Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/323830343a323564303a3a2f33322d3332203d3e20323632363536.roa
File:                     323830343a323564303a3a2f33322d3332203d3e20323632363536.roa (raw, json)
Hash identifier:          F1Izj1Ij6ds6QmVJ+mKLFYvCXiZe8GUOTCbolGde198=
Subject key identifier:   56:5B:94:75:6D:31:96:5B:C7:5C:82:6F:EB:43:E9:EE:90:2B:49:34
Certificate issuer:       /CN=FB455FBF472DF7F1EB64F99677568E7414A120AE
Certificate serial:       4AEF54CB1FAF58FEC67CE6020E2664E9BDBA1E10
Authority key identifier: FB:45:5F:BF:47:2D:F7:F1:EB:64:F9:96:77:56:8E:74:14:A1:20:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB455FBF472DF7F1EB64F99677568E7414A120AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/323830343a323564303a3a2f33322d3332203d3e20323632363536.roa
Signing time:             Thu 11 Apr 2024 23:08:45 +0000
ROA not before:           Thu 11 Apr 2024 23:03:45 +0000
ROA not after:            Thu 10 Apr 2025 23:08:45 +0000
asID:                     262656
IP address blocks:        2804:25d0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ef:54:cb:1f:af:58:fe:c6:7c:e6:02:0e:26:64:e9:bd:ba:1e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB455FBF472DF7F1EB64F99677568E7414A120AE
        Validity
            Not Before: Apr 11 23:03:45 2024 GMT
            Not After : Apr 10 23:08:45 2025 GMT
        Subject: CN=565B94756D31965BC75C826FEB43E9EE902B4934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:79:10:9c:bb:36:f9:ea:74:1a:ac:c1:31:
                    5c:35:77:97:fb:90:97:f0:0a:f0:24:de:ff:f5:f2:
                    31:c7:c8:d7:8a:83:76:df:86:05:4f:d2:8c:82:de:
                    16:4c:f9:8c:46:98:ee:28:b1:e2:92:78:77:37:2d:
                    8d:f8:e3:5c:6f:6d:7f:da:83:cf:70:70:72:75:93:
                    10:ac:c7:86:41:a8:91:f8:64:36:3d:95:de:07:fe:
                    fd:d5:5b:05:1f:7a:d5:1e:f4:52:05:27:93:cd:7c:
                    35:97:97:bf:3e:ee:7d:f5:70:a6:e8:a3:3b:f1:f6:
                    93:9b:0b:e4:3f:3b:41:b3:e7:0f:81:a2:32:bd:45:
                    73:3e:e6:b6:80:f5:6b:1b:2d:ac:0a:d9:f4:00:f5:
                    06:f5:ba:d5:db:a4:28:f5:e9:f5:cb:71:8d:d9:f9:
                    7f:20:fe:3b:a2:49:c2:40:bf:c8:9b:63:f0:4b:aa:
                    94:fb:9f:a9:e8:35:b1:72:18:fa:70:07:44:9d:77:
                    92:f7:93:ca:25:cd:8c:76:2e:4f:66:f5:03:c3:7c:
                    37:66:60:82:3c:ab:38:06:71:69:16:87:5f:71:49:
                    06:68:ae:67:7c:c4:12:d1:dd:88:fc:19:c6:6e:c3:
                    bd:02:d4:a0:09:6d:16:bc:9d:ea:f5:09:9f:6f:52:
                    75:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5B:94:75:6D:31:96:5B:C7:5C:82:6F:EB:43:E9:EE:90:2B:49:34
            X509v3 Authority Key Identifier:
                keyid:FB:45:5F:BF:47:2D:F7:F1:EB:64:F9:96:77:56:8E:74:14:A1:20:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/FB455FBF472DF7F1EB64F99677568E7414A120AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB455FBF472DF7F1EB64F99677568E7414A120AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/1/323830343a323564303a3a2f33322d3332203d3e20323632363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:0a:58:b1:6f:26:fe:84:7d:4e:98:f0:ff:38:c8:e3:27:a3:
         3d:a0:ab:ab:58:d8:67:35:b2:2b:a1:9b:e7:a3:7f:69:3e:ca:
         e4:e9:73:97:c2:c1:7a:98:05:ab:66:05:2f:68:0d:b2:be:72:
         cb:56:c8:3d:d1:f7:a9:fd:30:a8:74:b3:d2:1f:9b:81:e0:0a:
         b5:a5:01:43:85:93:59:91:49:90:59:c4:b2:79:23:32:55:0f:
         ed:9d:d3:38:31:96:a1:b9:75:a6:77:a3:fb:d2:07:3f:e3:17:
         c2:05:c4:34:8d:30:e7:7c:35:c9:77:3e:86:1e:8c:3b:46:32:
         15:1d:97:fb:e1:22:47:7c:7a:14:43:a9:1e:c6:61:17:04:b9:
         0f:68:72:80:de:b8:92:59:a3:f5:1f:62:1b:07:92:75:89:fe:
         e9:c1:07:85:b6:40:27:cc:da:4f:83:28:02:72:48:8b:3b:8e:
         ae:97:dd:ab:02:b8:4e:28:6a:df:65:95:81:26:d9:3a:7a:4e:
         e0:45:54:c4:61:32:a3:e2:e0:8e:07:59:cc:11:59:8f:84:2f:
         a8:ab:91:35:3e:c5:08:07:92:33:16:01:94:1b:c6:31:7a:8a:
         e5:6d:7d:c4:ab:9c:67:c5:9d:27:f7:83:3a:f7:45:75:2a:4e:
         1a:40:51:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org