Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/323830343a316362633a3130303a3a2f34382d3438203d3e203631363732.roa
File:                     323830343a316362633a3130303a3a2f34382d3438203d3e203631363732.roa (raw, json)
Hash identifier:          whXMcTV1JOhmpTf0mGp3crjjL8GHsZvZFO5213e3340=
Subject key identifier:   75:FC:25:4C:18:CD:29:B5:4D:CF:BD:27:B2:87:37:02:5A:66:BF:B4
Certificate issuer:       /CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
Certificate serial:       0BE22C8C4D0AD7767B91AD969C39614630B59855
Authority key identifier: 1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/323830343a316362633a3130303a3a2f34382d3438203d3e203631363732.roa
Signing time:             Thu 07 Sep 2023 21:44:29 +0000
ROA not before:           Thu 07 Sep 2023 21:39:29 +0000
ROA not after:            Thu 05 Sep 2024 21:44:29 +0000
asID:                     61672
IP address blocks:        2804:1cbc:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:e2:2c:8c:4d:0a:d7:76:7b:91:ad:96:9c:39:61:46:30:b5:98:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F645F7A9A5F3B292E41AEB9E01409A3B1526C39
        Validity
            Not Before: Sep  7 21:39:29 2023 GMT
            Not After : Sep  5 21:44:29 2024 GMT
        Subject: CN=75FC254C18CD29B54DCFBD27B28737025A66BFB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6b:fd:08:37:1f:1a:80:73:4d:b0:2d:cb:df:
                    96:cc:a0:5b:85:19:7c:a5:e2:33:34:ae:c4:eb:ba:
                    8f:a7:77:31:92:85:69:4e:1a:f1:09:d9:1e:33:2b:
                    b6:ac:9f:96:12:dc:d5:43:6e:63:59:d9:d2:7f:9c:
                    21:40:d3:8d:98:2a:5a:f5:ef:88:ef:c5:83:e4:e5:
                    29:70:b8:08:f4:c1:b8:fa:c3:c1:6d:09:14:23:9d:
                    5a:b1:76:e9:b2:37:2d:2f:45:37:9e:4f:0a:e2:97:
                    87:1c:af:35:3b:d5:5b:34:e6:26:4d:a9:4a:6d:67:
                    07:c9:82:7e:e9:90:fe:8d:e6:b2:4e:a2:78:5a:42:
                    44:49:76:e6:0d:a2:5d:41:54:a8:c7:19:c6:e1:f5:
                    03:c3:3e:a0:58:92:d5:c8:09:d4:9c:a3:75:f1:02:
                    9b:4b:e8:7e:87:32:36:16:a5:5a:30:4c:ab:b3:0f:
                    ba:ad:39:b6:c8:d7:f1:ed:38:0f:dc:00:c8:d9:4d:
                    c4:f8:80:c4:80:23:a0:e5:53:ea:86:68:6b:72:fa:
                    e7:9b:02:94:f1:f1:75:8b:9e:13:0c:92:e7:09:f2:
                    3c:9b:b2:85:11:ff:bd:4f:12:bf:10:c1:1e:66:63:
                    74:27:77:8d:e0:87:4d:21:b7:d0:37:b2:a5:3b:73:
                    7c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FC:25:4C:18:CD:29:B5:4D:CF:BD:27:B2:87:37:02:5A:66:BF:B4
            X509v3 Authority Key Identifier:
                keyid:1F:64:5F:7A:9A:5F:3B:29:2E:41:AE:B9:E0:14:09:A3:B1:52:6C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F645F7A9A5F3B292E41AEB9E01409A3B1526C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/0/323830343a316362633a3130303a3a2f34382d3438203d3e203631363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cbc:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:13:9a:cb:e6:95:ce:d4:4d:cf:d5:e9:af:c9:9f:b1:7b:96:
         8c:ef:55:9b:40:6e:9b:45:08:99:b1:b2:ca:ed:ed:90:60:b6:
         b3:0d:54:0d:06:18:4b:00:a1:1b:36:17:6b:bd:67:7d:b0:d1:
         5f:ba:7f:51:e6:29:0e:93:b8:ba:4c:9c:6e:e2:59:89:77:19:
         81:57:96:b1:72:9a:eb:5b:8b:5e:42:39:4e:7e:68:ac:eb:82:
         5d:88:fb:69:da:aa:fc:fb:c6:93:82:52:cd:15:6a:31:7f:e5:
         8e:62:b7:00:de:46:1f:49:5c:c5:4a:90:cf:5c:bc:d7:65:f8:
         a8:a8:f0:b0:c8:74:d4:f9:1f:71:06:15:82:60:3f:e7:ce:d4:
         21:db:c6:6b:b9:50:b1:6c:64:e0:04:55:e0:00:4b:ee:fd:01:
         13:6e:bb:7b:50:9d:46:84:fb:9f:8d:81:b4:dc:4a:96:11:14:
         79:da:cb:12:6d:37:bb:38:27:8a:5c:ed:e7:05:31:4b:55:b5:
         e9:0d:c1:a6:a0:69:bf:bd:ae:b4:66:d1:5f:84:5e:bc:8b:a2:
         17:65:88:16:91:f6:ae:c1:b3:f7:55:9b:0c:40:38:90:ca:fe:
         01:db:b8:34:91:a5:9c:dd:a9:29:ea:ce:2a:dd:73:3e:ac:6e:
         7d:c9:cf:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:57 2024 by rpki-client on console-ams.rpki-client.org