94:66:E5:CB:21:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB3862529E205770549D2C9C549C9466E5CB21B5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/323830343a363439303a3a2f33322d3438203d3e20323639343335.roa
Signing time:             Tue 23 Jan 2024 16:00:00 +0000
ROA not before:           Tue 23 Jan 2024 15:55:00 +0000
ROA not after:            Tue 21 Jan 2025 16:00:00 +0000
asID:                     269435
IP address blocks:        2804:6490::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:3c:5d:b0:74:49:75:84:79:85:7b:d8:07:9b:a2:36:56:30:49:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB3862529E205770549D2C9C549C9466E5CB21B5
        Validity
            Not Before: Jan 23 15:55:00 2024 GMT
            Not After : Jan 21 16:00:00 2025 GMT
        Subject: CN=4A9171678D616EE903253AAEA95A58A58AB14E8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:63:31:8c:a9:72:c9:51:69:af:0e:af:30:9e:
                    05:6a:16:ca:7e:8b:62:69:88:be:af:cb:e4:5e:32:
                    da:61:4a:b0:3a:bd:d6:db:8c:7c:a1:75:73:fd:18:
                    66:66:46:0a:d9:fd:ab:cd:1e:7d:9f:c7:c4:c9:a1:
                    b5:3f:92:ed:e2:a4:f4:13:9b:eb:12:27:2c:90:d5:
                    4a:b5:01:80:87:aa:99:f1:d0:d5:0f:89:69:e8:b3:
                    78:3c:32:b7:37:f8:02:25:6e:e6:51:71:5f:7d:5a:
                    e3:31:f2:5d:8f:8b:73:6e:55:e2:b4:db:c1:68:d3:
                    be:0c:03:3e:29:54:2e:2d:1e:79:e6:a4:64:6d:b5:
                    91:04:d2:63:c2:a9:6c:8b:9a:e0:2f:a3:05:4a:bd:
                    fc:f7:3f:5b:0a:61:26:05:1a:9d:cb:a2:4f:25:72:
                    14:bc:7a:a2:1c:df:c1:7d:6c:55:cd:3a:ff:95:12:
                    50:0c:2c:9c:ee:54:d9:ef:cb:9c:e0:d3:c5:de:04:
                    1e:66:25:78:1b:5f:69:08:60:53:bb:f7:63:0b:8f:
                    37:d9:aa:89:d2:52:d6:7d:e5:4f:77:a7:08:8a:8f:
                    38:00:42:dd:0c:ff:92:ec:14:bb:8f:18:da:11:a1:
                    13:11:a9:29:73:ac:fe:4d:df:02:33:89:eb:95:34:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:91:71:67:8D:61:6E:E9:03:25:3A:AE:A9:5A:58:A5:8A:B1:4E:8B
            X509v3 Authority Key Identifier:
                keyid:FB:38:62:52:9E:20:57:70:54:9D:2C:9C:54:9C:94:66:E5:CB:21:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/FB3862529E205770549D2C9C549C9466E5CB21B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB3862529E205770549D2C9C549C9466E5CB21B5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35gbHmLqTU6BobVqiwjVUq752yV25BboLhKi7vEYAPqd/0/323830343a363439303a3a2f33322d3438203d3e20323639343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6490::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:3b:14:34:e2:16:a4:58:e9:22:ef:84:d2:97:97:64:6e:22:
         15:3a:b8:1a:99:42:de:fc:27:f3:8d:bc:70:11:2a:e6:81:de:
         c1:69:a2:94:b0:da:80:ce:28:3c:40:79:d2:a8:30:2a:60:94:
         81:8f:bc:4b:ad:08:a4:ef:6e:fb:2f:9b:ba:27:6f:e2:a5:1b:
         4b:52:37:14:7f:2b:71:86:da:39:4c:20:32:02:f3:7d:a0:6a:
         4f:9c:50:ab:03:45:1d:bc:72:dd:de:6d:ec:9d:ff:2f:44:79:
         95:10:66:b8:18:01:56:7c:fc:f3:b1:23:7b:cd:aa:75:2e:a7:
         5b:38:f6:db:25:e3:f4:79:77:5f:e6:d0:9c:53:ed:01:37:a8:
         1c:74:d7:4e:a3:bc:de:fa:f4:b6:db:96:37:8e:aa:df:8e:25:
         a7:cb:94:d6:7a:3b:d4:6a:66:53:09:41:77:8f:d2:49:eb:bc:
         ff:90:63:db:84:f7:ec:6f:57:67:16:38:77:6d:b0:c9:0a:68:
         3d:d3:9e:d8:2a:50:fc:6d:76:96:ba:df:58:b9:85:81:52:b4:
         c6:d0:db:b8:e1:c8:47:24:9d:60:4d:ee:80:1d:ca:5e:bd:c5:
         ea:b1:cf:1b:de:ce:66:c5:0c:d8:60:3b:6a:b1:3e:32:86:c9:
         5b:78:80:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org