Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a3a2f34382d3438203d3e203532353435.roa
File:                     323830343a6531633a3a2f34382d3438203d3e203532353435.roa (raw, json)
Hash identifier:          s2tssSP+HCJji6ZSxbJpewWhfrcn3uRsIMdZC026A3Y=
Subject key identifier:   72:C8:76:0E:F7:D7:F8:CF:AA:80:86:BA:78:16:1F:A5:88:10:33:D0
Certificate issuer:       /CN=F38654E1757B49C2186636D148FED7E1055CBD91
Certificate serial:       56C3F1DD671C75DA57560F67F92A369F568CF205
Authority key identifier: F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a3a2f34382d3438203d3e203532353435.roa
Signing time:             Mon 04 Mar 2024 11:04:56 +0000
ROA not before:           Mon 04 Mar 2024 10:59:56 +0000
ROA not after:            Mon 03 Mar 2025 11:04:56 +0000
asID:                     52545
IP address blocks:        2804:e1c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c3:f1:dd:67:1c:75:da:57:56:0f:67:f9:2a:36:9f:56:8c:f2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38654E1757B49C2186636D148FED7E1055CBD91
        Validity
            Not Before: Mar  4 10:59:56 2024 GMT
            Not After : Mar  3 11:04:56 2025 GMT
        Subject: CN=72C8760EF7D7F8CFAA8086BA78161FA5881033D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:66:2b:b5:e8:d0:45:70:59:3e:1b:be:53:5c:
                    12:5f:0a:03:f6:ef:f2:c7:4a:ac:81:32:3d:8b:7f:
                    64:98:90:78:6b:85:2c:88:79:f4:a1:75:3e:cf:1a:
                    ef:08:92:0a:e4:55:6f:4e:c3:5a:ce:1b:6e:4c:a1:
                    ca:20:e7:32:42:76:67:ad:17:cd:0e:62:8d:b2:e5:
                    68:db:fb:e3:db:9e:04:ed:32:87:93:97:c7:bd:d6:
                    2a:8c:c3:2f:91:49:fd:56:15:f3:c1:bc:bd:90:d6:
                    c3:4b:a4:db:1d:cb:f6:ce:c4:4a:34:69:8a:f2:17:
                    2a:db:23:8c:6f:66:3d:65:2b:2e:fd:41:88:52:8c:
                    04:11:58:22:92:27:52:48:a6:c2:53:45:8e:5d:7e:
                    d2:38:a8:f2:49:19:58:bc:91:1a:1f:b8:19:df:73:
                    96:92:b2:cd:af:4a:aa:88:a0:50:ef:2f:e4:b2:e9:
                    1a:52:4d:d7:c3:76:5f:34:33:03:d0:91:97:81:ce:
                    8b:63:92:5f:c2:c5:fd:a2:2a:48:1c:d5:f9:36:60:
                    c7:85:0a:12:45:8f:e9:cd:9b:ff:fc:b4:ba:b9:1b:
                    8e:5c:4a:b3:42:a2:50:a0:0f:7e:f2:5d:ba:53:60:
                    3a:a9:e7:69:99:eb:ba:c9:7a:1e:1a:25:4d:c6:67:
                    54:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C8:76:0E:F7:D7:F8:CF:AA:80:86:BA:78:16:1F:A5:88:10:33:D0
            X509v3 Authority Key Identifier:
                keyid:F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/F38654E1757B49C2186636D148FED7E1055CBD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a3a2f34382d3438203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:35:08:60:f1:35:f5:25:58:59:31:35:1c:73:6b:30:e9:3e:
         0f:20:ca:ad:b1:65:c1:9a:8b:36:9c:1e:a3:66:13:65:ad:79:
         d1:d3:bf:48:46:08:c9:b8:c4:bd:dc:36:0f:36:50:e9:21:d0:
         cb:ab:53:96:ce:74:8b:3a:5e:59:81:0e:0b:f1:f4:56:6e:77:
         92:63:35:b7:f9:fb:71:37:10:db:ac:f1:fc:5f:2d:64:9e:72:
         b1:4b:58:07:b8:c6:bd:21:52:48:6b:98:c2:b8:ca:07:29:dd:
         49:02:b3:93:45:19:04:ac:a0:fd:34:68:a7:aa:7a:01:4f:85:
         f7:dc:70:24:29:96:fb:82:53:40:93:a0:77:05:43:0f:7b:c1:
         63:a6:32:e8:5b:02:88:58:02:18:0d:19:eb:5c:8d:2b:09:02:
         c0:2f:26:58:8b:fd:9a:18:50:98:a2:c0:aa:81:4b:a1:7d:83:
         fe:f9:bc:66:80:7f:2e:e1:09:1b:4e:4d:ea:5d:df:3d:51:cb:
         0b:30:d8:48:3b:4f:74:d1:e8:45:9a:81:d5:b7:c3:d0:b2:5d:
         52:af:a2:43:e1:82:bc:5d:e5:32:e8:77:86:50:83:2b:73:7f:
         0e:9b:90:2c:5b:77:d8:74:df:88:f8:bb:15:e3:be:94:02:fc:
         2e:15:96:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org