Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363833333a3a2f34382d3438203d3e20323638343731.roa
File:                     323830343a353162343a363833333a3a2f34382d3438203d3e20323638343731.roa (raw, json)
Hash identifier:          3NJpUxgZsvOALd9hh/h1EjaHnatWr2V9Bc+WnGR9FxA=
Subject key identifier:   7A:5F:E1:1C:30:3C:CB:05:47:DF:35:FB:2A:05:BE:95:31:BF:E2:A6
Certificate issuer:       /CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
Certificate serial:       46532926119D4D12F5D845AA6631A26615275C6C
Authority key identifier: 3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363833333a3a2f34382d3438203d3e20323638343731.roa
Signing time:             Wed 08 Mar 2023 13:37:04 +0000
ROA not before:           Wed 08 Mar 2023 13:32:04 +0000
ROA not after:            Wed 06 Mar 2024 13:37:04 +0000
asID:                     268471
IP address blocks:        2804:51b4:6833::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:53:29:26:11:9d:4d:12:f5:d8:45:aa:66:31:a2:66:15:27:5c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
        Validity
            Not Before: Mar  8 13:32:04 2023 GMT
            Not After : Mar  6 13:37:04 2024 GMT
        Subject: CN=7A5FE11C303CCB0547DF35FB2A05BE9531BFE2A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:38:47:4d:77:ea:77:2e:ea:af:3f:d8:0d:7e:
                    e6:ca:e6:af:45:1c:f9:1f:c8:1a:64:b5:b3:db:9f:
                    df:61:a6:7b:1a:5b:13:48:fd:c3:49:f2:e1:42:12:
                    6e:66:45:f1:d2:12:9f:46:08:33:eb:24:72:18:1c:
                    df:9c:28:19:f6:50:09:2a:2d:c4:97:dd:27:1d:b3:
                    fd:05:7b:60:9e:70:25:1d:55:f6:47:24:5b:36:4f:
                    42:f0:12:3c:ed:fc:56:75:71:c1:39:a6:1d:0e:89:
                    67:a3:11:d8:f8:2d:2e:56:fc:46:80:e6:5b:24:71:
                    90:f0:e5:ae:8e:90:29:0f:39:7c:0f:b1:82:d7:0f:
                    86:f5:63:2f:49:75:68:c3:0e:41:cd:10:01:9f:0d:
                    7d:49:96:4d:e6:a0:ed:aa:ed:e3:05:4d:e0:f8:f5:
                    68:3c:78:e7:ba:b5:45:9e:f9:17:1c:ed:2e:80:42:
                    db:40:28:bb:5e:6a:73:a6:34:a4:94:03:ed:5b:fb:
                    ff:8e:ad:5f:3c:d0:8f:08:a9:7f:95:ad:50:99:22:
                    5d:57:45:e3:2e:3a:77:bf:0d:b7:b6:56:6d:f6:f1:
                    6c:20:af:97:2e:23:e7:b4:fb:6f:a2:58:66:2e:3d:
                    ee:d4:0d:ac:17:06:ad:a7:a6:5e:bd:c8:dc:89:21:
                    8a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5F:E1:1C:30:3C:CB:05:47:DF:35:FB:2A:05:BE:95:31:BF:E2:A6
            X509v3 Authority Key Identifier:
                keyid:3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a363833333a3a2f34382d3438203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4:6833::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:c9:08:c4:0d:c7:36:87:23:30:8a:ea:4e:d3:f3:b6:85:72:
         6d:77:94:65:73:41:56:35:ae:a9:d6:21:94:1a:46:2c:4d:e1:
         9d:bf:fb:ca:ce:2f:bb:1e:c0:eb:14:10:a3:dd:dd:04:76:f2:
         e8:ba:62:f1:cb:e0:3a:3e:8e:7d:87:d9:e1:dc:eb:ae:e5:dd:
         69:87:3c:77:4a:e3:aa:df:99:0e:37:c0:a8:97:81:9d:2f:dc:
         29:fc:74:b9:2e:6c:05:82:ee:b0:18:03:08:2d:d1:8a:a7:7c:
         3a:96:04:45:78:41:1e:f9:87:99:41:85:95:66:12:76:96:f3:
         06:25:0e:99:4d:40:c1:1b:84:97:2a:85:8a:ab:f4:31:9e:0a:
         94:0d:38:bd:02:b9:2b:7b:c4:41:6d:3f:e5:6e:b8:cf:01:b4:
         52:33:c5:61:c3:31:24:fc:35:2f:e3:23:08:a0:24:5e:fd:d2:
         e1:b2:70:1d:8d:60:0a:8a:be:93:5d:d6:20:55:29:50:81:3b:
         ca:01:39:bc:43:66:b8:13:2c:ca:e5:4e:a1:b8:41:75:28:29:
         66:40:1c:56:90:ea:38:9d:fc:0a:db:80:b8:b2:32:e1:a0:b9:
         7e:63:dc:70:cb:53:89:24:89:53:1b:78:89:41:e5:2d:43:5e:
         19:fa:c0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org