Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/323830343a313039633a3a2f33322d3334203d3e20323632383534.roa
File:                     323830343a313039633a3a2f33322d3334203d3e20323632383534.roa (raw, json)
Hash identifier:          jsjUTOp2rmfV4V1QVNPdUH7cL2occA83kyf2eLcMBQI=
Subject key identifier:   14:41:5F:E8:DC:6A:E1:52:03:12:39:F5:CF:2E:81:96:27:7D:28:A2
Certificate issuer:       /CN=0067DCB299F651ACFA1334059D304AD88AD8B525
Certificate serial:       3B85FE5A413FD98F5776D46F3914B924D60E31D0
Authority key identifier: 00:67:DC:B2:99:F6:51:AC:FA:13:34:05:9D:30:4A:D8:8A:D8:B5:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0067DCB299F651ACFA1334059D304AD88AD8B525.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/323830343a313039633a3a2f33322d3334203d3e20323632383534.roa
Signing time:             Sat 08 Apr 2023 02:44:41 +0000
ROA not before:           Sat 08 Apr 2023 02:39:41 +0000
ROA not after:            Sat 06 Apr 2024 02:44:41 +0000
asID:                     262854
IP address blocks:        2804:109c::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:85:fe:5a:41:3f:d9:8f:57:76:d4:6f:39:14:b9:24:d6:0e:31:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0067DCB299F651ACFA1334059D304AD88AD8B525
        Validity
            Not Before: Apr  8 02:39:41 2023 GMT
            Not After : Apr  6 02:44:41 2024 GMT
        Subject: CN=14415FE8DC6AE152031239F5CF2E8196277D28A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9f:a1:be:44:f8:e1:ad:54:ce:67:3d:b3:a6:
                    61:84:76:74:34:e5:12:02:5f:df:de:d2:39:0d:b1:
                    8e:7d:60:0c:19:3a:2f:a5:53:54:3f:17:c8:90:bb:
                    29:6d:1a:6d:14:76:05:0c:ac:51:98:f3:fc:ee:62:
                    1a:25:73:2e:64:c6:87:85:a3:52:1f:f7:79:18:b4:
                    3b:7e:d7:02:3f:e7:27:b8:93:40:89:99:0f:f1:28:
                    db:d4:7b:69:c9:48:36:8c:79:34:df:fc:da:b7:a5:
                    0f:cc:0c:42:cf:77:65:8c:f5:47:14:10:b0:0f:e1:
                    dd:31:4a:8b:30:bd:87:ca:2c:80:a8:65:4b:85:48:
                    d8:88:7c:db:8a:fd:ab:b4:b3:5e:29:e3:7e:67:2e:
                    2f:da:e7:ce:f9:71:e9:55:7e:d2:0f:d6:51:1d:9e:
                    fd:b9:31:e2:c8:0c:6a:4f:49:2f:92:20:f7:a8:44:
                    38:5f:d9:4e:99:0c:3d:73:de:39:3a:36:d2:74:6a:
                    18:fb:45:cc:f7:c7:85:bf:79:be:9d:50:f1:36:11:
                    92:4d:18:97:03:27:5d:86:1b:c7:51:f9:ea:05:28:
                    46:f2:1f:dc:f8:d7:5f:b7:67:1b:dd:5e:93:95:2d:
                    91:73:d1:41:44:62:2f:42:e2:f5:9f:9e:09:05:46:
                    a9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:41:5F:E8:DC:6A:E1:52:03:12:39:F5:CF:2E:81:96:27:7D:28:A2
            X509v3 Authority Key Identifier:
                keyid:00:67:DC:B2:99:F6:51:AC:FA:13:34:05:9D:30:4A:D8:8A:D8:B5:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/0067DCB299F651ACFA1334059D304AD88AD8B525.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0067DCB299F651ACFA1334059D304AD88AD8B525.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/323830343a313039633a3a2f33322d3334203d3e20323632383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:109c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:85:7a:60:eb:aa:45:25:85:45:24:80:2c:14:ed:60:fb:14:
         f9:54:5e:6d:6c:9a:3d:11:45:36:c3:4d:81:9a:e7:3b:70:ea:
         f5:a5:dd:1e:b3:34:19:c6:53:c6:98:b1:52:6d:50:00:85:f9:
         1b:7d:e6:2b:67:b0:ae:ac:05:eb:7a:14:60:40:f6:28:07:95:
         c8:a9:73:fe:8c:be:1d:0f:7a:af:43:75:23:ed:82:8e:8a:9b:
         90:5c:a7:f6:1f:32:3b:94:5f:b2:c3:dc:d1:49:06:8b:ed:1e:
         79:82:16:ac:f4:90:0b:d0:79:56:0f:38:24:d8:da:1d:88:91:
         23:04:c5:67:47:0e:da:c1:ae:c2:32:54:00:5a:fe:24:c5:e8:
         d8:4f:6b:fa:6b:d1:70:a1:c5:11:6f:fc:77:e2:6d:76:05:c2:
         3f:64:ef:4a:45:f5:ac:d0:f2:4b:66:6b:e4:bd:cd:b5:94:3e:
         d9:80:2c:ce:0e:0e:fa:4d:ee:d8:2a:e0:4e:bc:15:c8:90:04:
         ad:e4:c4:f5:13:5c:41:22:2e:11:21:d7:3c:c3:47:57:33:34:
         9f:57:3e:c1:92:2d:78:10:1b:b7:21:d6:c1:6d:1c:82:e3:95:
         a1:f5:a9:dc:39:f0:1d:25:27:02:25:a2:14:02:b5:3b:79:1f:
         82:80:bd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org