Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/323830343a316163383a343030303a3a2f33342d3334203d3e203631383835.roa
File:                     323830343a316163383a343030303a3a2f33342d3334203d3e203631383835.roa (raw, json)
Hash identifier:          TytW2nRRHf5bzydmmMA+osGOViG4AOz8CQ+6XTV1wcc=
Subject key identifier:   F5:01:1B:F0:6A:83:8D:12:74:8A:42:9C:88:89:CE:FF:AF:5B:2D:80
Certificate issuer:       /CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
Certificate serial:       35905CA61BA41B97164EAB59737E78B65C329A4D
Authority key identifier: FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/323830343a316163383a343030303a3a2f33342d3334203d3e203631383835.roa
Signing time:             Thu 04 Apr 2024 15:17:11 +0000
ROA not before:           Thu 04 Apr 2024 15:12:11 +0000
ROA not after:            Thu 03 Apr 2025 15:17:11 +0000
asID:                     61885
IP address blocks:        2804:1ac8:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:90:5c:a6:1b:a4:1b:97:16:4e:ab:59:73:7e:78:b6:5c:32:9a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F
        Validity
            Not Before: Apr  4 15:12:11 2024 GMT
            Not After : Apr  3 15:17:11 2025 GMT
        Subject: CN=F5011BF06A838D12748A429C8889CEFFAF5B2D80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e8:5a:02:c1:bf:0b:e5:cf:c6:d6:46:9e:d6:
                    b6:fd:1e:d2:42:ef:75:21:ff:5d:cb:86:53:a1:de:
                    bc:0f:3f:b0:10:92:01:ca:54:3d:96:12:a1:84:86:
                    96:fd:5a:12:13:3f:a6:bb:ae:46:73:76:ab:d3:83:
                    23:ac:cb:07:41:4f:e0:24:a9:7e:0e:e9:d7:b8:0f:
                    09:aa:a0:8b:6b:46:7a:03:ce:40:bd:39:32:de:99:
                    8c:3e:21:80:6e:be:4c:0d:52:09:49:6b:95:84:00:
                    dc:de:1e:15:0d:1d:6f:f5:d8:11:8a:bf:84:03:6c:
                    f9:a4:ea:94:d2:09:9f:c5:f7:06:7a:ed:fe:01:07:
                    43:1f:c1:85:2b:9b:0e:9d:bf:78:e1:b4:7b:f2:2a:
                    d4:3d:65:c6:63:c5:6b:ca:4b:ff:80:1d:da:a9:21:
                    e0:81:4b:18:69:b4:c4:1b:c2:b4:cf:6c:b2:1b:fa:
                    0b:08:ac:58:8c:6e:24:f2:7f:e9:ca:03:47:60:21:
                    2f:7f:a1:c5:31:e6:c0:bd:0e:22:dd:e8:de:bd:99:
                    89:dc:82:7e:45:fd:64:92:f1:b9:5f:e9:8e:fa:57:
                    1a:2b:d2:c7:aa:39:d8:68:21:d3:c6:89:7e:b5:06:
                    3c:c0:70:46:15:ba:9f:5c:3f:d2:b1:85:7c:6d:06:
                    f3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:01:1B:F0:6A:83:8D:12:74:8A:42:9C:88:89:CE:FF:AF:5B:2D:80
            X509v3 Authority Key Identifier:
                keyid:FC:68:8B:7E:5E:77:F5:FD:A8:7F:9C:E9:52:7A:AE:6E:C6:C5:B5:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC688B7E5E77F5FDA87F9CE9527AAE6EC6C5B55F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HDKSis7YANFujr9dLEGVfFgiGG99gyZpQW7qvAtja9dt/1/323830343a316163383a343030303a3a2f33342d3334203d3e203631383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ac8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0a:89:c7:37:f2:51:27:61:9b:58:87:4b:42:12:9b:29:66:45:
         d5:4e:e1:31:ef:01:4d:8c:c3:ec:10:48:a8:41:6b:7f:f5:ec:
         8d:91:71:24:59:96:a9:62:f8:fb:3f:7c:72:59:4f:04:53:88:
         db:fc:2d:2d:d1:43:de:fd:b6:06:fb:23:6a:87:40:4b:2f:81:
         ff:dd:5a:72:93:cd:24:21:94:73:2e:75:df:e5:58:9e:6d:4a:
         82:f5:2f:f2:3a:88:29:3b:77:f4:74:38:81:f4:8b:7e:7c:e5:
         c0:9d:01:85:bc:d1:89:3c:a7:69:3c:fe:b4:c4:f9:ca:42:b5:
         fb:1e:c9:f8:92:d6:6c:a7:a6:29:db:82:69:97:dc:2e:46:a7:
         27:b0:fe:2a:06:d3:f6:46:18:47:45:4f:b1:fd:f6:af:6e:65:
         f2:94:c7:2b:c1:20:07:3a:77:84:7a:7d:42:97:14:4c:2b:73:
         b3:30:9d:13:d0:d0:76:98:d0:38:12:cd:7d:78:08:74:4c:3a:
         1a:de:60:e7:42:ad:5c:48:51:65:6e:22:ca:e9:b3:6a:03:fa:
         6b:ba:30:4e:ea:fb:c0:96:2a:38:90:42:ef:e5:ba:23:be:a9:
         4d:f0:68:2b:46:fd:a2:b0:27:a8:ac:01:23:96:b1:cf:4f:e5:
         63:ff:97:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:36 2024 by rpki-client on console-ams.rpki-client.org