Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373231363a3a2f34382d3438203d3e20323638343731.roa
File:                     323830343a353162343a373231363a3a2f34382d3438203d3e20323638343731.roa (raw, json)
Hash identifier:          4b2eGyVos9U0s81dGL0v7t4nsatQtqs0ZotH3wV20no=
Subject key identifier:   11:68:59:96:EA:71:39:1A:33:7C:F9:4E:04:AA:3E:91:77:24:0A:D9
Certificate issuer:       /CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
Certificate serial:       41DCDF136DFFBCD70510B31D6DD83395CD45053E
Authority key identifier: 3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373231363a3a2f34382d3438203d3e20323638343731.roa
Signing time:             Wed 08 Mar 2023 13:39:31 +0000
ROA not before:           Wed 08 Mar 2023 13:34:31 +0000
ROA not after:            Wed 06 Mar 2024 13:39:31 +0000
asID:                     268471
IP address blocks:        2804:51b4:7216::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:dc:df:13:6d:ff:bc:d7:05:10:b3:1d:6d:d8:33:95:cd:45:05:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AA25D1A66959674425740B0D69389FFFDDE91CB
        Validity
            Not Before: Mar  8 13:34:31 2023 GMT
            Not After : Mar  6 13:39:31 2024 GMT
        Subject: CN=11685996EA71391A337CF94E04AA3E9177240AD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:52:38:16:dc:ee:ac:27:c2:f7:91:4f:ae:
                    c7:40:f8:e4:2a:1d:74:ce:96:5a:3d:d8:51:b8:92:
                    87:f6:e8:24:ba:c1:f5:12:66:a0:db:41:62:8d:96:
                    36:25:49:eb:d2:11:dc:d9:21:61:10:32:15:14:c2:
                    4d:7d:4e:9c:76:f0:d3:68:ca:70:c7:3a:ce:14:cc:
                    d4:77:24:4b:28:5e:fe:98:94:15:fd:f8:92:39:8e:
                    4a:6a:db:bd:cd:fb:35:e5:b8:7b:be:e1:52:36:1e:
                    a0:ff:3d:8f:29:03:f8:b5:82:f7:ca:11:2a:71:57:
                    e1:74:83:07:a6:cd:19:24:0f:5d:32:cd:16:e3:3a:
                    97:c8:b4:ce:fc:bf:bf:e5:ed:08:76:33:fd:0d:c5:
                    e8:a6:13:6c:50:80:f4:fe:c0:79:d8:08:5f:06:12:
                    c7:5b:69:f6:e7:c4:0c:30:89:6f:58:e3:a0:e7:f0:
                    f2:00:af:99:57:6a:b9:f9:03:aa:7f:cd:98:e2:95:
                    6b:80:db:76:38:e3:57:39:62:d5:2d:dd:2c:f7:3a:
                    61:c5:4b:7d:33:46:61:3c:c8:19:37:8a:a0:41:a1:
                    fe:5b:85:46:54:1c:7e:01:f9:4a:5f:88:16:a4:d8:
                    f6:7c:ba:3e:da:5e:ad:c2:e6:18:f4:6d:26:bf:4c:
                    6e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:68:59:96:EA:71:39:1A:33:7C:F9:4E:04:AA:3E:91:77:24:0A:D9
            X509v3 Authority Key Identifier:
                keyid:3A:A2:5D:1A:66:95:96:74:42:57:40:B0:D6:93:89:FF:FD:DE:91:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3AA25D1A66959674425740B0D69389FFFDDE91CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FqaWZu3poFfXUFXKd8NNieMsAXtHi2hqEtSyK4rRPYct/0/323830343a353162343a373231363a3a2f34382d3438203d3e20323638343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51b4:7216::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:8e:cb:e1:09:69:7c:86:64:de:41:b3:15:d5:b1:6c:cd:04:
         e4:26:64:b7:17:28:f5:c0:60:76:f3:10:d5:f4:62:66:ef:2c:
         97:03:f8:70:ae:50:a9:f2:1a:fe:29:d8:48:c5:3c:21:9e:fe:
         95:06:40:a6:79:05:21:0a:9f:5d:e0:ce:31:d4:e7:dc:b2:a9:
         92:94:89:6d:58:8f:1e:bc:c5:f3:8c:3e:18:4d:ee:25:25:7f:
         d8:6c:cc:6e:92:3a:82:8e:2c:d7:0b:cc:ea:cf:6c:0e:09:cd:
         8e:4a:3d:95:70:03:d4:28:14:09:9e:d7:fe:60:28:a3:1c:22:
         20:5b:8b:37:9b:46:b2:1d:33:f4:c2:9d:f4:57:60:fa:47:6b:
         d2:6e:f8:16:21:1a:ef:d2:e5:ec:f3:43:f8:c8:1c:6c:86:38:
         48:3e:c7:d3:9a:8b:fd:d5:e6:18:ce:1c:be:ce:ff:7a:34:38:
         dc:9a:88:3c:6a:9c:c4:7c:6e:31:65:53:cc:37:c6:9d:24:e4:
         37:73:d6:5c:93:f4:8c:a2:de:a7:05:16:b4:79:a3:14:8e:8e:
         28:11:36:5b:cc:b8:20:e1:58:f0:ed:d0:f4:49:23:bc:ae:c1:
         8a:31:34:52:d3:0a:89:f7:b0:4c:d4:84:01:c8:54:5e:56:a5:
         2d:18:19:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org