Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa
File:                     323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa (raw, json)
Hash identifier:          7pW76cLBXziACcN7wGXhqVWSTyTjqwos/Cl7ta683Gs=
Subject key identifier:   20:6F:F9:59:E4:08:6D:0E:B0:47:4E:70:5B:4E:E9:FA:E1:50:C9:9A
Certificate issuer:       /CN=F38654E1757B49C2186636D148FED7E1055CBD91
Certificate serial:       6AB0BADE919FA8A663731F8376DA6B496A486E95
Authority key identifier: F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa
Signing time:             Mon 04 Mar 2024 11:04:56 +0000
ROA not before:           Mon 04 Mar 2024 10:59:56 +0000
ROA not after:            Mon 03 Mar 2025 11:04:56 +0000
asID:                     52545
IP address blocks:        2804:e1c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b0:ba:de:91:9f:a8:a6:63:73:1f:83:76:da:6b:49:6a:48:6e:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38654E1757B49C2186636D148FED7E1055CBD91
        Validity
            Not Before: Mar  4 10:59:56 2024 GMT
            Not After : Mar  3 11:04:56 2025 GMT
        Subject: CN=206FF959E4086D0EB0474E705B4EE9FAE150C99A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:dd:31:54:52:35:0d:b4:53:7d:68:23:44:
                    14:40:17:35:b0:94:15:a8:de:b8:33:fa:0c:24:4a:
                    da:06:99:2f:dd:f3:bb:df:8e:ea:78:43:81:5a:95:
                    88:44:d2:f6:43:25:f2:8d:b1:59:9c:23:36:40:b5:
                    f6:65:aa:69:c3:82:62:5f:d0:80:57:73:17:22:78:
                    09:77:18:de:74:23:74:4d:27:41:e9:b0:70:fb:01:
                    71:7e:de:b4:06:76:b4:33:39:40:cc:35:11:13:6f:
                    2f:11:79:8a:34:b0:82:ab:19:eb:f1:bc:fc:09:88:
                    e8:c4:c7:14:f9:a0:19:18:fb:72:ac:c1:b0:7f:3e:
                    41:bd:12:c9:76:24:20:79:ca:24:4d:46:4f:4a:da:
                    6f:2c:83:3d:21:08:51:ae:d7:0b:c3:3c:0a:5a:c5:
                    8d:d7:79:d2:d7:9d:58:d6:2c:ec:16:f4:15:13:ff:
                    24:cb:49:e7:2f:b5:45:ff:b9:4f:f6:b7:34:79:18:
                    ad:6a:79:89:16:bd:18:83:eb:d0:fe:de:17:e1:78:
                    ac:e3:98:d1:b3:1a:d7:7c:4e:27:74:31:65:96:75:
                    14:ae:95:f0:2a:b5:90:c5:02:d2:75:57:91:fa:5b:
                    52:39:e0:b3:d4:3f:5c:60:68:32:34:4b:6c:d9:ed:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6F:F9:59:E4:08:6D:0E:B0:47:4E:70:5B:4E:E9:FA:E1:50:C9:9A
            X509v3 Authority Key Identifier:
                keyid:F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/F38654E1757B49C2186636D148FED7E1055CBD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a383030303a3a2f33332d3333203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         26:83:70:ab:37:d0:31:ca:2d:d8:68:b2:e7:45:68:c9:db:48:
         42:39:5b:76:9b:de:c8:8f:40:95:45:2d:91:1e:77:5b:de:a2:
         9d:3d:44:bf:ad:0d:59:8f:72:70:c1:ed:a7:e5:c3:f5:bd:19:
         1e:bd:08:04:46:ff:7f:f9:24:88:89:0a:7a:26:87:f6:02:df:
         4a:df:65:f5:b3:00:c6:42:e9:ef:4f:67:03:38:a6:ba:ba:7b:
         33:c6:dd:11:d7:08:6b:c6:35:35:7b:82:80:8c:ea:71:d2:d2:
         8f:75:a5:2a:03:04:f5:4d:0b:9f:f5:25:46:f9:76:34:f6:d0:
         0d:87:ba:e5:7b:49:75:7d:a4:0e:71:ec:80:0d:04:c0:50:a0:
         f0:a5:16:03:b2:b7:1f:3e:ae:41:b1:68:cb:1d:87:01:b3:61:
         96:43:58:b1:79:8e:1b:3d:2d:d9:01:82:04:a4:45:c1:c5:c3:
         77:86:dc:62:c5:5a:ae:b0:18:3e:76:4f:31:5b:b2:1e:53:e8:
         00:49:9f:c4:9d:70:06:96:9e:2d:62:ee:eb:0e:3b:73:ac:16:
         c5:ee:6e:6c:4e:80:a9:9a:75:50:7f:4d:63:43:5d:4f:30:6b:
         d1:2d:4a:18:08:0c:5d:22:66:e7:5a:72:88:cd:79:c9:55:b6:
         e8:43:35:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org