Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/323830343a363037383a3a2f33322d3335203d3e20323639313639.roa
File:                     323830343a363037383a3a2f33322d3335203d3e20323639313639.roa (raw, json)
Hash identifier:          ruJINTfURuOG9lqr/CGLl+ynrEbJYmZmm9YLfHTtV78=
Subject key identifier:   EC:F3:21:CF:45:85:A0:3B:56:31:3B:0D:F1:6D:91:B2:D7:E2:0B:3D
Certificate issuer:       /CN=4A1758C02056B68B850854C0D9687F347003679B
Certificate serial:       751A8DB8770120AED7241FE5C826771B2298E9BF
Authority key identifier: 4A:17:58:C0:20:56:B6:8B:85:08:54:C0:D9:68:7F:34:70:03:67:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A1758C02056B68B850854C0D9687F347003679B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/323830343a363037383a3a2f33322d3335203d3e20323639313639.roa
Signing time:             Wed 18 Oct 2023 19:00:01 +0000
ROA not before:           Wed 18 Oct 2023 18:55:01 +0000
ROA not after:            Wed 16 Oct 2024 19:00:01 +0000
asID:                     269169
IP address blocks:        2804:6078::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:1a:8d:b8:77:01:20:ae:d7:24:1f:e5:c8:26:77:1b:22:98:e9:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A1758C02056B68B850854C0D9687F347003679B
        Validity
            Not Before: Oct 18 18:55:01 2023 GMT
            Not After : Oct 16 19:00:01 2024 GMT
        Subject: CN=3082010A0282010100F08C33E0EE2417EB46D95485A6027E21FC001DED1400916A55B46ED43391F7D1CB8CB2AD6CD4030CD02D0EB0C804377BB8CE52754645073EA70503A703201117FEBF047854763133B92C97A5663A21A52561DAE5A36F5086094572FED66701C08833D5EE374B27C88AABE9EA67FE9A413B2BCE9C00CA4BE5ABC79327B0E35D894B23F4BC95DCB2FA7D42D964231E74BE0C9CC7074E242A8BA8E04BFFB34F15226DF322D4F0795510B8EE5C75931CEA08C0C5EB397482EF0D602B43465EFC3D015D6354F45F2445415374AC7935790A5A3C49BFD87FFEF7ADD56AB3A84BC924D59B00CAB5D293C2874668BFEAA1C4F6258ED518E8A30E1482DF7235896EF845190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:8c:33:e0:ee:24:17:eb:46:d9:54:85:a6:02:
                    7e:21:fc:00:1d:ed:14:00:91:6a:55:b4:6e:d4:33:
                    91:f7:d1:cb:8c:b2:ad:6c:d4:03:0c:d0:2d:0e:b0:
                    c8:04:37:7b:b8:ce:52:75:46:45:07:3e:a7:05:03:
                    a7:03:20:11:17:fe:bf:04:78:54:76:31:33:b9:2c:
                    97:a5:66:3a:21:a5:25:61:da:e5:a3:6f:50:86:09:
                    45:72:fe:d6:67:01:c0:88:33:d5:ee:37:4b:27:c8:
                    8a:ab:e9:ea:67:fe:9a:41:3b:2b:ce:9c:00:ca:4b:
                    e5:ab:c7:93:27:b0:e3:5d:89:4b:23:f4:bc:95:dc:
                    b2:fa:7d:42:d9:64:23:1e:74:be:0c:9c:c7:07:4e:
                    24:2a:8b:a8:e0:4b:ff:b3:4f:15:22:6d:f3:22:d4:
                    f0:79:55:10:b8:ee:5c:75:93:1c:ea:08:c0:c5:eb:
                    39:74:82:ef:0d:60:2b:43:46:5e:fc:3d:01:5d:63:
                    54:f4:5f:24:45:41:53:74:ac:79:35:79:0a:5a:3c:
                    49:bf:d8:7f:fe:f7:ad:d5:6a:b3:a8:4b:c9:24:d5:
                    9b:00:ca:b5:d2:93:c2:87:46:68:bf:ea:a1:c4:f6:
                    25:8e:d5:18:e8:a3:0e:14:82:df:72:35:89:6e:f8:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F3:21:CF:45:85:A0:3B:56:31:3B:0D:F1:6D:91:B2:D7:E2:0B:3D
            X509v3 Authority Key Identifier:
                keyid:4A:17:58:C0:20:56:B6:8B:85:08:54:C0:D9:68:7F:34:70:03:67:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/4A1758C02056B68B850854C0D9687F347003679B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A1758C02056B68B850854C0D9687F347003679B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHL2bqm11sU1K7UFjqtGAKv6rfESVQmxAbyjdHYvjN8y/0/323830343a363037383a3a2f33322d3335203d3e20323639313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6078::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:38:c6:e1:c3:63:34:24:84:9b:88:53:e9:b8:94:be:28:63:
         60:e1:a1:53:18:b8:89:88:f9:d5:26:0a:5d:07:e4:1f:c9:c3:
         22:fb:ac:1b:70:92:3d:51:d1:0c:af:06:21:34:a1:56:a0:a5:
         5f:f5:ba:15:9b:e8:00:87:c4:49:b7:47:2b:9e:03:61:ac:c6:
         2e:09:11:b6:9d:f8:77:bc:c1:f2:cd:46:9a:63:57:2f:44:3b:
         f3:5b:27:12:45:83:da:29:2a:63:ed:f5:3e:9c:2b:8d:50:d3:
         56:63:f9:9f:56:92:b8:6b:b8:06:ea:44:61:a0:ac:df:91:ee:
         59:00:53:f4:5f:a0:da:2f:a1:20:26:96:6a:d6:09:2b:95:cd:
         1e:9d:ad:0c:79:93:59:a1:be:bf:b7:ef:6d:f7:8c:c9:af:b7:
         2f:d2:4e:52:77:4c:54:ed:58:3b:09:e5:46:a8:c1:6e:2f:18:
         d1:78:85:88:44:54:af:7f:fe:f0:68:74:4e:71:e7:b6:f1:65:
         13:cf:0a:5d:6e:0f:4c:22:f2:d3:ea:36:81:9d:de:14:24:6b:
         a9:84:72:28:1b:ee:30:56:87:60:35:e2:0f:51:02:1d:1a:0a:
         d6:d5:f9:48:22:db:79:a2:28:e5:1a:e9:54:8e:9a:95:b6:f7:
         6f:5c:33:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org