Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/323830343a373835383a3a2f33322d3332203d3e20323731323336.roa
File:                     323830343a373835383a3a2f33322d3332203d3e20323731323336.roa (raw, json)
Hash identifier:          wCBe8H3DPjZqnsDFLOSumocHngRd0T8nIxtCFhK6Y+I=
Subject key identifier:   8D:C4:9B:98:C7:87:7A:62:03:9A:53:BD:AF:74:1E:D6:4A:13:AF:AA
Certificate issuer:       /CN=FB4E8268F55E6D07CFB3F2F830157A6D39A1040E
Certificate serial:       030BD6B919F0F83661B8ED4EDCD2388D46E735C2
Authority key identifier: FB:4E:82:68:F5:5E:6D:07:CF:B3:F2:F8:30:15:7A:6D:39:A1:04:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4E8268F55E6D07CFB3F2F830157A6D39A1040E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/323830343a373835383a3a2f33322d3332203d3e20323731323336.roa
Signing time:             Mon 23 Oct 2023 21:10:55 +0000
ROA not before:           Mon 23 Oct 2023 21:05:55 +0000
ROA not after:            Mon 21 Oct 2024 21:10:55 +0000
asID:                     271236
IP address blocks:        2804:7858::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0b:d6:b9:19:f0:f8:36:61:b8:ed:4e:dc:d2:38:8d:46:e7:35:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB4E8268F55E6D07CFB3F2F830157A6D39A1040E
        Validity
            Not Before: Oct 23 21:05:55 2023 GMT
            Not After : Oct 21 21:10:55 2024 GMT
        Subject: CN=8DC49B98C7877A62039A53BDAF741ED64A13AFAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a3:87:48:1f:d0:ee:21:55:81:97:c7:2e:c5:
                    a8:08:8a:c0:08:27:db:76:60:68:4f:8c:ca:be:8b:
                    79:bb:e8:40:eb:84:3b:11:0f:c2:2b:58:e0:2d:c3:
                    eb:87:31:6d:33:6a:50:c5:98:74:b8:ea:e5:b6:20:
                    93:ae:fe:af:ad:df:e8:3f:b6:2f:65:17:da:40:a9:
                    db:fe:7f:18:a3:fb:ec:47:9b:84:77:bd:53:d9:9b:
                    ed:c0:9b:b6:c3:fa:67:9f:31:99:3a:48:86:14:4b:
                    f9:22:fe:4f:89:52:85:20:60:98:7f:da:ec:ad:f2:
                    f4:f3:14:1c:20:5d:72:cd:94:e8:e6:90:fa:5f:f3:
                    5f:a3:c3:a7:68:40:0a:1d:10:21:c5:be:88:fe:06:
                    12:5f:e2:c8:2c:50:0e:fa:f0:b4:ff:af:9f:84:52:
                    5c:b9:37:52:c4:63:59:ea:ae:d4:d4:93:4d:2c:d3:
                    ae:00:42:b9:bb:03:19:db:7e:89:b8:71:b9:5d:b0:
                    77:11:8c:fc:78:07:e3:4c:93:cb:28:1c:0d:ce:a7:
                    11:1d:a6:20:47:01:fd:b0:dc:9e:c3:6e:7f:16:51:
                    c7:8b:d5:f6:2f:87:e6:cb:3b:dc:37:cf:8f:ad:af:
                    28:13:db:7a:5f:4d:15:41:ea:98:2c:e4:9c:1d:d6:
                    7d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C4:9B:98:C7:87:7A:62:03:9A:53:BD:AF:74:1E:D6:4A:13:AF:AA
            X509v3 Authority Key Identifier:
                keyid:FB:4E:82:68:F5:5E:6D:07:CF:B3:F2:F8:30:15:7A:6D:39:A1:04:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/FB4E8268F55E6D07CFB3F2F830157A6D39A1040E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB4E8268F55E6D07CFB3F2F830157A6D39A1040E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsnVXKFbFzrR6Ur8HXWz1Dm5oJMdm71N8UHgrC4FbzmA/0/323830343a373835383a3a2f33322d3332203d3e20323731323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7858::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:a9:e1:6d:e5:d2:bf:3c:01:54:c2:a6:0b:13:27:e0:f9:c9:
         13:47:59:18:af:af:57:1e:75:38:b4:d2:07:61:39:38:d3:5a:
         ca:f8:2e:9e:e2:2b:f8:36:59:32:e7:3a:fb:a1:9d:99:be:75:
         aa:4f:19:cf:02:5f:54:d3:b7:ed:3a:3e:11:d2:c6:70:02:5e:
         10:67:80:c7:c3:a2:fc:2e:81:c3:3a:cb:06:12:cd:9d:13:85:
         f5:b0:30:5f:99:66:c4:35:6b:15:fb:05:21:97:fc:13:16:ba:
         b9:8c:bf:e8:59:b7:9b:4c:63:19:04:79:67:80:cc:db:98:a4:
         dc:86:f4:dc:2d:45:da:84:ca:e6:a8:84:48:bc:d3:91:94:16:
         2f:26:52:e1:03:ee:41:f4:6f:bf:b5:27:4a:8a:38:bc:3d:f9:
         4f:66:db:33:d8:b8:86:28:c5:42:fa:ce:90:bb:1a:d4:74:6f:
         31:1f:b9:8e:a6:d7:c2:84:74:da:d8:20:d4:3f:7d:20:f5:4f:
         b1:cb:f2:06:b1:81:4e:bd:bf:32:b0:88:90:45:9a:b7:a8:75:
         7b:94:15:c9:08:a2:d5:0f:f6:70:46:b0:25:22:1a:7b:fb:ff:
         77:4a:fc:3e:79:be:74:8a:6a:17:8a:23:90:a6:c4:b5:ac:0a:
         5d:df:e8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org