Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0/323830343a353131633a3a2f33322d3438203d3e20323638343331.roa
File:                     323830343a353131633a3a2f33322d3438203d3e20323638343331.roa (raw, json)
Hash identifier:          kuhA5k7FbzzBRPJvx9o1pKVCdjoQ+o0J4ko5j7q5wsI=
Subject key identifier:   BE:90:FF:76:9F:A4:CA:57:C4:E4:91:A3:E3:8F:A0:7A:B0:41:70:7C
Certificate issuer:       /CN=F5B1E2DE3922BE45CD0899545537337BDA94DC01
Certificate serial:       2B6087A2D38F798C87562C8765940B68C7B69011
Authority key identifier: F5:B1:E2:DE:39:22:BE:45:CD:08:99:54:55:37:33:7B:DA:94:DC:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5B1E2DE3922BE45CD0899545537337BDA94DC01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0/323830343a353131633a3a2f33322d3438203d3e20323638343331.roa
Signing time:             Fri 01 Dec 2023 18:01:20 +0000
ROA not before:           Fri 01 Dec 2023 17:56:20 +0000
ROA not after:            Fri 29 Nov 2024 18:01:20 +0000
asID:                     268431
IP address blocks:        2804:511c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:60:87:a2:d3:8f:79:8c:87:56:2c:87:65:94:0b:68:c7:b6:90:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5B1E2DE3922BE45CD0899545537337BDA94DC01
        Validity
            Not Before: Dec  1 17:56:20 2023 GMT
            Not After : Nov 29 18:01:20 2024 GMT
        Subject: CN=BE90FF769FA4CA57C4E491A3E38FA07AB041707C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:29:39:43:15:59:28:54:d4:8b:db:92:cd:
                    f6:37:09:55:d5:b5:10:41:b8:c6:57:5c:37:9d:38:
                    4c:4b:1e:fd:46:15:6a:99:8f:86:09:dd:cc:65:cf:
                    08:65:b9:1d:92:fe:6b:73:a2:6d:2d:a0:4d:ee:0e:
                    6a:ba:47:75:aa:b0:c9:a8:f7:df:28:d1:90:4f:20:
                    64:a1:67:45:f8:0f:52:6b:c4:80:7b:de:4f:ee:89:
                    d1:bc:9e:10:74:4e:eb:7f:5a:0b:37:00:d3:62:7f:
                    e5:50:e8:5a:13:ab:4f:41:88:21:37:b8:b7:01:58:
                    07:70:d3:a7:6d:d9:68:60:a2:36:ae:e2:5f:f8:87:
                    5d:dc:e0:87:60:dc:55:6b:dc:0f:9e:53:23:13:8b:
                    63:d3:92:52:e2:df:32:2e:51:0b:61:9c:a3:7c:eb:
                    49:65:74:e9:81:87:5b:c7:5d:f1:73:49:14:dc:5c:
                    39:ae:06:4c:25:e0:9e:f4:cc:aa:d7:73:e0:b1:72:
                    76:3f:97:9c:e1:d1:c7:d7:36:0d:06:80:5c:f6:0f:
                    c4:fc:5f:b4:20:dd:84:84:10:ca:42:74:47:5e:c5:
                    7e:47:b4:a8:0c:66:42:bc:62:db:1a:38:d2:12:04:
                    e1:a4:51:79:73:e6:1a:31:35:54:b9:5c:a3:10:0f:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:90:FF:76:9F:A4:CA:57:C4:E4:91:A3:E3:8F:A0:7A:B0:41:70:7C
            X509v3 Authority Key Identifier:
                keyid:F5:B1:E2:DE:39:22:BE:45:CD:08:99:54:55:37:33:7B:DA:94:DC:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0/F5B1E2DE3922BE45CD0899545537337BDA94DC01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5B1E2DE3922BE45CD0899545537337BDA94DC01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KJayEDRAcduPvozjXnLf14arHW7i2KFtmaeAmhsShJe/0/323830343a353131633a3a2f33322d3438203d3e20323638343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:511c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:5f:df:36:34:a2:65:5d:79:f5:58:05:4f:20:c3:ba:7a:d1:
         80:a7:0b:80:9c:5b:9b:0a:c9:ee:d6:7c:1c:0b:fc:b3:f9:30:
         b5:25:78:a9:0a:8b:1a:18:5f:ab:ca:0e:6e:11:a7:da:0b:30:
         8a:51:f2:6b:58:cb:63:c9:73:0c:7d:32:c5:36:d1:41:c8:18:
         5e:c5:d5:db:a6:1f:ec:20:eb:ae:47:e9:ab:9c:57:87:eb:51:
         7c:d8:c1:0c:72:62:8f:ca:61:2c:36:4a:bf:4b:45:cf:57:78:
         25:c8:8e:40:2c:82:0f:0c:2d:57:78:76:50:28:1a:7b:3f:6b:
         46:89:78:1d:a7:6c:44:b8:f7:23:90:5c:a8:4b:36:a3:3e:ed:
         22:51:f3:e0:59:84:f3:8c:f2:b1:22:51:43:20:cd:74:ab:c3:
         d2:ca:84:2d:9f:8c:fd:b7:1d:b3:08:e1:37:ba:8e:b5:a9:8c:
         3e:ee:30:f9:88:5b:1e:69:15:93:07:fd:73:dd:86:82:9e:39:
         66:5d:39:50:9b:80:dd:20:4a:89:e8:f4:7d:74:5e:4b:dc:4e:
         1a:27:32:6b:ab:c6:48:f0:55:73:fb:03:e1:a3:b9:b1:ad:5a:
         d3:81:5e:98:da:e8:46:f8:75:2d:0a:fe:a6:70:7d:d1:1b:6c:
         af:7a:3a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org