Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a383630303a3a2f34302d3430203d3e203533303138.roa
File:                     323830343a333534633a383630303a3a2f34302d3430203d3e203533303138.roa (raw, json)
Hash identifier:          OnM/4ownfLl9YMma2gx0t+TUV7yejGpDTtT58HiN2kg=
Subject key identifier:   16:D8:68:5F:1A:C8:E9:FA:B0:D1:90:56:F5:E0:CD:6C:FD:58:2F:4F
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       175B54BB63E50A6E8AC8DEFAA5E9AD8E70505143
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a383630303a3a2f34302d3430203d3e203533303138.roa
Signing time:             Fri 08 Mar 2024 19:00:24 +0000
ROA not before:           Fri 08 Mar 2024 18:55:24 +0000
ROA not after:            Fri 07 Mar 2025 19:00:24 +0000
asID:                     53018
IP address blocks:        2804:354c:8600::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5b:54:bb:63:e5:0a:6e:8a:c8:de:fa:a5:e9:ad:8e:70:50:51:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar  8 18:55:24 2024 GMT
            Not After : Mar  7 19:00:24 2025 GMT
        Subject: CN=16D8685F1AC8E9FAB0D19056F5E0CD6CFD582F4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:79:15:bd:e0:d1:f8:95:10:80:15:7e:da:c1:
                    c4:67:4f:4d:3c:05:e3:21:03:00:52:61:36:8c:42:
                    9f:05:ee:03:f3:fa:5c:6a:2b:f2:93:0d:92:dc:36:
                    91:cd:59:cd:5a:1b:25:5d:37:95:da:44:5f:0c:29:
                    ec:ea:04:ab:6b:14:bd:4d:23:61:d9:c6:26:33:13:
                    03:3a:b9:f0:f5:83:f4:b1:c2:38:f6:35:85:b2:1f:
                    bd:06:c6:48:26:14:b3:a9:20:68:7a:46:74:65:3e:
                    60:ce:5d:42:59:98:e2:ba:0a:f9:35:2d:5b:4d:ff:
                    27:c8:43:a9:a3:ab:27:89:31:5e:3f:53:de:cb:32:
                    46:a3:c0:91:dc:1f:c2:a3:69:33:a3:07:0c:a8:44:
                    de:6d:0b:42:4f:80:40:ee:41:f7:63:04:bf:dd:db:
                    f8:73:b0:92:73:a1:b8:ee:7f:72:0b:ef:45:f6:cd:
                    d4:42:3c:36:c5:6d:c7:86:89:09:21:72:3c:da:7a:
                    92:f6:bf:e0:17:81:0b:59:04:e1:1f:6a:35:3d:5d:
                    bb:f5:c5:b0:05:fd:66:16:7f:6d:ba:b4:fa:f0:2e:
                    3d:27:26:8a:cd:c4:92:01:f5:cc:3b:58:94:5e:0b:
                    11:d6:8a:dc:c2:49:d1:73:c2:e8:7c:df:d0:5c:94:
                    62:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D8:68:5F:1A:C8:E9:FA:B0:D1:90:56:F5:E0:CD:6C:FD:58:2F:4F
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a383630303a3a2f34302d3430203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:354c:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:eb:42:77:48:3e:a6:9f:85:c7:29:8d:cf:60:d6:da:a7:2a:
         6b:37:fa:f5:84:8d:6d:5d:78:80:b7:7b:07:e0:ba:0e:d7:63:
         74:af:78:be:45:f8:17:69:b7:10:4e:5b:66:c7:07:3b:39:8f:
         e7:d8:f3:ca:3c:5b:cd:75:6b:42:26:e7:4a:cb:64:73:3b:00:
         ce:b2:ca:18:21:8d:e6:26:ef:25:a2:66:35:ed:dd:73:d8:c0:
         ed:2b:89:2e:c0:e7:f8:f0:90:9e:0e:16:7e:66:8e:a5:5d:83:
         8b:ac:dd:ab:cf:ad:c1:4c:8f:b2:ac:5f:68:81:cf:0a:60:ec:
         f7:f7:44:26:bd:c9:24:d3:06:1a:57:5a:b7:2a:73:a3:f9:1e:
         69:01:ec:03:e1:6b:1e:79:07:e4:5b:36:68:c5:33:e9:c6:19:
         73:fa:28:59:c0:9d:57:99:7f:05:25:b9:57:73:50:d7:d0:7f:
         ed:75:f9:51:17:c7:47:11:ff:83:28:c9:35:0c:da:32:ef:58:
         dd:a8:8b:7d:36:94:72:76:23:c8:c1:13:62:4d:df:f0:15:01:
         01:36:60:fe:ae:4b:75:7d:78:5f:14:14:a9:10:b1:16:91:a0:
         c2:93:75:b1:44:87:12:9c:78:1a:19:cf:d3:4f:c6:89:0b:d4:
         23:50:29:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org