Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3a2f33322d3332203d3e203533303437.roa
File:                     323830343a3666303a3a2f33322d3332203d3e203533303437.roa (raw, json)
Hash identifier:          e6OZ3H6bbHn3l7+hulhuX1U+uXHXDgGh2S9/vX98puk=
Subject key identifier:   BC:B3:1B:73:61:BB:F9:EB:C8:FE:C3:AE:88:30:DF:65:D5:6B:DA:49
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       4F2174AC9262EA5B57BB88D4D07613E09A1820B6
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3a2f33322d3332203d3e203533303437.roa
Signing time:             Wed 22 Nov 2023 17:06:34 +0000
ROA not before:           Wed 22 Nov 2023 17:01:34 +0000
ROA not after:            Wed 20 Nov 2024 17:06:34 +0000
asID:                     53047
IP address blocks:        2804:6f0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:21:74:ac:92:62:ea:5b:57:bb:88:d4:d0:76:13:e0:9a:18:20:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 22 17:01:34 2023 GMT
            Not After : Nov 20 17:06:34 2024 GMT
        Subject: CN=BCB31B7361BBF9EBC8FEC3AE8830DF65D56BDA49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dc:e4:0f:c6:36:cd:46:b3:0c:e0:57:33:24:
                    ea:64:8b:3f:65:b6:6e:6e:c9:7c:98:ad:1d:6f:75:
                    15:f4:a5:35:8a:a0:c1:6b:0c:bd:07:cc:d5:e4:8f:
                    1e:2b:d9:d7:5f:57:32:91:0d:3e:3b:be:c6:a7:5f:
                    07:1f:44:c6:92:52:f7:03:e6:08:27:36:34:af:25:
                    53:e8:63:aa:ee:cd:5f:eb:79:fa:6d:00:8e:a5:6b:
                    03:56:4c:60:2b:d4:b8:de:a8:a0:01:8a:f8:1b:59:
                    c1:10:64:32:56:c8:84:e2:16:28:67:5a:b6:4e:31:
                    da:df:b1:96:fa:84:d0:bc:5b:5e:53:1d:c6:45:6b:
                    53:51:4b:f8:3d:3a:5b:20:ef:f2:af:76:07:47:1d:
                    6d:c8:97:80:43:af:b7:eb:df:e0:a6:95:86:a2:bf:
                    30:8e:e8:ec:5e:68:7d:98:bf:bd:dc:ee:2d:4a:f3:
                    5f:fb:bb:88:e1:df:ec:27:4d:d1:22:ef:b1:f3:be:
                    d2:c5:6a:f8:16:28:c3:ec:c6:10:74:4f:c1:02:16:
                    db:f5:1b:bb:ed:bb:ca:2b:ee:11:ea:e4:c4:45:9a:
                    f1:03:83:e8:e9:09:85:f9:47:c4:fc:80:e0:72:8a:
                    15:dd:12:aa:99:d8:0c:0e:44:cf:38:28:a1:66:1c:
                    bd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B3:1B:73:61:BB:F9:EB:C8:FE:C3:AE:88:30:DF:65:D5:6B:DA:49
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3a2f33322d3332203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:49:38:78:8e:a0:a8:64:1c:6d:3b:b3:6a:f8:ee:2a:1c:71:
         8e:22:ae:1f:4e:d9:16:a9:56:eb:75:c2:9a:55:55:83:44:58:
         5a:cf:b4:e5:c7:b6:ad:fb:3a:0b:61:b5:8a:44:52:9f:14:47:
         ac:55:6f:9e:59:65:12:0e:e3:ec:17:2c:3c:eb:5b:2e:5c:d9:
         f9:f3:55:6c:21:e8:f0:c5:52:81:6c:49:a6:59:80:5b:7b:9a:
         31:5c:67:5f:6f:f9:42:00:30:54:01:58:2e:34:aa:36:f5:b5:
         a9:23:27:57:1e:94:d7:94:85:5f:e5:47:2f:97:bb:8e:0a:07:
         cc:0d:7b:0c:be:21:bb:45:3a:32:3f:2c:3f:73:22:61:a4:e7:
         8f:d1:b1:99:3e:f2:84:4c:ed:37:c9:1d:5a:b1:bf:b1:d1:e0:
         57:7d:22:30:d2:1d:1d:bc:37:bd:ea:57:bd:e4:b0:30:38:c3:
         b2:a2:1e:ec:1a:22:9b:3c:00:98:5e:8e:da:8d:36:5e:16:0f:
         4f:c8:37:61:40:e1:f7:e3:c5:76:d4:9c:b2:22:1c:ee:ed:3c:
         4f:39:46:06:2d:2f:8a:96:17:1f:41:c7:ac:40:ba:b2:29:cf:
         3c:1b:71:b3:64:57:8e:e5:ae:99:7f:ac:7c:55:28:69:69:5e:
         aa:60:d1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org