Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/323830343a313831343a633030303a3a2f33342d3334203d3e20323633323633.roa
File:                     323830343a313831343a633030303a3a2f33342d3334203d3e20323633323633.roa (raw, json)
Hash identifier:          ag0rY1KUC04rMJru5qnjZroUzFjoMGqnZzX8s+4hz4k=
Subject key identifier:   53:C8:8E:4C:8D:27:F6:40:65:59:6B:76:49:D8:BC:74:3C:96:7B:47
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       24733C7A39026AA00214355EFA58A8ED62139F69
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/323830343a313831343a633030303a3a2f33342d3334203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:00:01 +0000
ROA not before:           Tue 16 May 2023 11:55:01 +0000
ROA not after:            Tue 14 May 2024 12:00:01 +0000
asID:                     263263
IP address blocks:        2804:1814:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:73:3c:7a:39:02:6a:a0:02:14:35:5e:fa:58:a8:ed:62:13:9f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:55:01 2023 GMT
            Not After : May 14 12:00:01 2024 GMT
        Subject: CN=53C88E4C8D27F64065596B7649D8BC743C967B47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:93:e1:60:dd:9d:b5:6c:d0:20:d6:9e:a4:e7:
                    14:a8:25:8d:c5:b8:8d:41:70:ea:4d:75:58:74:2b:
                    8e:d0:c1:54:a9:04:d7:51:37:58:2f:af:3e:b3:e2:
                    2c:15:ba:99:45:b4:92:fd:e0:0a:b8:c5:3a:31:db:
                    c8:c6:54:45:ea:85:a3:e1:d6:7c:ab:7a:83:41:54:
                    7e:ac:04:e0:df:ea:e6:07:80:b0:46:88:81:7d:21:
                    7d:b4:de:82:08:eb:73:eb:a2:19:29:a3:0a:62:86:
                    6d:be:c7:c8:b4:85:e5:49:f5:d5:d8:95:0b:df:1f:
                    05:f0:f5:10:49:40:13:22:0e:be:74:48:4f:9c:94:
                    c9:5d:13:f4:40:3f:38:b6:8b:e6:c3:a2:d4:5e:27:
                    02:99:14:4d:9b:b0:c7:c4:da:75:8d:09:f2:e4:5f:
                    3d:c2:f5:4f:65:74:2e:bb:b4:e1:5b:8b:c5:d1:64:
                    91:9b:77:26:72:df:13:0e:af:d8:e9:57:03:e0:49:
                    eb:68:dd:1d:0a:a7:96:fd:51:04:6f:7a:b9:3c:93:
                    93:cc:db:87:3c:5d:9c:bc:99:5d:bd:2b:45:52:88:
                    05:d4:86:e3:cb:ba:1d:91:3f:7e:ec:82:b1:11:aa:
                    b3:52:36:b8:3e:2c:c5:6c:3a:1e:2c:28:e1:ff:b0:
                    85:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C8:8E:4C:8D:27:F6:40:65:59:6B:76:49:D8:BC:74:3C:96:7B:47
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/323830343a313831343a633030303a3a2f33342d3334203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1814:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         23:2c:02:29:08:91:69:3f:a9:aa:d6:da:e0:2e:35:a1:68:16:
         12:1f:f3:6d:b0:17:55:1c:5f:75:62:c9:2c:35:fa:b3:2b:7c:
         47:87:92:78:d5:4a:10:8e:9b:32:52:3d:b9:fb:b5:b4:2c:ae:
         85:ac:82:b0:fa:70:21:04:22:23:ab:06:2f:35:9a:46:c6:b9:
         b3:b7:16:30:ad:7e:2a:e0:ab:3c:de:f3:2f:42:a9:3a:9c:05:
         94:c6:b9:5b:49:b5:77:a6:f3:d6:36:4c:66:5a:91:b1:1c:8d:
         e2:cd:7e:38:09:b4:2c:94:63:41:95:93:8e:14:23:d0:74:10:
         ed:ce:c6:02:4e:7c:c8:59:15:9e:52:c4:33:28:ae:aa:71:d9:
         f7:88:df:38:40:b4:8a:20:7c:a5:c0:cc:da:8a:65:fa:30:80:
         61:c0:f5:a3:e6:15:67:09:13:6e:58:89:26:ca:4c:78:cc:dd:
         1f:cf:40:69:5e:3e:b5:c9:2b:67:fd:63:bb:a7:a3:ed:a8:b2:
         3d:29:9d:81:47:58:0a:c8:99:dc:eb:1b:89:2d:28:17:61:e2:
         a6:1e:05:d0:34:50:4a:4d:5b:c6:e5:22:a9:af:d2:5d:34:79:
         bb:49:c1:90:3c:2e:cd:da:d9:e1:14:52:2c:3f:37:b8:b1:39:
         4e:2e:2e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org