Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a313a3a2f34382d3438203d3e203532353435.roa
File:                     323830343a6531633a313a3a2f34382d3438203d3e203532353435.roa (raw, json)
Hash identifier:          tJp/anS+PtzxLDmh0b5Tcd5ojAH3HdNNidga+dnLP/Y=
Subject key identifier:   CB:23:8C:2C:F2:C0:BC:5A:6A:91:19:54:27:E0:34:6F:32:F3:BF:8B
Certificate issuer:       /CN=F38654E1757B49C2186636D148FED7E1055CBD91
Certificate serial:       1B943FF914A2C64A04A0EBB6B7B064016FA16B8A
Authority key identifier: F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a313a3a2f34382d3438203d3e203532353435.roa
Signing time:             Mon 04 Mar 2024 11:04:56 +0000
ROA not before:           Mon 04 Mar 2024 10:59:56 +0000
ROA not after:            Mon 03 Mar 2025 11:04:56 +0000
asID:                     52545
IP address blocks:        2804:e1c:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:94:3f:f9:14:a2:c6:4a:04:a0:eb:b6:b7:b0:64:01:6f:a1:6b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38654E1757B49C2186636D148FED7E1055CBD91
        Validity
            Not Before: Mar  4 10:59:56 2024 GMT
            Not After : Mar  3 11:04:56 2025 GMT
        Subject: CN=CB238C2CF2C0BC5A6A91195427E0346F32F3BF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:65:6e:3a:87:eb:dc:a7:75:a9:4a:b1:e1:7e:
                    0d:4e:cf:50:33:41:ed:25:73:60:d7:99:45:72:3b:
                    75:af:ec:a2:c4:cd:44:f5:55:dd:dd:9d:68:7d:93:
                    cf:d5:b6:c5:ee:9f:06:99:5c:0b:a1:70:d4:2f:e0:
                    0a:b8:ca:21:7d:4d:81:5c:8a:e4:8d:3b:cc:ee:54:
                    4e:a6:74:1f:e7:28:47:83:76:fd:cb:02:66:93:5c:
                    5e:0c:61:ce:6d:18:9b:4f:31:e5:a1:08:10:c3:ab:
                    f9:28:25:21:5f:b5:b6:7e:37:27:d5:22:2f:11:da:
                    19:a7:b7:6b:a5:8c:ae:d9:2d:89:59:4b:68:65:f6:
                    ac:99:7f:fe:b9:03:b2:a0:e7:01:73:61:24:e8:1f:
                    7c:1c:8f:37:b8:b5:26:e0:78:93:29:ca:00:5a:a4:
                    03:db:be:42:00:08:0a:57:04:dc:ad:23:f3:43:c4:
                    ec:25:67:b4:ce:22:7a:2c:57:61:a1:cb:c5:f4:f4:
                    2d:bc:01:e3:13:63:90:a1:74:dd:9c:16:cc:39:7e:
                    b9:f4:ac:e6:00:59:63:a1:c0:82:5c:e9:44:f3:ce:
                    85:77:c5:06:82:fc:84:d5:37:62:35:d7:04:06:59:
                    2e:f5:b0:20:8c:6c:b2:c5:bc:74:1e:8b:a8:e1:50:
                    0a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:23:8C:2C:F2:C0:BC:5A:6A:91:19:54:27:E0:34:6F:32:F3:BF:8B
            X509v3 Authority Key Identifier:
                keyid:F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/F38654E1757B49C2186636D148FED7E1055CBD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a313a3a2f34382d3438203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:10:1b:7a:d5:4e:71:e7:4e:ee:68:1d:c3:d5:9c:df:57:90:
         7e:2e:2b:f1:d7:66:f7:cd:c3:37:e9:4a:de:a8:97:49:e7:9c:
         f9:30:85:d8:74:cd:36:00:58:4b:56:95:1e:d8:8b:ad:1d:53:
         9e:2e:33:05:5a:6f:3e:bd:01:ff:8a:24:de:27:fd:47:ee:39:
         f8:97:7f:c9:dc:f3:6c:02:f1:2b:65:68:f4:36:9a:c7:ba:7d:
         8c:9b:02:26:7f:cc:54:3c:53:a7:11:5a:66:c7:b0:4b:04:5a:
         49:e0:a8:2f:61:d0:49:51:98:1e:9b:e6:a4:6c:58:62:f3:44:
         e4:75:bc:0b:28:4f:f5:f3:9b:7b:54:7f:30:1c:4a:67:dc:e1:
         d3:3b:8f:1c:9d:a1:99:ad:de:ea:40:1a:d7:7a:73:05:51:2b:
         04:6e:a1:b9:bb:60:72:30:af:be:49:0d:ba:dd:23:95:e0:5f:
         ed:f7:c6:ca:8c:e6:d1:fb:cc:e8:8a:44:e7:8b:30:c4:5d:e6:
         09:94:59:db:f4:c6:cc:15:47:e2:d0:4c:37:2d:52:fc:9e:2f:
         a6:90:22:99:61:0c:55:b3:92:f4:15:6b:71:4a:c1:a8:4e:d0:
         33:29:1c:71:19:65:77:a7:52:a8:f8:55:a8:51:99:e4:73:49:
         4e:b5:51:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org