Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a3a2f33342d3334203d3e203532353435.roa
File:                     323830343a6531633a3a2f33342d3334203d3e203532353435.roa (raw, json)
Hash identifier:          UjQwT+BZqG7c8PLIVAlCvA5+0mTmWuC1gEQOD/cjS7w=
Subject key identifier:   F6:3E:C1:72:BA:FA:C1:08:9F:A7:8C:92:C8:81:71:E2:7D:5F:C0:F0
Certificate issuer:       /CN=F38654E1757B49C2186636D148FED7E1055CBD91
Certificate serial:       492B74F93A63F3FB5185C29104FC5F5CE0D73327
Authority key identifier: F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a3a2f33342d3334203d3e203532353435.roa
Signing time:             Mon 04 Mar 2024 11:04:56 +0000
ROA not before:           Mon 04 Mar 2024 10:59:56 +0000
ROA not after:            Mon 03 Mar 2025 11:04:56 +0000
asID:                     52545
IP address blocks:        2804:e1c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2b:74:f9:3a:63:f3:fb:51:85:c2:91:04:fc:5f:5c:e0:d7:33:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38654E1757B49C2186636D148FED7E1055CBD91
        Validity
            Not Before: Mar  4 10:59:56 2024 GMT
            Not After : Mar  3 11:04:56 2025 GMT
        Subject: CN=F63EC172BAFAC1089FA78C92C88171E27D5FC0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:7a:03:9f:08:f7:da:89:04:79:ff:f5:f3:
                    3b:1c:93:f6:5c:2b:97:c8:53:1f:71:f0:93:34:b0:
                    db:4b:ff:29:00:0c:88:e8:e2:d3:f7:4e:31:ff:df:
                    5f:3a:67:3c:7c:fe:36:4b:a1:f0:b1:81:11:a1:0d:
                    48:35:8a:ff:fe:ce:c7:20:82:7a:ad:aa:e2:17:37:
                    51:cb:08:b4:2a:73:79:7e:ed:eb:3e:50:3e:1d:cb:
                    cf:aa:b9:a9:0d:d9:07:63:bb:1c:3d:51:8a:98:36:
                    fd:66:dc:27:e7:b9:e6:69:bc:84:28:ba:1c:b4:be:
                    66:4e:92:ba:91:76:4c:53:13:ab:5f:75:4e:57:78:
                    8a:7e:e9:57:7c:24:67:0e:ec:4d:86:19:e8:bf:a0:
                    bd:b9:ff:89:53:53:db:93:a5:b0:1d:dc:7b:a8:63:
                    06:4e:89:92:67:83:85:77:b3:81:ab:94:80:53:44:
                    f2:9b:4b:a4:53:7d:48:39:1e:78:83:f7:a5:50:9a:
                    29:52:e1:c1:c6:1f:16:08:2c:89:c6:1b:4d:b7:1a:
                    71:1d:5c:ab:cc:64:0b:1a:64:93:43:38:86:96:eb:
                    30:90:81:3e:04:0f:66:61:bb:80:67:aa:e6:1b:3f:
                    2e:55:f3:66:11:e2:e3:4c:b5:7f:87:b6:59:fa:1f:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3E:C1:72:BA:FA:C1:08:9F:A7:8C:92:C8:81:71:E2:7D:5F:C0:F0
            X509v3 Authority Key Identifier:
                keyid:F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/F38654E1757B49C2186636D148FED7E1055CBD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a3a2f33342d3334203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/34

    Signature Algorithm: sha256WithRSAEncryption
         9c:13:0d:5e:90:f6:40:ab:8c:83:61:09:e7:58:89:01:8f:b8:
         19:02:a4:c6:06:3e:e0:2e:5f:67:e2:56:b3:cb:16:02:17:8e:
         1d:fa:dc:25:32:bb:dd:f0:6b:45:0e:2d:c9:8b:da:6a:d2:f1:
         12:da:8f:ee:21:95:0d:1a:9b:f1:63:88:c4:f2:b5:a9:73:d9:
         b5:85:d3:65:6d:42:f5:d9:eb:ff:8c:11:6a:ca:7f:ae:2a:13:
         41:14:a1:94:d6:fd:c1:00:39:66:53:11:af:db:3b:27:d5:b7:
         f5:ff:eb:97:49:b1:f7:3d:56:e8:3b:50:86:15:7d:0d:d3:cd:
         35:39:55:31:f5:65:a0:97:00:9f:81:78:6b:e7:2a:7b:ab:2a:
         49:25:9d:01:61:fa:75:85:e9:12:07:b7:6c:b8:54:eb:b4:f6:
         f4:42:a6:f4:21:9c:d1:63:85:55:71:c0:9a:6d:63:92:94:d0:
         cd:39:7f:10:70:d8:49:27:7a:24:40:f6:cb:a3:fa:e8:55:13:
         d2:2c:3a:b1:5a:5a:4c:8f:45:c8:a1:ac:40:95:ca:c7:0b:4e:
         d0:53:c2:8d:26:9b:e2:37:d3:3b:79:a6:28:3c:56:a6:0e:7a:
         ca:68:8f:74:23:f1:26:0d:5a:db:38:53:84:a2:99:f6:5d:5b:
         cd:bf:e2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org