Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/2/323830343a3132383a3a2f33322d3334203d3e203238363334.roa
File:                     323830343a3132383a3a2f33322d3334203d3e203238363334.roa (raw, json)
Hash identifier:          GrivjTEhZ3GpUhaT/CChvxgJTKCUO2xhFXDgTyae044=
Subject key identifier:   2A:4D:15:9C:A2:95:6B:DC:1B:6F:AF:2B:7F:D3:69:86:36:23:1D:B9
Certificate issuer:       /CN=B6FB969780345CD6DB145EA28DBDC6037ED4561E
Certificate serial:       0E1385A0E93692D604405B000A294F545E3D3331
Authority key identifier: B6:FB:96:97:80:34:5C:D6:DB:14:5E:A2:8D:BD:C6:03:7E:D4:56:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6FB969780345CD6DB145EA28DBDC6037ED4561E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/2/323830343a3132383a3a2f33322d3334203d3e203238363334.roa
Signing time:             Tue 09 May 2023 13:31:25 +0000
ROA not before:           Tue 09 May 2023 13:26:25 +0000
ROA not after:            Tue 07 May 2024 13:31:25 +0000
asID:                     28634
IP address blocks:        2804:128::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:13:85:a0:e9:36:92:d6:04:40:5b:00:0a:29:4f:54:5e:3d:33:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6FB969780345CD6DB145EA28DBDC6037ED4561E
        Validity
            Not Before: May  9 13:26:25 2023 GMT
            Not After : May  7 13:31:25 2024 GMT
        Subject: CN=2A4D159CA2956BDC1B6FAF2B7FD3698636231DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:b8:06:e5:19:61:39:03:1b:00:b7:ff:8b:
                    4e:53:22:83:b3:7e:ed:d7:6b:aa:20:bb:20:3c:38:
                    40:0c:de:b0:60:fc:80:d2:ed:26:09:f5:78:d9:e1:
                    22:66:fc:c9:e6:3a:6b:e4:e6:ec:4e:ed:69:ea:5e:
                    48:4e:65:cc:dd:4a:73:06:41:b1:5a:52:d2:fa:6a:
                    58:40:39:28:95:53:7a:55:2d:33:fe:c7:53:7a:18:
                    70:9d:de:34:51:d2:c3:6a:32:ca:99:75:f1:19:09:
                    48:7b:6d:f2:84:6b:04:5c:80:41:30:32:eb:7d:64:
                    57:82:8d:91:a1:d8:93:6a:1c:9e:6a:1a:01:53:87:
                    8c:df:4d:24:39:47:f8:87:bc:c0:cb:14:e0:a7:0b:
                    cb:ba:c6:c5:bd:f7:0c:22:3b:85:5c:a7:41:42:5c:
                    37:01:7f:2e:03:4e:c5:1f:64:61:b5:7a:ee:1b:1b:
                    e4:bb:93:fa:82:37:4c:2b:41:7e:53:f6:83:1c:ef:
                    c7:57:c9:df:3e:8d:48:a1:63:70:e2:e0:04:1e:39:
                    00:9b:c3:46:22:8d:37:0a:2f:93:98:ca:b0:e8:cf:
                    15:bd:78:c4:a5:e1:fb:ef:7f:f0:24:5d:5d:14:a0:
                    54:90:56:7a:87:72:5e:47:76:2f:85:0e:89:df:9f:
                    a9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4D:15:9C:A2:95:6B:DC:1B:6F:AF:2B:7F:D3:69:86:36:23:1D:B9
            X509v3 Authority Key Identifier:
                keyid:B6:FB:96:97:80:34:5C:D6:DB:14:5E:A2:8D:BD:C6:03:7E:D4:56:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/2/B6FB969780345CD6DB145EA28DBDC6037ED4561E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6FB969780345CD6DB145EA28DBDC6037ED4561E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/2/323830343a3132383a3a2f33322d3334203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:128::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:c8:0c:39:a7:92:b2:54:31:b0:50:49:df:21:62:93:2a:af:
         1a:aa:53:70:46:4e:35:9d:94:53:2c:50:fe:fd:66:8d:43:c5:
         5e:ad:64:98:f3:56:0d:a3:b3:97:77:41:5c:e7:b2:c4:c7:1e:
         d5:4a:9c:d1:41:f5:00:4f:3d:57:e1:db:c8:09:46:25:c2:93:
         82:7c:aa:6d:59:b0:35:6e:30:12:03:f7:fb:a6:de:42:e8:e0:
         d2:16:e7:db:9d:0c:1d:8f:37:5b:a1:5d:3d:81:79:49:ef:20:
         11:e7:46:8f:c8:82:33:03:ef:81:94:5a:14:23:92:5f:4d:ca:
         c2:34:03:fe:54:df:6f:e5:fc:4a:cb:ee:96:93:89:24:f3:b4:
         2e:b0:ec:4b:3a:ea:a5:97:d9:a5:65:94:75:77:a5:61:5b:08:
         9e:66:b7:55:38:40:6d:f5:19:cc:2a:bf:2b:70:6b:91:ac:8e:
         ad:b5:6a:2a:6e:8c:1f:c3:9b:a6:3c:e0:20:6b:8e:1e:a8:45:
         3b:18:3a:88:a1:92:8f:d3:9b:53:73:ab:5d:40:57:62:53:23:
         c0:92:61:4f:f0:e0:c5:3d:ca:ef:b5:ee:93:a1:5a:3f:8b:d5:
         0f:7d:9f:4c:ab:cf:e0:72:23:5d:86:24:da:61:5f:b4:c5:c6:
         7d:cb:7b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:45 2024 by rpki-client on console-fra.rpki-client.org