Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeayFVvqCdpDRcrNGhBMjpQxVtGhiQBEo9BiKyVHTZcm/0/323830343a343432383a3a2f33322d3335203d3e20323637363036.roa
File:                     323830343a343432383a3a2f33322d3335203d3e20323637363036.roa (raw, json)
Hash identifier:          GveFqRoTjDdl2azHrYYLfjK25ZgoZqNWwGofpZyh/zw=
Subject key identifier:   1B:80:4C:85:9F:76:CC:7A:C8:5A:DF:C6:51:37:17:F1:71:E8:E2:3D
Certificate issuer:       /CN=FEB6A689B23892BECB5B001298CD63B788E192A8
Certificate serial:       38AA738701EFF3FB43E4ED09743C40D0BCD9874E
Authority key identifier: FE:B6:A6:89:B2:38:92:BE:CB:5B:00:12:98:CD:63:B7:88:E1:92:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEB6A689B23892BECB5B001298CD63B788E192A8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeayFVvqCdpDRcrNGhBMjpQxVtGhiQBEo9BiKyVHTZcm/0/323830343a343432383a3a2f33322d3335203d3e20323637363036.roa
Signing time:             Sat 02 Sep 2023 23:00:00 +0000
ROA not before:           Sat 02 Sep 2023 22:55:00 +0000
ROA not after:            Mon 02 Sep 2024 23:00:00 +0000
asID:                     267606
IP address blocks:        2804:4428::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:aa:73:87:01:ef:f3:fb:43:e4:ed:09:74:3c:40:d0:bc:d9:87:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEB6A689B23892BECB5B001298CD63B788E192A8
        Validity
            Not Before: Sep  2 22:55:00 2023 GMT
            Not After : Sep  2 23:00:00 2024 GMT
        Subject: CN=3082010A0282010100B9488DEE616919344803472C637380C3691A5569954786E62FE129AFF2CCE57F023D6D0B72A4B78DE5C4FB01D7B2B6E6C36BEC4AE40D8541C76919D1FCDCF67007D0CBA672EE0239A05F10A83CD2E28BD76013E1C3C2CA82EC6657ECB2D6C83702C25F88180A120AF0E28CA7106C4672A46FE95F7D950480443B1C33F36611801E07866BF09FFD8B12A8F835D21D80A5462F1B8E77704AD0C7F5A4BA143A7247A8BCB4983A69CC47606D1CFB8CBD0A25965BF27E7CFFA781CE5893057FA4DA3B3EF9288488070248B161F1BC867AF99B797CDBDBE3DBB94D1661BA9EB31142B04379153916F840C1F39EF4ADFCC8E543C510C06B41DD29A619E439E51CF55C810203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:48:8d:ee:61:69:19:34:48:03:47:2c:63:73:
                    80:c3:69:1a:55:69:95:47:86:e6:2f:e1:29:af:f2:
                    cc:e5:7f:02:3d:6d:0b:72:a4:b7:8d:e5:c4:fb:01:
                    d7:b2:b6:e6:c3:6b:ec:4a:e4:0d:85:41:c7:69:19:
                    d1:fc:dc:f6:70:07:d0:cb:a6:72:ee:02:39:a0:5f:
                    10:a8:3c:d2:e2:8b:d7:60:13:e1:c3:c2:ca:82:ec:
                    66:57:ec:b2:d6:c8:37:02:c2:5f:88:18:0a:12:0a:
                    f0:e2:8c:a7:10:6c:46:72:a4:6f:e9:5f:7d:95:04:
                    80:44:3b:1c:33:f3:66:11:80:1e:07:86:6b:f0:9f:
                    fd:8b:12:a8:f8:35:d2:1d:80:a5:46:2f:1b:8e:77:
                    70:4a:d0:c7:f5:a4:ba:14:3a:72:47:a8:bc:b4:98:
                    3a:69:cc:47:60:6d:1c:fb:8c:bd:0a:25:96:5b:f2:
                    7e:7c:ff:a7:81:ce:58:93:05:7f:a4:da:3b:3e:f9:
                    28:84:88:07:02:48:b1:61:f1:bc:86:7a:f9:9b:79:
                    7c:db:db:e3:db:b9:4d:16:61:ba:9e:b3:11:42:b0:
                    43:79:15:39:16:f8:40:c1:f3:9e:f4:ad:fc:c8:e5:
                    43:c5:10:c0:6b:41:dd:29:a6:19:e4:39:e5:1c:f5:
                    5c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:80:4C:85:9F:76:CC:7A:C8:5A:DF:C6:51:37:17:F1:71:E8:E2:3D
            X509v3 Authority Key Identifier:
                keyid:FE:B6:A6:89:B2:38:92:BE:CB:5B:00:12:98:CD:63:B7:88:E1:92:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeayFVvqCdpDRcrNGhBMjpQxVtGhiQBEo9BiKyVHTZcm/0/FEB6A689B23892BECB5B001298CD63B788E192A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEB6A689B23892BECB5B001298CD63B788E192A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeayFVvqCdpDRcrNGhBMjpQxVtGhiQBEo9BiKyVHTZcm/0/323830343a343432383a3a2f33322d3335203d3e20323637363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4428::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:b7:01:19:9d:6b:ca:f1:b1:4c:22:2c:fc:51:4f:ff:0c:ff:
         9d:d0:b6:9a:af:82:9a:fe:db:21:67:f7:62:46:91:ad:9f:54:
         0d:e4:59:c1:7e:55:83:d7:c0:8f:ba:dc:27:3b:7a:7b:18:c1:
         0d:e6:98:58:1d:68:2a:0d:83:91:6c:3d:73:d5:83:6b:2d:1a:
         d6:32:4e:30:94:f0:0b:10:ce:ce:52:1b:47:00:c6:72:fa:db:
         b6:23:aa:4b:0b:ff:ee:ad:bc:a0:4d:fd:25:bb:86:d8:4b:91:
         9b:7a:3d:06:1e:71:c4:2f:58:d2:02:dc:53:36:08:fc:68:a9:
         36:40:24:aa:46:8d:89:8d:8d:4d:e2:2e:b6:34:c7:f2:97:af:
         a1:12:26:43:c1:87:9f:5b:cb:2e:13:5a:21:60:44:b6:3f:03:
         08:65:08:1f:57:7c:be:c4:c7:83:7a:88:ff:f0:de:f4:87:f3:
         c1:be:00:e8:ec:5a:d4:9b:02:8c:4b:95:2b:8a:bb:4a:41:9c:
         30:5e:5a:92:3c:60:b9:c4:39:56:76:3a:ca:b7:07:7a:26:38:
         9d:86:78:74:2c:9d:e0:7a:fc:56:04:b0:f4:46:93:1e:81:09:
         3b:ce:47:4a:e4:36:1d:7f:66:5a:77:ad:60:da:1b:26:7e:d7:
         7b:53:9a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:26 2024 by rpki-client on console-ams.rpki-client.org