Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3a2f34302d3430203d3e203533303437.roa
File:                     323830343a3666303a3a2f34302d3430203d3e203533303437.roa (raw, json)
Hash identifier:          8UDf0TZ0F5lcUSJ4e9KR93332dt2sSvlv7fe4fMBIKQ=
Subject key identifier:   24:FC:D0:AA:50:85:25:B4:CE:8F:51:D1:39:A4:91:AA:DD:03:79:2C
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       34545C23DBA4C90EB77C45548B7DD433AE51B8AC
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3a2f34302d3430203d3e203533303437.roa
Signing time:             Thu 23 Nov 2023 12:06:54 +0000
ROA not before:           Thu 23 Nov 2023 12:01:54 +0000
ROA not after:            Thu 21 Nov 2024 12:06:54 +0000
asID:                     53047
IP address blocks:        2804:6f0::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:54:5c:23:db:a4:c9:0e:b7:7c:45:54:8b:7d:d4:33:ae:51:b8:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 23 12:01:54 2023 GMT
            Not After : Nov 21 12:06:54 2024 GMT
        Subject: CN=24FCD0AA508525B4CE8F51D139A491AADD03792C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a1:d0:b6:90:1f:11:af:da:5e:4f:fc:14:99:
                    c6:7c:6a:77:de:1e:80:88:86:7a:91:e1:f5:80:f0:
                    5a:e4:5b:99:50:b8:f4:69:11:10:fd:6f:9a:e9:ac:
                    f3:91:49:12:cf:5b:2b:53:cf:2b:eb:76:b9:49:24:
                    f0:70:df:70:d7:ad:78:74:05:e0:00:61:16:f1:ca:
                    be:71:68:82:96:f1:13:cb:4d:10:fe:4b:22:31:08:
                    93:10:ae:56:6a:10:33:08:fd:32:c6:f8:e6:86:b8:
                    0f:82:fd:6e:d9:72:49:9a:e3:c7:d4:d4:f1:69:c3:
                    c0:de:a3:d8:b5:fb:19:3c:1a:de:d3:3b:3d:70:79:
                    7b:45:7a:f8:de:e8:e3:ce:d2:36:43:1c:07:08:5e:
                    e6:8f:93:de:7c:1b:9b:28:66:07:d8:b0:0b:de:ac:
                    6f:f8:87:b6:73:52:2c:f8:ef:59:1e:48:f7:5f:04:
                    f5:21:2d:9c:41:0d:67:e8:21:7e:4b:70:7f:83:aa:
                    5a:3c:77:be:4b:c8:dc:1f:cf:bf:41:3b:ca:59:b1:
                    56:06:f2:18:68:90:1c:b2:ba:10:75:f0:df:7f:4a:
                    0e:c9:68:fe:9b:38:91:3d:f4:83:22:d7:ae:99:c2:
                    0e:e1:22:40:94:da:65:1c:2a:c9:dc:1e:28:4c:11:
                    bb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FC:D0:AA:50:85:25:B4:CE:8F:51:D1:39:A4:91:AA:DD:03:79:2C
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a3a2f34302d3430203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0::/40

    Signature Algorithm: sha256WithRSAEncryption
         bd:7b:40:4a:78:6e:9b:1d:b9:43:3c:d0:99:37:46:9f:7d:f0:
         66:05:5f:2a:ae:b9:98:98:31:2d:64:a6:47:98:c0:2c:72:0e:
         07:fe:a4:f7:9e:fb:d4:85:16:6f:ec:8c:31:dc:8e:c7:2d:de:
         0e:f5:93:9d:8b:83:5d:99:37:f1:53:39:b6:ac:d1:bf:bf:61:
         9a:39:78:b2:fb:76:de:bf:89:53:6f:ae:65:e3:82:91:c0:35:
         eb:08:fe:ee:36:c9:33:5f:d2:47:2d:f7:a9:b7:41:f6:ef:9e:
         2c:d5:2b:81:e1:3a:b3:65:ca:aa:19:de:67:bb:e3:08:59:9d:
         60:f6:72:03:4a:31:d4:18:89:9c:45:68:fe:87:80:75:a8:58:
         57:b0:23:f1:0d:dc:87:cf:4c:49:dc:b1:96:00:16:d5:0f:21:
         39:36:3b:b2:84:95:54:1e:1a:c0:0e:fb:d0:a4:1a:fa:2b:ef:
         98:92:37:36:63:1b:4b:36:c0:3e:1d:e0:7f:9e:9f:84:9c:7f:
         85:52:01:1e:e3:80:b4:b9:2a:12:f9:9d:f5:43:4e:04:0e:bc:
         b5:6b:9d:61:4b:8f:76:a5:a3:7d:df:36:33:2e:68:cf:c1:fb:
         98:1d:03:28:55:94:00:ef:e6:31:c6:03:b6:93:fc:bd:c2:ae:
         79:94:b4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org