Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/323830343a326539343a323430303a3a2f34302d3430203d3e203532373830.roa
File:                     323830343a326539343a323430303a3a2f34302d3430203d3e203532373830.roa (raw, json)
Hash identifier:          e+u+bcFsox17iojquv/HM1teTHq4suwt1wIHQk/zfa4=
Subject key identifier:   2B:60:A3:46:FB:00:C3:64:37:B4:0A:66:E4:3C:2E:C7:B3:AF:90:51
Certificate issuer:       /CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
Certificate serial:       19CF1EA5EE57FA2BB007DD06B6E885299AE87B59
Authority key identifier: 94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/323830343a326539343a323430303a3a2f34302d3430203d3e203532373830.roa
Signing time:             Wed 06 Mar 2024 18:02:12 +0000
ROA not before:           Wed 06 Mar 2024 17:57:12 +0000
ROA not after:            Wed 05 Mar 2025 18:02:12 +0000
asID:                     52780
IP address blocks:        2804:2e94:2400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:cf:1e:a5:ee:57:fa:2b:b0:07:dd:06:b6:e8:85:29:9a:e8:7b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94FF6D82FE05B1D7F21EA98687FFC98088B59B64
        Validity
            Not Before: Mar  6 17:57:12 2024 GMT
            Not After : Mar  5 18:02:12 2025 GMT
        Subject: CN=2B60A346FB00C36437B40A66E43C2EC7B3AF9051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:92:1e:2c:d0:65:ef:e1:02:d6:56:38:01:ed:
                    6c:55:a2:20:6b:10:b5:7e:e2:fe:42:9c:56:fe:a4:
                    f5:cd:1d:ff:df:55:69:4e:8d:22:53:bb:33:c0:3d:
                    53:38:e7:25:dd:8b:f1:ce:74:4d:0c:92:30:21:ab:
                    33:7b:67:6c:29:76:d5:cf:5b:2f:31:46:d3:7a:30:
                    e7:0a:dd:74:f3:e7:37:95:5a:b3:b1:48:d8:cd:6f:
                    61:97:db:2a:d0:42:a6:b3:85:58:3d:ce:44:d6:a6:
                    94:3d:72:ec:6c:0b:c0:85:ec:b2:54:72:20:9a:70:
                    51:49:39:ad:80:71:fa:20:21:0c:d8:b3:b2:b0:95:
                    ea:51:53:b5:bf:a3:a3:c1:62:d5:fc:33:07:e3:38:
                    a1:12:48:d0:4d:ed:c4:99:ba:14:69:b0:dc:52:b8:
                    cd:6a:88:48:2c:86:16:64:44:47:77:cd:41:9d:3e:
                    59:ff:52:89:10:60:d5:45:8b:95:ec:61:8f:d1:26:
                    f4:24:1e:50:d7:2f:cc:a4:e2:4a:06:0c:4a:fe:5f:
                    8c:e1:a7:a0:ac:19:c8:79:6b:65:29:9e:99:83:a6:
                    95:c3:d7:26:ed:8e:83:01:f4:a0:73:b8:94:54:18:
                    2f:3a:93:f4:d1:b5:e0:a8:70:ef:3d:1e:2e:dc:3c:
                    a9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:60:A3:46:FB:00:C3:64:37:B4:0A:66:E4:3C:2E:C7:B3:AF:90:51
            X509v3 Authority Key Identifier:
                keyid:94:FF:6D:82:FE:05:B1:D7:F2:1E:A9:86:87:FF:C9:80:88:B5:9B:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94FF6D82FE05B1D7F21EA98687FFC98088B59B64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/323830343a326539343a323430303a3a2f34302d3430203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e94:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:c7:90:27:83:40:af:cb:2f:08:15:48:2c:b2:1d:5c:18:df:
         df:68:59:39:55:21:13:a6:9a:78:fa:28:a9:0f:25:7e:b3:ac:
         65:02:c9:c6:ab:46:59:24:9f:66:3a:10:63:9f:6c:48:e2:4c:
         f2:d8:51:e2:30:2f:3b:e9:69:31:9a:d9:4f:d4:63:16:96:fa:
         ee:63:5f:fc:57:41:9f:25:d2:86:10:c8:79:73:de:f3:4f:7a:
         64:ff:99:8a:b5:28:b2:fd:12:fd:f4:09:3d:0d:4b:91:50:14:
         8c:48:24:fe:06:e2:00:64:13:d7:7d:50:5f:64:77:a6:5d:74:
         85:7e:d7:75:5f:f7:e8:12:48:df:56:d9:95:a5:f8:3d:76:c1:
         a0:d0:3a:e7:5a:f7:f4:d0:c4:26:20:30:31:c2:de:f0:b0:e8:
         8b:41:ac:38:ba:d0:5b:3f:f0:df:3a:0b:8a:dc:4d:5e:7a:28:
         de:3d:ec:3d:be:34:9c:8c:36:fc:d2:5b:82:3e:08:f9:bb:8e:
         2b:7b:9c:4b:ad:4f:90:00:14:4d:ee:7d:63:43:ab:0e:df:fd:
         ec:d7:c9:ab:e1:ed:92:d8:d8:33:4a:c8:83:f7:d6:89:22:d5:
         ab:aa:51:36:1a:6b:d1:e9:49:bc:54:38:a0:88:30:0d:0a:0f:
         9c:2b:73:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:44 2024 by rpki-client on console-fra.rpki-client.org