Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/323830343a6430633a3a2f33362d3336203d3e203533313132.roa
File:                     323830343a6430633a3a2f33362d3336203d3e203533313132.roa (raw, json)
Hash identifier:          MY0JkqBOl9+TVFhlrJTSqudHHWmaJtfHSwVSMS+dg34=
Subject key identifier:   02:35:15:F1:2E:FA:3C:A2:BE:10:9D:14:D8:35:97:19:EF:92:EC:6F
Certificate issuer:       /CN=FB77F49574CBE0843961A23238230FA3417E4159
Certificate serial:       3C73D6107E58304A4BCE0D985C642021048753C4
Authority key identifier: FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/323830343a6430633a3a2f33362d3336203d3e203533313132.roa
Signing time:             Thu 25 Jan 2024 23:56:24 +0000
ROA not before:           Thu 25 Jan 2024 23:51:24 +0000
ROA not after:            Thu 23 Jan 2025 23:56:24 +0000
asID:                     53112
IP address blocks:        2804:d0c::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:73:d6:10:7e:58:30:4a:4b:ce:0d:98:5c:64:20:21:04:87:53:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB77F49574CBE0843961A23238230FA3417E4159
        Validity
            Not Before: Jan 25 23:51:24 2024 GMT
            Not After : Jan 23 23:56:24 2025 GMT
        Subject: CN=023515F12EFA3CA2BE109D14D8359719EF92EC6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:79:28:ba:bb:32:32:94:18:0b:f7:a9:cf:80:
                    82:49:25:06:99:64:fe:93:de:fd:55:bc:78:04:0b:
                    c3:1b:37:06:6e:8b:3b:54:8d:ac:7b:6b:1c:55:00:
                    f9:ab:11:f9:cf:78:be:d4:23:fb:a9:4e:ba:7a:cc:
                    24:88:84:8d:d0:e5:a3:e3:80:31:01:0f:f7:9c:40:
                    ae:0e:12:52:d3:36:09:71:48:19:b5:90:73:30:24:
                    f5:0b:54:de:bc:0d:fd:04:ce:e6:76:ed:b1:70:3c:
                    74:8b:96:93:73:41:40:15:d0:8d:f0:81:aa:0d:24:
                    a1:09:7d:ec:ae:64:2d:22:8b:43:07:b2:e0:8c:61:
                    93:c0:9c:53:74:38:a6:40:7d:85:d1:8d:3d:89:2b:
                    24:88:fe:2d:00:c8:ab:6c:96:9f:3d:c0:db:a9:77:
                    7a:84:2a:eb:15:0c:0f:9a:3f:d3:90:73:1e:b4:3e:
                    b1:80:0a:9e:f7:f9:f2:67:da:c8:71:44:d7:e1:df:
                    ce:07:c8:22:dc:b8:68:eb:f7:ef:02:b1:93:c2:24:
                    58:45:3e:53:d4:d4:81:d0:ba:45:be:3e:21:d0:61:
                    cc:17:01:87:fb:40:43:8d:cc:78:33:77:47:9c:04:
                    4b:22:ea:b3:d2:83:6b:ef:b0:86:55:84:50:5e:d4:
                    4f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:35:15:F1:2E:FA:3C:A2:BE:10:9D:14:D8:35:97:19:EF:92:EC:6F
            X509v3 Authority Key Identifier:
                keyid:FB:77:F4:95:74:CB:E0:84:39:61:A2:32:38:23:0F:A3:41:7E:41:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/FB77F49574CBE0843961A23238230FA3417E4159.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB77F49574CBE0843961A23238230FA3417E4159.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5fTGVfAsy1N32S2bHtoL2YmWXKSMFwHeeHoU2DYQQZ1/0/323830343a6430633a3a2f33362d3336203d3e203533313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d0c::/36

    Signature Algorithm: sha256WithRSAEncryption
         38:46:25:f3:0b:db:69:f6:d1:c2:4b:7a:b2:8b:80:dd:d1:7b:
         75:47:81:44:95:f4:42:7b:1e:3d:27:b5:84:2a:7d:56:bd:c0:
         ef:4d:d8:91:5a:32:c3:95:70:4d:e3:d6:f9:68:19:df:35:76:
         66:c3:3a:e4:8b:21:53:90:ca:3a:04:82:76:6c:bc:e2:34:f0:
         44:c1:55:66:af:ac:6c:0c:0b:48:64:80:27:ef:95:62:23:e4:
         4a:2d:a5:0e:e2:a3:2b:8c:35:29:ef:85:b9:8f:37:00:54:92:
         61:d0:1c:bc:47:ca:1b:f4:22:c0:39:b1:85:dd:44:d1:1d:93:
         53:aa:cb:c7:ae:77:d6:99:11:48:1a:5a:03:66:14:b3:02:c4:
         cf:fc:a3:0e:cf:5c:d6:ea:ce:8e:63:33:c4:70:24:33:20:dd:
         ec:62:26:4a:d6:eb:67:92:62:6c:59:8a:95:a0:b4:fa:2e:c5:
         26:7f:0a:4d:8c:f6:a4:87:a0:ff:16:7a:74:4c:9a:e4:59:b8:
         00:56:c7:74:5f:52:c5:45:00:ab:84:1b:49:cb:89:16:f6:3b:
         30:54:69:2e:4d:16:dc:50:6d:7d:59:96:bb:cd:fb:b4:04:17:
         10:37:ac:2f:88:7f:38:7f:b6:db:85:35:55:42:ce:d4:e1:d3:
         06:10:14:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:34 2024 by rpki-client on console-ams.rpki-client.org