Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/323830343a326539343a323330303a3a2f34302d3430203d3e203532373830.roa
File:                     323830343a326539343a323330303a3a2f34302d3430203d3e203532373830.roa (raw, json)
Hash identifier:          1KFdZgQJ3Hat/fo9dgdK5pmhFPNWL0tnot6rJxmGM0w=
Subject key identifier:   CA:0F:77:26:A9:46:CD:AE:B2:C1:9A:BD:6A:4A:95:9D:F2:92:8D:02
Certificate issuer:       /CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
Certificate serial:       28816C5C507349D7221D3071D31F093EC1E9BB96
Authority key identifier: 94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/323830343a326539343a323330303a3a2f34302d3430203d3e203532373830.roa
Signing time:             Wed 06 Mar 2024 18:02:12 +0000
ROA not before:           Wed 06 Mar 2024 17:57:12 +0000
ROA not after:            Wed 05 Mar 2025 18:02:12 +0000
asID:                     52780
IP address blocks:        2804:2e94:2300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:81:6c:5c:50:73:49:d7:22:1d:30:71:d3:1f:09:3e:c1:e9:bb:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
        Validity
            Not Before: Mar  6 17:57:12 2024 GMT
            Not After : Mar  5 18:02:12 2025 GMT
        Subject: CN=CA0F7726A946CDAEB2C19ABD6A4A959DF2928D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ba:75:ab:9f:21:8f:6a:79:29:a0:d5:77:fa:
                    f0:1f:9b:66:5c:a4:ab:32:55:e3:73:33:20:ab:1e:
                    93:e2:03:81:bc:f9:c3:4c:fd:eb:9d:88:a6:ca:aa:
                    97:d8:5f:2f:1f:b5:40:6c:f4:39:d8:f2:4b:a3:bc:
                    d5:1a:a0:60:f5:98:d1:23:f7:21:0a:b0:8a:b9:d0:
                    08:f8:4a:27:c2:13:67:36:04:59:8d:3a:1a:56:bd:
                    0d:57:58:31:5d:6e:11:be:9d:e6:1c:1f:a8:90:e6:
                    77:de:17:72:5e:2c:f5:f6:e3:df:66:77:a9:6f:23:
                    6a:af:31:4c:19:bf:3f:ac:27:76:4d:f0:4f:23:d2:
                    c3:8d:0c:6c:58:e6:10:f6:eb:67:55:a6:d7:b3:d2:
                    40:92:f0:03:79:94:a5:c7:b9:9b:9a:84:d5:76:e3:
                    f9:06:b3:06:bf:08:e3:6b:ab:55:58:45:e4:cc:f3:
                    4c:7e:3f:c3:52:e7:4a:1e:7e:25:a7:fc:94:a0:a5:
                    cc:c6:7e:88:be:a0:89:f5:2e:ee:20:a4:bf:a2:40:
                    d0:c3:49:dc:f4:25:1e:f2:08:f0:1f:8a:aa:96:6c:
                    a8:8f:91:f3:33:07:65:34:ba:12:ed:a6:ed:67:a8:
                    9e:49:96:71:49:e7:8b:9d:8f:37:40:bd:11:05:51:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0F:77:26:A9:46:CD:AE:B2:C1:9A:BD:6A:4A:95:9D:F2:92:8D:02
            X509v3 Authority Key Identifier:
                keyid:94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/323830343a326539343a323330303a3a2f34302d3430203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e94:2300::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:1a:f4:fb:84:49:33:69:57:4a:24:82:37:72:b9:3d:9a:5e:
         58:51:de:2a:a9:66:cf:a2:d4:5d:de:22:86:05:bc:94:9c:50:
         e3:23:86:19:14:a1:ef:a3:18:96:1f:76:04:53:34:90:21:94:
         d0:88:cc:d3:e2:f5:b7:61:af:28:23:ba:ca:2f:79:f7:1e:d8:
         60:30:af:ee:a8:5e:66:aa:de:d2:75:e5:30:a5:c6:4d:9b:de:
         9b:82:4b:42:de:38:b7:97:86:6f:6d:33:b2:d3:bb:ef:4d:aa:
         8a:79:58:d2:2c:a9:b3:25:b0:2b:7b:64:a7:8f:e0:8b:21:47:
         93:14:4b:70:62:87:4e:a3:a6:bd:2d:a5:56:9c:c2:6c:8d:29:
         6f:68:0e:36:40:0b:ed:c0:7c:df:a4:e6:f2:4f:df:57:7d:6e:
         ce:b8:66:a6:a0:e3:6b:f0:43:6c:0c:bc:5e:31:43:2e:99:d5:
         35:0e:43:5c:36:1c:6a:4f:40:5b:cb:06:c4:42:85:2b:9d:a9:
         a3:ef:56:da:2a:b3:7d:7c:84:17:22:54:95:17:bc:97:0f:3e:
         e1:10:3f:0a:e6:09:64:fb:d3:1e:4d:00:19:e8:b3:9a:b4:0a:
         f6:81:52:e1:d0:a9:cf:53:06:65:11:f6:c1:07:3e:8c:56:89:
         8a:de:ac:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org