Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/323830343a326539343a383430303a3a2f34302d3430203d3e203532373830.roa
File:                     323830343a326539343a383430303a3a2f34302d3430203d3e203532373830.roa (raw, json)
Hash identifier:          /ddX3U8NXjIBjYhZo96FeZgwX0jOgNoPbcGNDwwGg8M=
Subject key identifier:   51:14:0D:37:13:A6:68:10:9C:1D:A2:44:C9:7C:E3:08:3F:C6:70:6D
Certificate issuer:       /CN=D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9
Certificate serial:       25135921DDFCE81119912EA80EBB702D2BC7C591
Authority key identifier: D5:E3:55:DB:FF:E4:C1:1C:56:55:AD:92:CE:D4:1A:82:E8:3E:ED:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/323830343a326539343a383430303a3a2f34302d3430203d3e203532373830.roa
Signing time:             Tue 05 Dec 2023 14:44:31 +0000
ROA not before:           Tue 05 Dec 2023 14:39:31 +0000
ROA not after:            Tue 03 Dec 2024 14:44:31 +0000
asID:                     52780
IP address blocks:        2804:2e94:8400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:13:59:21:dd:fc:e8:11:19:91:2e:a8:0e:bb:70:2d:2b:c7:c5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9
        Validity
            Not Before: Dec  5 14:39:31 2023 GMT
            Not After : Dec  3 14:44:31 2024 GMT
        Subject: CN=51140D3713A668109C1DA244C97CE3083FC6706D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:81:9b:fc:aa:2b:86:8b:21:2c:5c:ac:4c:b4:
                    d2:05:58:77:49:43:d9:6e:55:09:0b:3b:ed:61:57:
                    3b:f6:f7:70:81:b3:e7:af:48:bb:b5:09:c1:b1:4d:
                    99:b6:b5:fd:87:49:7c:42:e9:a1:91:7d:5a:aa:11:
                    49:be:56:49:2f:4e:95:38:99:3d:e6:b1:c3:8a:fe:
                    96:ed:70:74:5f:a9:1a:71:9d:50:c0:f2:58:8e:0e:
                    02:75:ee:95:d2:0d:5a:1a:8f:ad:c5:9d:2f:9d:0e:
                    50:23:b3:a1:7a:69:38:bd:74:71:a2:a6:62:a6:95:
                    74:e4:56:bc:01:f5:77:7b:de:4e:ef:0e:ca:ee:07:
                    79:1d:97:a6:0b:b7:f5:83:5f:1e:ce:41:41:8d:82:
                    2a:57:66:21:56:40:b7:16:83:6d:71:3c:b7:2b:db:
                    47:5b:6d:67:28:43:53:88:83:5e:d9:75:1d:51:47:
                    a3:ab:c9:4c:b7:3c:da:b9:71:48:7f:86:34:3e:5e:
                    62:6c:27:ef:d8:c8:da:82:45:f8:8f:54:86:10:e1:
                    3c:c1:a4:5c:81:aa:24:32:c2:77:b0:21:f3:40:33:
                    5d:3d:73:9f:29:51:fb:71:39:dd:b1:53:4a:73:32:
                    3c:10:de:67:dd:33:a7:a2:1d:e7:45:c1:8e:48:98:
                    22:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:14:0D:37:13:A6:68:10:9C:1D:A2:44:C9:7C:E3:08:3F:C6:70:6D
            X509v3 Authority Key Identifier:
                keyid:D5:E3:55:DB:FF:E4:C1:1C:56:55:AD:92:CE:D4:1A:82:E8:3E:ED:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5E355DBFFE4C11C5655AD92CED41A82E83EEDE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FBnQaHyNR5kUSvvjw6BKmUn4pU8Jsk5mGyNVbaRXhkvC/0/323830343a326539343a383430303a3a2f34302d3430203d3e203532373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e94:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:d1:ee:86:d2:12:fa:54:a9:df:15:e3:fb:08:d0:3f:d5:33:
         6e:c0:19:bb:a6:5d:03:ff:05:1b:8e:40:16:ca:da:a0:dc:27:
         88:a1:3e:b0:20:31:fe:02:04:5d:91:20:80:39:18:c6:bd:a1:
         1d:4f:a0:f3:3b:bb:d7:41:46:33:10:b9:51:28:15:8b:fe:05:
         d9:b1:17:fc:4d:4d:f6:eb:9a:9f:4d:5b:cc:6e:11:74:a5:5f:
         b0:ab:d0:df:d0:81:e9:52:9b:6a:2d:15:c4:e2:08:6e:0d:c4:
         98:a8:1e:c1:cf:64:92:cb:bc:6a:f4:ec:a1:75:f6:0b:65:bc:
         34:8d:73:a1:8f:cc:b0:0d:70:c8:4b:34:e4:0c:b4:a3:34:43:
         36:fa:c8:4a:dd:e4:06:4a:42:a8:5e:83:77:b0:88:73:44:05:
         d1:62:c3:6d:21:29:e0:a8:e1:da:7f:ae:ab:dc:40:e1:f9:54:
         2c:ab:cb:d2:61:79:7b:ab:e2:35:35:22:59:40:38:41:12:3b:
         55:c9:a3:4a:1d:1f:25:17:d5:64:87:86:97:00:82:5b:53:f1:
         7d:25:57:ee:fe:7d:7b:cc:5a:83:6a:dd:da:06:c6:fb:8c:ac:
         1b:b9:66:b8:a8:cf:e7:90:07:97:b8:fa:cf:bb:63:10:2b:3b:
         f1:9f:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:02 2024 by rpki-client on console-ams.rpki-client.org