Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/0/323830343a363363343a3a2f33322d3438203d3e20323639333832.roa
File:                     323830343a363363343a3a2f33322d3438203d3e20323639333832.roa (raw, json)
Hash identifier:          MRqPFpcb5GvkDwDAGxqCr6bdPUN5+0W5gMOPeVx7dSs=
Subject key identifier:   B5:CB:F9:B2:B4:EA:D0:79:BB:37:6D:CD:9D:F3:53:6A:B2:FD:72:25
Certificate issuer:       /CN=1CEAB2C57300195DEEB059504286FBA1F7D645FF
Certificate serial:       506CCA11D289211A191D438BA4FF17F9AD44A6A1
Authority key identifier: 1C:EA:B2:C5:73:00:19:5D:EE:B0:59:50:42:86:FB:A1:F7:D6:45:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CEAB2C57300195DEEB059504286FBA1F7D645FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/0/323830343a363363343a3a2f33322d3438203d3e20323639333832.roa
Signing time:             Thu 28 Dec 2023 13:39:23 +0000
ROA not before:           Thu 28 Dec 2023 13:34:23 +0000
ROA not after:            Thu 26 Dec 2024 13:39:23 +0000
asID:                     269382
IP address blocks:        2804:63c4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:6c:ca:11:d2:89:21:1a:19:1d:43:8b:a4:ff:17:f9:ad:44:a6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CEAB2C57300195DEEB059504286FBA1F7D645FF
        Validity
            Not Before: Dec 28 13:34:23 2023 GMT
            Not After : Dec 26 13:39:23 2024 GMT
        Subject: CN=B5CBF9B2B4EAD079BB376DCD9DF3536AB2FD7225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f6:c1:9d:bf:7a:5e:6b:5a:b1:0e:3d:70:c0:
                    79:8f:c9:18:07:70:72:d7:0a:94:a9:2f:39:3e:de:
                    c2:b6:8c:28:0a:06:76:f7:c8:c8:da:d1:f3:08:52:
                    b2:4f:23:65:02:59:24:fc:82:07:5a:ba:f5:16:04:
                    27:de:eb:4c:fc:2f:13:12:b8:d3:77:e6:47:49:23:
                    6c:6c:d1:01:32:f3:77:c3:1a:c1:8f:f2:fc:67:9d:
                    69:6e:40:8a:0d:17:f0:c2:8d:cf:b0:05:d6:44:fe:
                    14:ad:4a:01:9a:69:ef:be:50:9f:d8:90:2f:c4:94:
                    09:34:c9:c2:66:a0:4a:cd:ef:cb:92:0d:2b:5a:1c:
                    d8:c1:71:6b:57:07:89:4f:d5:af:c2:40:8d:ef:55:
                    1c:ed:90:d5:07:80:ec:3a:56:0e:92:8a:1f:3b:dd:
                    82:2a:03:06:a6:94:44:ad:32:dd:b8:89:3d:da:33:
                    47:2e:18:aa:4f:ab:15:56:a6:99:fb:b3:72:72:c6:
                    0f:8e:4d:bb:89:d0:93:74:a3:d1:40:17:f8:24:53:
                    ad:d6:23:66:c7:07:2b:3b:9c:f2:3f:31:41:ae:48:
                    71:60:f9:17:ee:01:07:e8:54:09:55:87:08:6f:c0:
                    a8:62:83:9f:9f:02:2e:7b:66:9d:a6:ef:f9:be:91:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CB:F9:B2:B4:EA:D0:79:BB:37:6D:CD:9D:F3:53:6A:B2:FD:72:25
            X509v3 Authority Key Identifier:
                keyid:1C:EA:B2:C5:73:00:19:5D:EE:B0:59:50:42:86:FB:A1:F7:D6:45:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/0/1CEAB2C57300195DEEB059504286FBA1F7D645FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CEAB2C57300195DEEB059504286FBA1F7D645FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/0/323830343a363363343a3a2f33322d3438203d3e20323639333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:5d:64:fd:6d:f2:c9:d0:e5:91:87:74:e2:59:56:8b:a5:ee:
         f9:51:87:11:a5:ea:99:54:b6:64:99:f1:e0:a8:53:62:ce:7a:
         dc:f2:d8:ec:6e:5e:d6:35:c6:ae:e3:13:83:f4:42:d3:46:1a:
         d2:8c:93:3d:da:7a:f7:8f:34:dc:d7:a4:35:87:4a:6d:fb:fa:
         47:97:90:ce:c7:47:4f:df:55:a5:34:02:48:9e:1c:f5:71:2b:
         36:68:91:78:9b:be:8b:1d:8b:cb:5e:00:b7:85:ae:b9:c3:e2:
         89:fb:fb:98:ec:d3:b5:54:e5:1f:61:bd:6a:66:4f:13:f1:35:
         69:8b:15:b2:b5:22:98:8c:3d:eb:24:a9:e5:6e:50:bc:91:65:
         a5:f5:a4:da:6d:5c:45:d1:ba:b7:a2:40:9b:4d:8e:92:52:55:
         60:f4:bc:5e:c8:94:ea:e6:c0:3f:e2:ba:5b:ff:25:0c:2e:0f:
         cf:fe:08:23:f0:2a:b8:27:14:81:91:de:ca:53:4b:38:7a:51:
         f3:0e:a7:f3:07:9f:c5:16:c1:cc:1c:b7:84:e1:f1:a1:47:17:
         e1:1b:d7:26:47:56:34:9d:b0:ac:37:0b:d2:fb:d7:be:aa:8d:
         d2:e7:e5:b8:67:cd:da:d4:b8:a1:90:b2:4c:42:df:25:f1:e5:
         49:4f:d0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org