Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a343530303a3a2f34302d3430203d3e203533303138.roa
File:                     323830343a333534633a343530303a3a2f34302d3430203d3e203533303138.roa (raw, json)
Hash identifier:          HglhojIjVSZBrRCPflQgvi37doPQwnHSRXtsLtOzYaI=
Subject key identifier:   F4:9F:C6:40:B5:3A:D7:25:C4:54:F7:AB:39:13:DC:75:35:25:52:96
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       4ADEDD37735A7D35252E8647F419D1C458097C47
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a343530303a3a2f34302d3430203d3e203533303138.roa
Signing time:             Fri 08 Mar 2024 19:00:18 +0000
ROA not before:           Fri 08 Mar 2024 18:55:18 +0000
ROA not after:            Fri 07 Mar 2025 19:00:18 +0000
asID:                     53018
IP address blocks:        2804:354c:4500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:de:dd:37:73:5a:7d:35:25:2e:86:47:f4:19:d1:c4:58:09:7c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar  8 18:55:18 2024 GMT
            Not After : Mar  7 19:00:18 2025 GMT
        Subject: CN=F49FC640B53AD725C454F7AB3913DC7535255296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:af:8f:b7:98:e2:36:d0:de:34:77:ee:ec:45:
                    54:a4:52:9f:d2:df:20:39:df:68:42:40:33:0a:ca:
                    3d:5a:59:41:bc:47:04:3c:cc:6f:0e:37:1f:a9:af:
                    48:b2:e7:43:f3:65:aa:d6:51:5a:b0:be:82:9e:fd:
                    41:d7:da:f3:06:36:7d:4d:8d:86:69:df:5c:f2:85:
                    ae:bc:e7:0c:48:3f:41:ad:b1:ef:92:23:89:ab:8a:
                    61:ef:43:84:e3:0a:29:04:d1:8c:77:cf:2f:7d:d3:
                    bc:f4:42:fd:75:54:8d:f3:3d:b0:9f:35:31:1b:9c:
                    f6:d4:bc:76:c2:d9:58:c8:f6:dc:15:80:01:87:02:
                    e4:e2:98:25:dd:15:30:70:93:84:2b:2c:37:4c:95:
                    cd:cc:09:ee:15:13:3f:84:79:98:b4:dc:ea:6e:bd:
                    45:95:ac:95:0a:ca:3d:0b:94:0d:68:67:15:05:28:
                    91:99:5f:db:83:65:e1:6d:ca:12:30:29:35:d8:8f:
                    3d:28:38:8f:78:28:bd:15:a2:e4:4e:19:99:a3:47:
                    d3:53:c3:de:6a:04:09:4b:1e:cc:52:1b:6e:ab:3e:
                    00:d3:1b:b3:35:79:00:f3:c9:1e:e5:23:c8:1a:71:
                    d7:99:c2:2f:58:6a:9c:ad:cd:f5:55:d0:3d:2a:37:
                    65:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9F:C6:40:B5:3A:D7:25:C4:54:F7:AB:39:13:DC:75:35:25:52:96
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a343530303a3a2f34302d3430203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:354c:4500::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:0c:6c:60:16:47:a4:a3:4e:6e:f5:f4:16:9a:96:b0:28:0b:
         c6:b1:56:fb:d6:97:de:ce:33:82:c5:0f:3a:3a:86:75:fb:81:
         de:7e:2b:47:18:25:a8:34:a8:f5:f7:42:31:76:65:1d:a8:cf:
         9c:ea:64:c3:13:bc:b8:6c:85:2a:ef:98:b4:4c:9f:2a:57:f2:
         6a:98:8d:af:65:68:5b:6a:48:c0:6d:2b:57:99:33:fc:36:7f:
         4a:8e:2d:2c:ed:e5:ec:fd:41:4d:36:b4:9c:6e:d7:b1:77:a1:
         00:f5:3b:45:1d:b8:71:28:13:76:46:c8:34:e4:05:77:19:0a:
         16:82:45:1e:ba:ea:21:f4:fa:64:df:8a:65:fb:44:88:7d:f4:
         24:7a:b3:49:5b:75:0a:a9:c2:e0:a0:3e:70:46:46:d9:00:f3:
         ce:87:1f:f7:88:38:02:ad:7f:44:65:b3:a6:57:e7:d7:d4:9c:
         80:5f:27:11:91:04:6c:53:94:84:28:a2:a8:7a:5d:53:79:f6:
         c8:6b:48:6d:5e:59:eb:4c:4f:f4:55:a4:d6:a4:86:94:77:85:
         72:db:ef:8d:97:0c:97:18:ab:25:55:77:6f:fa:c5:d9:99:cd:
         c6:a0:7d:a9:98:1a:05:ed:4d:5c:7b:a2:34:2d:1c:be:3d:a8:
         1b:9f:c7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org