Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/323830343a3530303a3a2f33322d3332203d3e20323632343835.roa
File:                     323830343a3530303a3a2f33322d3332203d3e20323632343835.roa (raw, json)
Hash identifier:          E3aLLX7/whswFGXPs3SwkswwY4i56diIHSCl7pc2p3o=
Subject key identifier:   8F:A3:28:22:F3:CD:8E:79:A2:CF:C3:F5:76:40:66:EC:92:72:9D:01
Certificate issuer:       /CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
Certificate serial:       23EE7ADE12A35310E9F016AF6F41D1E563495C09
Authority key identifier: FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/323830343a3530303a3a2f33322d3332203d3e20323632343835.roa
Signing time:             Thu 04 Apr 2024 12:35:46 +0000
ROA not before:           Thu 04 Apr 2024 12:30:46 +0000
ROA not after:            Thu 03 Apr 2025 12:35:46 +0000
asID:                     262485
IP address blocks:        2804:500::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ee:7a:de:12:a3:53:10:e9:f0:16:af:6f:41:d1:e5:63:49:5c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA06964B14210336C735AA11909EFBBF0C9FA7BD
        Validity
            Not Before: Apr  4 12:30:46 2024 GMT
            Not After : Apr  3 12:35:46 2025 GMT
        Subject: CN=8FA32822F3CD8E79A2CFC3F5764066EC92729D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:8b:cc:e3:43:49:d3:1e:fa:ed:78:61:55:
                    49:f6:b9:e1:99:cf:b6:75:3a:9e:d5:b2:08:e3:61:
                    26:ee:51:b6:b0:33:0e:fb:98:85:e3:c9:dd:60:26:
                    53:10:2e:f9:e0:27:76:e5:26:6d:72:84:17:1d:a6:
                    ab:8c:14:55:49:ac:78:df:af:b8:89:16:0f:ab:55:
                    92:52:3b:df:2f:7b:f4:f4:90:7b:70:da:4f:f3:b4:
                    da:6d:a2:73:23:40:74:e2:f9:00:74:ae:ea:6e:8d:
                    bb:d5:6b:1d:5d:e1:ef:90:e5:55:b0:0e:58:c0:35:
                    25:09:d9:c4:67:4d:e4:a8:f1:3c:85:6f:f1:b8:cf:
                    1c:4b:08:f7:ad:52:51:91:67:31:4c:26:b1:fe:ec:
                    e1:d4:21:31:a9:54:45:03:dd:da:24:58:b0:fa:f8:
                    a3:5e:1d:aa:3c:ef:95:e0:25:32:66:78:dc:ad:8f:
                    0a:34:ae:b2:43:b8:29:85:f0:9c:41:63:9b:cd:89:
                    58:48:af:0d:10:11:d9:2c:8e:93:ac:2f:8c:7d:8b:
                    ab:d8:71:58:fd:05:bb:01:1d:e4:10:74:bd:ac:e2:
                    fc:4d:89:72:a5:2b:86:23:57:01:1e:cd:93:60:98:
                    45:83:6a:a9:6b:a1:cd:f4:f8:d3:60:2a:8f:54:43:
                    b0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A3:28:22:F3:CD:8E:79:A2:CF:C3:F5:76:40:66:EC:92:72:9D:01
            X509v3 Authority Key Identifier:
                keyid:FA:06:96:4B:14:21:03:36:C7:35:AA:11:90:9E:FB:BF:0C:9F:A7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA06964B14210336C735AA11909EFBBF0C9FA7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ewxmo2DNXG6RxgwRgRAjCNBnhqGTN6E49UJXodA2r58/1/323830343a3530303a3a2f33322d3332203d3e20323632343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:500::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:14:80:e3:1d:1d:2c:03:cc:fe:87:71:5d:4b:cf:e7:bc:6d:
         52:5f:42:7c:72:bc:e0:36:99:ba:5d:0b:08:7a:79:e8:b6:a8:
         ac:3d:ee:66:d0:2a:5d:cc:0b:7e:fd:25:c2:e8:f9:4d:c0:cd:
         85:d0:21:1a:e7:01:f7:53:9d:89:b9:b2:1f:66:0a:12:a8:5e:
         ce:bd:39:af:45:29:88:ad:10:07:d0:38:83:d3:29:36:3e:92:
         dd:f8:95:88:2f:97:0e:10:e4:2d:12:20:ac:3b:d6:1c:62:31:
         0c:84:b5:17:75:39:89:45:ad:86:da:60:74:49:d3:cc:ee:bf:
         e7:ca:29:b7:77:95:3d:cc:3b:00:f0:44:fa:54:2a:44:58:2e:
         44:c8:7f:27:fc:18:a3:a9:0e:51:3f:29:6b:5a:fb:33:0c:87:
         7f:79:75:1e:55:2d:02:37:60:55:dc:f6:3b:68:88:62:a1:aa:
         07:51:e0:cb:f4:e4:70:72:16:ec:5e:93:dc:b4:57:e6:b4:df:
         73:41:e1:ae:8a:97:f5:ed:31:ed:31:64:35:8d:f5:b3:5b:f2:
         9e:11:af:b0:c7:ab:ac:c5:65:50:34:49:b8:3a:29:a7:00:ba:
         15:7e:31:cf:53:74:43:d1:2a:05:f1:d3:fb:71:c9:01:5f:aa:
         d8:f4:03:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-ams.rpki-client.org