Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/323830343a313433343a3a2f33322d3438203d3e20323632343932.roa
File:                     323830343a313433343a3a2f33322d3438203d3e20323632343932.roa (raw, json)
Hash identifier:          htw4u8T+YYjMp6b4b+PCRt0YFgkbydLnnfnVCtlGwKs=
Subject key identifier:   AE:BD:8F:D1:AA:B6:9D:7E:00:6B:18:94:53:7D:94:87:A2:37:0C:C6
Certificate issuer:       /CN=FB4BF9A320697AA48C489FC1AFF256419DED5EE1
Certificate serial:       40CC51B61333754ACC981ECE856CF59ABE47A3B9
Authority key identifier: FB:4B:F9:A3:20:69:7A:A4:8C:48:9F:C1:AF:F2:56:41:9D:ED:5E:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/323830343a313433343a3a2f33322d3438203d3e20323632343932.roa
Signing time:             Thu 11 Apr 2024 20:00:41 +0000
ROA not before:           Thu 11 Apr 2024 19:55:41 +0000
ROA not after:            Thu 10 Apr 2025 20:00:41 +0000
asID:                     262492
IP address blocks:        2804:1434::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:cc:51:b6:13:33:75:4a:cc:98:1e:ce:85:6c:f5:9a:be:47:a3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4BF9A320697AA48C489FC1AFF256419DED5EE1
        Validity
            Not Before: Apr 11 19:55:41 2024 GMT
            Not After : Apr 10 20:00:41 2025 GMT
        Subject: CN=AEBD8FD1AAB69D7E006B1894537D9487A2370CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:92:71:11:c1:f3:e6:57:1d:a1:45:f2:86:4e:
                    7b:e6:f8:ce:a9:20:f1:ac:b5:b1:25:a0:01:77:2f:
                    18:0a:c7:3d:f7:64:12:47:f0:3c:37:ba:9e:84:00:
                    d5:5f:08:fd:df:02:88:5b:a2:ac:97:30:07:d9:b1:
                    44:ae:25:16:bf:cd:74:56:9e:ea:e2:29:aa:94:a3:
                    cb:f7:44:a3:58:23:03:28:c6:ad:3d:3f:fd:5c:15:
                    17:c6:00:19:6a:eb:bf:3a:19:39:49:54:42:64:78:
                    7e:5c:5c:d5:b8:c8:57:dd:12:f6:f5:89:09:71:c3:
                    3b:fa:ac:84:9c:c8:ed:f1:39:69:74:8f:d6:e3:c5:
                    ea:85:e1:05:74:92:a8:e4:f5:f0:81:34:80:cc:bd:
                    f3:41:47:d3:e9:6f:de:69:13:c2:21:73:aa:db:1b:
                    3a:0b:d8:8f:fe:00:97:3a:37:ba:af:f4:0a:26:b9:
                    70:ab:00:27:eb:16:bb:ff:b1:ef:fd:6c:48:4a:0f:
                    86:43:81:c6:c8:8b:79:6d:7b:cb:29:ea:8b:97:02:
                    cf:0e:b2:40:48:77:76:90:c9:7e:91:ef:24:53:b0:
                    3a:fa:35:1c:2a:3b:72:79:4c:34:67:30:f6:a8:79:
                    b8:b4:69:ef:58:3e:ee:1f:01:9e:4e:ad:45:01:80:
                    a0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BD:8F:D1:AA:B6:9D:7E:00:6B:18:94:53:7D:94:87:A2:37:0C:C6
            X509v3 Authority Key Identifier:
                keyid:FB:4B:F9:A3:20:69:7A:A4:8C:48:9F:C1:AF:F2:56:41:9D:ED:5E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4BF9A320697AA48C489FC1AFF256419DED5EE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kayhgF3MfpiXW51UmW4K32UHq1RJbe88e2VtPfwkpba/0/323830343a313433343a3a2f33322d3438203d3e20323632343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1434::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:c9:98:4e:35:09:52:a4:50:51:26:9e:3c:2d:9c:64:9c:b6:
         44:de:15:da:fd:d2:c7:53:48:aa:17:71:bf:20:3b:70:74:7d:
         77:d7:18:5a:cb:7d:4a:0c:4e:4b:79:3c:1c:06:79:44:64:3e:
         3e:41:69:ef:01:dd:29:84:6b:bb:7a:8f:08:ee:f5:68:f7:fe:
         bf:bf:75:1c:39:34:81:6d:3c:4e:d9:e4:88:72:37:96:96:99:
         97:11:a1:6f:bf:5a:d3:05:0a:7c:e7:c4:47:82:dc:3d:52:dc:
         31:e2:67:3d:ee:65:af:7b:a9:83:7b:57:39:35:b3:4b:53:9f:
         3f:60:f9:f4:56:c1:78:43:a2:9e:d1:72:12:1d:9a:e3:31:03:
         25:d6:4e:81:37:f0:d6:6d:80:41:22:6c:c5:8b:33:85:61:b8:
         37:e8:48:6c:89:c8:5a:0a:03:0a:bb:61:f1:4c:2e:f5:6e:4c:
         7e:71:f9:52:16:48:51:16:0f:07:6b:1b:be:1a:0d:4c:83:0d:
         be:52:b3:0f:6a:90:a1:e9:c0:06:40:96:a8:d5:43:14:99:74:
         ac:1d:01:47:32:9a:44:bc:6f:48:9e:20:6f:0c:5d:22:9e:06:
         c5:5a:4d:af:7c:29:a4:43:24:5f:6d:75:f7:f1:af:5b:93:ab:
         4a:4c:12:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org