Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a3a2f33362d3336203d3e20323638363333.roa
File:                     323830343a353432633a3a2f33362d3336203d3e20323638363333.roa (raw, json)
Hash identifier:          vZHn4QWDg6cJqeEwVEW4HaotNu/45wGJccVtNCFu5rY=
Subject key identifier:   76:14:CB:94:E9:34:C2:04:A8:DD:57:2D:7B:9E:F4:CF:9D:26:D4:47
Certificate issuer:       /CN=5DF55312EA40791D5FBE25B56560AA4348FD7B89
Certificate serial:       65183FEBBC78388CEAD8017B3F9084395CBA8320
Authority key identifier: 5D:F5:53:12:EA:40:79:1D:5F:BE:25:B5:65:60:AA:43:48:FD:7B:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a3a2f33362d3336203d3e20323638363333.roa
Signing time:             Mon 20 Nov 2023 18:16:25 +0000
ROA not before:           Mon 20 Nov 2023 18:11:25 +0000
ROA not after:            Mon 18 Nov 2024 18:16:25 +0000
asID:                     268633
IP address blocks:        2804:542c::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:18:3f:eb:bc:78:38:8c:ea:d8:01:7b:3f:90:84:39:5c:ba:83:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF55312EA40791D5FBE25B56560AA4348FD7B89
        Validity
            Not Before: Nov 20 18:11:25 2023 GMT
            Not After : Nov 18 18:16:25 2024 GMT
        Subject: CN=7614CB94E934C204A8DD572D7B9EF4CF9D26D447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d3:c3:26:51:41:a9:f2:7e:7d:6b:62:a8:9a:
                    5c:ee:18:7a:17:05:a5:f2:a3:78:16:bd:e2:73:63:
                    ee:8c:98:50:3b:f7:a5:e5:c5:cc:d6:85:6b:69:fa:
                    df:07:20:1d:0b:f8:04:fc:3b:19:ab:b5:e7:12:8c:
                    d1:d3:67:ec:dd:94:bf:47:41:3f:68:7f:56:00:f3:
                    d0:fd:b9:f6:5c:c0:86:1a:03:76:5a:44:21:2a:2e:
                    92:7e:38:00:21:88:e2:2f:fe:7b:11:26:97:77:19:
                    52:fa:34:5b:d7:ce:21:c0:48:b0:90:1b:76:6c:e0:
                    8f:f2:86:2f:ca:b4:0b:98:7f:9b:fc:c6:1c:b4:0c:
                    32:01:bc:f4:6d:55:31:63:d4:4c:3c:dc:16:02:29:
                    6c:5c:d9:16:4d:b5:3a:6b:d8:f5:7e:68:43:69:44:
                    d8:e4:f4:d5:82:90:ab:21:f4:a3:33:f3:8e:82:b1:
                    46:28:8a:d3:0c:03:ca:58:7f:d1:90:a4:a2:50:3c:
                    08:01:56:b3:5e:71:aa:4c:34:d4:46:14:1b:02:af:
                    8d:1a:8e:8f:9d:0d:95:e9:96:b9:f9:55:98:7e:13:
                    8e:4f:45:12:e6:ea:5e:c4:1f:b8:df:be:bd:ba:18:
                    48:42:3c:69:06:31:98:23:f8:a4:ff:b5:bb:09:88:
                    8a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:14:CB:94:E9:34:C2:04:A8:DD:57:2D:7B:9E:F4:CF:9D:26:D4:47
            X509v3 Authority Key Identifier:
                keyid:5D:F5:53:12:EA:40:79:1D:5F:BE:25:B5:65:60:AA:43:48:FD:7B:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5DF55312EA40791D5FBE25B56560AA4348FD7B89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F3PXvdC5Um5cA1mpo7vhqQJTKAaGNy88RaMhbmpQLR85/0/323830343a353432633a3a2f33362d3336203d3e20323638363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:542c::/36

    Signature Algorithm: sha256WithRSAEncryption
         20:44:54:7f:27:ba:9d:b5:c6:e0:1e:e7:86:70:f7:07:34:fb:
         59:15:30:d6:42:cd:e5:82:1f:3b:07:7b:c8:72:56:3d:76:0d:
         10:9d:22:02:5f:43:ec:a7:c1:5f:87:8e:c2:1a:0a:3c:a2:f6:
         bd:57:fd:00:86:ce:f6:35:7e:e4:c5:3c:71:36:ff:0d:13:e5:
         37:8b:c2:a8:fd:fd:20:ac:29:e6:ce:f2:aa:aa:3c:79:c6:cc:
         68:9b:9d:8c:35:98:e7:3c:42:06:e1:c1:cb:9f:5b:dc:b0:2c:
         db:ee:65:b1:29:17:c2:dd:a3:43:58:ba:6d:47:9e:d8:9c:b8:
         3a:43:09:e9:0c:c1:06:56:9e:80:b1:46:57:2a:40:ba:ea:97:
         b5:22:c1:cc:0b:c0:d2:c9:ae:64:6a:41:d7:f4:a1:f3:00:73:
         de:88:3f:6c:ae:a9:e3:91:4c:be:ba:6e:1e:1c:c2:42:37:69:
         8a:c7:b4:f7:73:9c:24:38:97:7b:47:61:93:1e:41:7a:19:fc:
         19:88:b4:07:ca:cc:31:cf:a4:05:77:d5:cf:94:f0:e7:af:07:
         93:9c:94:9f:2a:b7:0f:26:8f:d9:0a:68:83:05:42:33:fe:90:
         b1:fc:41:0e:33:aa:ae:f6:55:85:dd:d3:98:3c:73:83:15:92:
         29:20:ae:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:41 2024 by rpki-client on console-fra.rpki-client.org