Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a3a2f33322d3438203d3e203532353435.roa
File:                     323830343a6531633a3a2f33322d3438203d3e203532353435.roa (raw, json)
Hash identifier:          Fcdv6gPC5oz6tO2bZo6zvOSrxfGSDsxkcGXDMm9VU5Y=
Subject key identifier:   A6:57:E0:51:44:14:07:FC:3C:ED:51:48:7E:C0:15:28:AD:06:18:5D
Certificate issuer:       /CN=F38654E1757B49C2186636D148FED7E1055CBD91
Certificate serial:       5073E9494BA33A1EFC37E673E7098EFE89121898
Authority key identifier: F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a3a2f33322d3438203d3e203532353435.roa
Signing time:             Mon 04 Mar 2024 11:04:55 +0000
ROA not before:           Mon 04 Mar 2024 10:59:55 +0000
ROA not after:            Mon 03 Mar 2025 11:04:55 +0000
asID:                     52545
IP address blocks:        2804:e1c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:73:e9:49:4b:a3:3a:1e:fc:37:e6:73:e7:09:8e:fe:89:12:18:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38654E1757B49C2186636D148FED7E1055CBD91
        Validity
            Not Before: Mar  4 10:59:55 2024 GMT
            Not After : Mar  3 11:04:55 2025 GMT
        Subject: CN=A657E051441407FC3CED51487EC01528AD06185D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:af:1d:8d:98:af:a8:e2:2e:0a:c0:63:32:08:
                    47:94:d8:83:ec:48:d2:b4:64:98:54:9f:f6:e1:a3:
                    49:0d:f8:53:77:ab:88:2c:ba:bb:50:96:cd:44:23:
                    9e:d3:7e:53:12:6b:87:0d:2b:ef:5e:e8:56:87:8a:
                    1e:46:eb:19:54:f5:c1:4f:44:5d:97:f4:68:0e:f8:
                    0b:4e:0e:21:b5:db:3d:8f:b9:ed:d6:1f:4d:f1:19:
                    6c:26:0b:3a:ae:94:11:a0:67:df:44:5c:5f:4e:a9:
                    ce:8e:3e:30:08:76:a7:0c:79:53:65:e0:b1:bc:91:
                    dc:bb:46:e4:0d:4e:41:e1:2c:15:be:9e:ac:a6:f7:
                    78:d1:c0:ce:96:11:a2:0a:d4:14:c0:ce:33:39:64:
                    16:4b:73:54:01:bf:c0:b3:40:9d:bb:60:fa:da:20:
                    dc:23:a2:fc:7b:71:3f:4e:62:d1:20:c8:f8:06:f2:
                    31:bc:c1:06:47:c4:5b:8b:8e:bf:08:9d:c6:a9:c6:
                    76:ab:75:f5:b3:2e:ed:cf:67:1c:b1:72:11:7c:01:
                    77:ad:43:10:68:8d:7d:d7:e5:22:c6:66:b8:14:80:
                    78:c9:26:0c:2a:41:d6:5a:19:1a:7a:0d:9d:87:d5:
                    6c:a2:6e:e2:5b:7f:7f:bb:70:ac:85:b8:21:76:2f:
                    a6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:57:E0:51:44:14:07:FC:3C:ED:51:48:7E:C0:15:28:AD:06:18:5D
            X509v3 Authority Key Identifier:
                keyid:F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/F38654E1757B49C2186636D148FED7E1055CBD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a3a2f33322d3438203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:72:7c:f2:43:d6:f7:04:29:24:9e:24:0d:49:99:c8:2b:5a:
         8d:5e:1f:ff:35:65:97:57:ae:cb:19:95:e6:18:1d:64:6c:30:
         22:a4:1c:b2:2a:d0:99:4c:d6:15:57:2f:47:f8:a2:8a:56:df:
         73:21:df:66:30:ce:d6:70:b1:af:28:ae:75:aa:09:73:1b:c1:
         65:69:31:dd:12:82:2b:79:f3:c4:d2:b7:12:31:dc:7c:cc:82:
         4d:a2:96:15:f8:2f:a1:40:ea:12:e1:a9:06:60:e1:22:08:38:
         02:d2:06:87:17:7c:79:3e:38:29:eb:cb:e8:99:3b:82:3a:9d:
         03:25:c5:ca:e6:cc:57:40:ba:01:b1:d1:b6:bc:03:39:4a:37:
         c0:2e:7a:1e:a0:a2:9c:87:21:24:af:7c:60:9a:f0:20:3c:3d:
         9c:58:4a:e0:a9:a6:e0:4f:5c:c7:44:c4:7e:d8:15:6d:34:b4:
         73:47:b4:08:9d:3b:22:01:29:87:1a:0e:a2:a4:8b:89:a7:4e:
         61:f3:3e:bf:79:b1:fa:c5:33:ee:56:ae:f9:35:53:04:41:cd:
         75:92:bf:f0:12:15:57:ea:f7:09:05:1e:23:3d:43:6e:a8:3f:
         7d:fb:d3:4d:5e:f4:6d:71:9f:a6:e6:38:f4:48:b0:83:62:05:
         70:77:23:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org