Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a3a2f33322d3332203d3e203532353435.roa
File:                     323830343a6531633a3a2f33322d3332203d3e203532353435.roa (raw, json)
Hash identifier:          0qqzpB7BSJSNwLiudKFDAOuuSxN6LGb5Mfzuhyv6ys4=
Subject key identifier:   50:21:A7:B4:7A:2C:5C:4E:FF:87:16:EC:EE:17:3B:39:9B:15:09:D7
Certificate issuer:       /CN=F38654E1757B49C2186636D148FED7E1055CBD91
Certificate serial:       58202CC36B833AC1573FFAC05910AB5445DCD0FD
Authority key identifier: F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a3a2f33322d3332203d3e203532353435.roa
Signing time:             Mon 04 Mar 2024 11:04:55 +0000
ROA not before:           Mon 04 Mar 2024 10:59:55 +0000
ROA not after:            Mon 03 Mar 2025 11:04:55 +0000
asID:                     52545
IP address blocks:        2804:e1c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:20:2c:c3:6b:83:3a:c1:57:3f:fa:c0:59:10:ab:54:45:dc:d0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38654E1757B49C2186636D148FED7E1055CBD91
        Validity
            Not Before: Mar  4 10:59:55 2024 GMT
            Not After : Mar  3 11:04:55 2025 GMT
        Subject: CN=5021A7B47A2C5C4EFF8716ECEE173B399B1509D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:12:68:7d:e2:f4:32:2e:a7:a2:d2:71:ea:
                    32:7f:f8:b6:87:b5:64:77:ce:e4:5e:80:4e:cd:39:
                    ea:60:1d:73:02:37:d1:0c:eb:0a:50:31:d2:87:4f:
                    5e:e1:66:51:94:b7:51:04:5b:13:98:3d:4e:ed:fd:
                    58:b3:60:8f:e2:e6:bc:e4:37:8a:ab:83:f6:ce:d4:
                    49:c6:fc:3c:c2:85:81:db:f6:41:35:90:bd:a8:36:
                    54:a8:f9:d9:7e:a6:82:27:cd:89:f2:66:5e:40:f8:
                    3c:bf:5b:d4:6b:97:0a:d3:73:4c:b8:f7:f4:ca:08:
                    94:10:73:f4:36:84:b3:d9:99:ff:f1:82:b1:79:f4:
                    71:71:b0:a4:35:6d:3c:f5:d2:83:a3:ae:30:97:ff:
                    ce:97:66:8b:57:4f:8a:3b:d6:ff:31:4f:67:6a:f2:
                    54:22:f9:7d:89:ad:af:63:72:83:a2:8d:d0:fd:02:
                    f6:f4:e6:a8:ed:ca:b2:56:45:5b:48:c0:3f:ff:ac:
                    80:59:61:a2:71:88:dd:57:af:24:52:05:ad:d8:1c:
                    65:4a:d9:e8:d1:a8:64:3f:9a:74:a4:37:bd:a3:5e:
                    3e:c5:30:27:7c:6b:35:e9:2a:3b:c4:ac:bf:68:f3:
                    da:31:dd:da:b0:3e:8f:d7:8a:66:1a:f8:d5:f7:26:
                    de:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:21:A7:B4:7A:2C:5C:4E:FF:87:16:EC:EE:17:3B:39:9B:15:09:D7
            X509v3 Authority Key Identifier:
                keyid:F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/F38654E1757B49C2186636D148FED7E1055CBD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a3a2f33322d3332203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:1c:ae:f1:c9:54:a1:a8:57:b0:61:89:d9:43:04:38:09:77:
         c1:f4:db:e7:ee:07:c8:54:11:46:82:e5:0d:49:54:39:c3:44:
         07:5f:7c:a4:2c:38:7a:13:d4:19:ea:5c:3c:f9:ed:1e:37:9d:
         4c:04:d5:d0:79:49:44:c0:f6:99:3b:d6:57:92:03:80:c3:b0:
         46:6e:d1:19:7f:9b:fe:ff:97:04:a3:b3:a2:31:79:ed:a6:d9:
         60:1e:99:cd:31:ee:49:79:5c:47:08:c7:76:63:c4:0a:4f:25:
         38:db:0e:14:50:a6:9a:e3:86:b2:14:b4:af:7e:ee:da:cc:8a:
         a9:33:ed:50:0b:6d:90:b0:8b:6e:17:9f:0b:43:f5:e3:cd:98:
         8f:e9:c3:69:81:e2:af:00:0a:cb:7b:57:fe:b6:c4:75:d1:7b:
         a3:9d:e7:1a:88:3d:4b:a5:ba:be:8f:e3:84:20:6f:39:4b:4b:
         b9:3c:65:93:2d:5e:cc:ae:f0:eb:cb:e8:6a:6a:bd:30:86:55:
         2c:b5:54:bb:48:47:e1:94:b3:93:71:e8:83:01:1e:6b:5a:9a:
         8a:f0:17:31:64:1d:ee:6b:a4:40:27:99:ce:e9:9d:59:d4:76:
         35:26:28:29:24:54:a0:79:c9:8a:3c:37:dc:1f:ff:9c:18:02:
         96:21:0f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org