Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a3a2f33332d3333203d3e203532353435.roa
File:                     323830343a6531633a3a2f33332d3333203d3e203532353435.roa (raw, json)
Hash identifier:          t0DVw9panSOI2w0aoSpOwckSIN/V+rwTSF839dheSzk=
Subject key identifier:   90:86:E9:2B:C7:97:DD:39:1B:5D:0B:93:F1:F5:BD:0D:97:7F:F5:A8
Certificate issuer:       /CN=F38654E1757B49C2186636D148FED7E1055CBD91
Certificate serial:       2CA962458D7E1D844CA161046C6D506FDC441ED6
Authority key identifier: F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a3a2f33332d3333203d3e203532353435.roa
Signing time:             Mon 04 Mar 2024 11:04:56 +0000
ROA not before:           Mon 04 Mar 2024 10:59:56 +0000
ROA not after:            Mon 03 Mar 2025 11:04:56 +0000
asID:                     52545
IP address blocks:        2804:e1c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a9:62:45:8d:7e:1d:84:4c:a1:61:04:6c:6d:50:6f:dc:44:1e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38654E1757B49C2186636D148FED7E1055CBD91
        Validity
            Not Before: Mar  4 10:59:56 2024 GMT
            Not After : Mar  3 11:04:56 2025 GMT
        Subject: CN=9086E92BC797DD391B5D0B93F1F5BD0D977FF5A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:1e:c1:3c:3e:da:e8:5c:46:bc:5f:9f:41:
                    ca:34:46:f0:98:10:cc:66:61:19:99:fe:26:8d:51:
                    dd:04:1f:e0:c0:e8:39:90:bf:c4:56:bf:b8:b7:00:
                    86:a3:bf:6f:62:4f:ff:21:9b:68:e2:0b:b9:84:98:
                    41:25:ec:c7:05:83:4e:35:5e:d4:2d:92:24:4e:7e:
                    2d:8e:ec:1c:b4:74:c5:57:b6:b6:b1:c5:2b:d6:23:
                    4e:9f:0f:31:53:a3:50:19:61:4f:56:87:10:14:51:
                    ab:57:aa:d8:88:f9:4f:3c:69:9f:27:e4:5e:33:75:
                    2d:a3:eb:ad:f6:5c:51:9f:12:86:b6:e2:18:4a:a3:
                    0d:3e:d9:4d:48:c3:6e:75:1e:ca:95:b9:7b:8f:6e:
                    7e:c4:a2:85:fb:ac:5e:dd:c0:0d:9b:35:c5:24:aa:
                    db:6c:44:c2:53:cb:4c:b5:b8:c3:2d:97:a6:01:06:
                    5e:da:dd:8a:d8:93:53:58:17:23:b0:92:07:ad:d0:
                    80:81:a6:95:ea:a4:f2:8a:5e:78:9d:6c:d6:18:3f:
                    cc:51:95:b1:0a:70:ba:e5:9d:62:08:50:67:4c:f6:
                    23:e5:c4:71:d8:a2:f3:4f:66:fb:48:a1:93:91:19:
                    f4:b2:97:3a:b2:70:d7:32:f9:d8:7f:a3:25:67:d2:
                    3c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:86:E9:2B:C7:97:DD:39:1B:5D:0B:93:F1:F5:BD:0D:97:7F:F5:A8
            X509v3 Authority Key Identifier:
                keyid:F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/F38654E1757B49C2186636D148FED7E1055CBD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a3a2f33332d3333203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/33

    Signature Algorithm: sha256WithRSAEncryption
         d1:92:c3:6d:d4:2d:ab:d6:83:ab:ec:97:98:27:90:c2:74:3e:
         a7:57:cb:2a:c3:b8:b9:8d:b2:32:87:de:aa:d2:36:2c:10:d3:
         1d:22:d9:1f:58:5e:65:76:71:ea:48:e3:cf:19:9e:b1:26:5d:
         0e:38:eb:4a:77:76:1c:8c:7c:d3:28:da:e5:14:9a:a9:af:6e:
         b0:7d:f5:15:6e:02:61:d7:15:05:37:cc:94:12:f3:67:18:15:
         d3:32:fa:ba:dd:22:b9:34:6e:8f:13:37:d0:01:b1:d7:f1:47:
         6d:72:0f:52:05:cf:8d:c8:85:f9:1d:a1:26:00:92:d6:11:c1:
         9d:2c:97:bb:00:db:5f:bf:52:db:be:46:40:7d:7c:00:9a:d8:
         40:7d:d6:95:df:25:bd:d3:fd:5e:4c:c4:4d:40:33:5e:5b:8f:
         ac:f1:ad:30:cd:99:53:d1:74:16:cd:c6:19:af:fe:2c:49:06:
         24:63:8e:98:1f:80:a8:fc:61:1b:58:b9:99:1b:e4:1c:7b:2e:
         c3:b9:e0:ed:7f:a3:ea:ad:9f:5a:1a:e5:6d:5f:a2:7e:de:4b:
         14:79:ea:9d:3c:c2:fd:9d:b9:af:e5:fd:6e:93:c7:da:8d:a9:
         ba:df:c7:fb:b5:46:aa:49:19:4a:5e:aa:21:76:96:ff:1a:fd:
         fc:2a:ff:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org