Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa
File:                     323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa (raw, json)
Hash identifier:          z5XQjREFniZcjP0Dwue5NQ3I55ETtZh4fWtcON8yNHI=
Subject key identifier:   21:91:D8:DA:08:71:9E:23:BE:C2:55:B8:39:FE:FC:1C:35:D2:1D:0B
Certificate issuer:       /CN=F38654E1757B49C2186636D148FED7E1055CBD91
Certificate serial:       2BAAE069F7A145F2BE14631493741369C49FE896
Authority key identifier: F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa
Signing time:             Mon 04 Mar 2024 11:04:55 +0000
ROA not before:           Mon 04 Mar 2024 10:59:55 +0000
ROA not after:            Mon 03 Mar 2025 11:04:55 +0000
asID:                     52545
IP address blocks:        2804:e1c:fb00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:aa:e0:69:f7:a1:45:f2:be:14:63:14:93:74:13:69:c4:9f:e8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F38654E1757B49C2186636D148FED7E1055CBD91
        Validity
            Not Before: Mar  4 10:59:55 2024 GMT
            Not After : Mar  3 11:04:55 2025 GMT
        Subject: CN=2191D8DA08719E23BEC255B839FEFC1C35D21D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:f0:64:2f:10:5d:e4:ca:f6:04:91:61:1f:
                    f7:3f:7f:6b:c0:3e:62:ba:57:06:a1:04:aa:56:d9:
                    48:98:6d:d3:a7:95:ca:95:41:26:3a:f7:f6:c3:a5:
                    06:63:ae:ca:bb:10:53:c9:2e:2a:07:af:f0:01:9d:
                    8f:ed:0b:b3:24:46:64:ca:71:31:1b:f6:85:58:c7:
                    ff:61:66:49:ea:90:22:c5:19:b2:ae:f6:81:ca:90:
                    41:5f:da:04:5c:1f:31:36:ed:96:9b:9c:6f:d8:af:
                    21:45:94:d1:e7:f4:20:a4:e9:b5:56:93:7e:98:64:
                    9d:e0:bd:eb:18:23:79:9a:2e:4c:2a:68:26:f8:0f:
                    a5:06:1e:b5:57:a3:d3:8c:db:d0:6b:ab:ae:5e:cb:
                    ff:85:1a:03:cc:d7:59:5a:58:ff:6e:63:3e:76:94:
                    aa:40:99:9a:31:e2:45:7a:30:e5:b9:d4:76:24:3c:
                    dd:7d:4b:5d:1b:f5:74:b2:b2:13:c8:8f:8b:35:40:
                    ae:36:f3:01:9e:bf:cf:83:8d:f0:09:58:49:a8:d6:
                    40:47:4b:35:2e:b5:2e:48:f5:54:50:b9:d0:f2:09:
                    54:1b:c0:f4:2e:13:bc:fc:1f:0a:05:3b:29:0b:d7:
                    0f:80:f0:03:95:cf:80:78:aa:92:a3:79:16:1f:2c:
                    3e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:91:D8:DA:08:71:9E:23:BE:C2:55:B8:39:FE:FC:1C:35:D2:1D:0B
            X509v3 Authority Key Identifier:
                keyid:F3:86:54:E1:75:7B:49:C2:18:66:36:D1:48:FE:D7:E1:05:5C:BD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/F38654E1757B49C2186636D148FED7E1055CBD91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F38654E1757B49C2186636D148FED7E1055CBD91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/2/323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:b8:1c:87:f6:70:65:5b:1a:0d:d5:7c:a4:cc:3d:07:23:b9:
         e1:1e:0b:73:7c:37:da:eb:0c:75:e2:24:06:8c:b4:6f:e4:d8:
         46:0e:ed:2e:48:31:ae:de:c5:df:73:60:71:a4:56:4b:b3:67:
         4a:2d:9b:0b:ad:e4:8c:bf:e5:6c:0d:82:ab:57:b3:d8:0c:fd:
         1c:e3:f3:4d:c7:de:7b:c1:65:8f:74:22:e0:e6:66:6c:2e:62:
         07:8c:6e:66:92:83:57:34:78:07:e4:c4:fd:2e:9b:5e:49:1b:
         10:9e:b9:b5:b8:ae:f7:06:6b:7f:7a:5f:0e:b2:48:88:40:e8:
         dc:5a:fe:63:f0:c3:84:a4:be:7a:79:1d:bc:83:cd:60:be:d7:
         c6:d9:fd:90:dc:b7:9b:a2:ac:a7:59:92:95:d9:2a:96:3c:75:
         ef:1f:36:24:0a:65:b7:da:75:00:5d:57:ee:d9:61:e9:b0:8e:
         3a:8c:0f:05:b6:ec:3b:c7:e0:c3:a7:7d:79:bf:12:99:33:2f:
         ae:9f:bf:e7:80:14:08:68:ec:93:22:be:e9:a1:70:89:73:fd:
         08:dc:09:a6:88:2c:de:d3:4a:65:79:bb:56:62:dc:8b:23:05:
         3b:7e:16:d7:ff:42:0e:29:c3:25:ea:3e:92:72:12:68:ed:32:
         d7:75:7b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org