Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/323830343a333732633a3a2f33332d3334203d3e20323636333934.roa
File:                     323830343a333732633a3a2f33332d3334203d3e20323636333934.roa (raw, json)
Hash identifier:          3IcS6sRULDfE+WXaGjGFoytmo87A54VR775Z7uLNL/8=
Subject key identifier:   25:F7:12:91:3A:68:5F:F6:F9:AB:E3:45:E0:20:83:FE:D5:49:0B:77
Certificate issuer:       /CN=FC08546012DBB8FBB52697DB7520556A0E251895
Certificate serial:       512DD8B3A18F9E77BCFB53A65B003679EB70A98D
Authority key identifier: FC:08:54:60:12:DB:B8:FB:B5:26:97:DB:75:20:55:6A:0E:25:18:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC08546012DBB8FBB52697DB7520556A0E251895.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/323830343a333732633a3a2f33332d3334203d3e20323636333934.roa
Signing time:             Thu 04 May 2023 14:21:10 +0000
ROA not before:           Thu 04 May 2023 14:16:10 +0000
ROA not after:            Thu 02 May 2024 14:21:10 +0000
asID:                     266394
IP address blocks:        2804:372c::/33 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2d:d8:b3:a1:8f:9e:77:bc:fb:53:a6:5b:00:36:79:eb:70:a9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC08546012DBB8FBB52697DB7520556A0E251895
        Validity
            Not Before: May  4 14:16:10 2023 GMT
            Not After : May  2 14:21:10 2024 GMT
        Subject: CN=25F712913A685FF6F9ABE345E02083FED5490B77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ce:9b:7b:62:dc:5a:12:8c:9b:d5:15:06:20:
                    92:3d:35:2a:a1:05:7c:bf:af:d6:7c:a6:e9:bf:a9:
                    9c:62:9c:68:3c:78:60:2e:63:e8:2b:5e:26:26:ea:
                    40:db:a5:c6:33:37:ca:01:07:6c:65:2e:7f:05:62:
                    e0:8b:47:c1:c3:e5:35:67:51:7e:d7:28:42:c4:29:
                    c3:0e:2e:14:91:61:91:05:a9:2b:a6:8f:38:8a:9b:
                    00:2f:1f:ef:36:ed:8e:4f:28:e2:ab:8f:12:11:cd:
                    b6:74:31:02:fa:65:45:fc:36:0e:36:bb:39:80:14:
                    aa:91:39:ab:b4:87:56:6d:b9:33:b6:2c:e0:23:d1:
                    29:26:78:b2:e3:d3:6f:9a:ac:4a:35:1e:4b:31:cd:
                    50:60:87:8b:53:ff:15:3a:05:eb:9d:be:20:de:2e:
                    42:76:b0:4a:3f:29:dc:91:a9:bd:6a:5a:fa:f1:06:
                    fe:de:8d:66:49:98:66:5f:6e:49:d5:13:27:36:8c:
                    a5:95:4f:09:e0:ab:07:36:60:83:2b:41:39:2c:ff:
                    da:4c:a4:bb:aa:59:66:7d:90:62:67:a2:2b:74:bd:
                    ee:62:95:e4:f9:b7:7c:4b:5a:df:57:43:34:ac:86:
                    6f:25:9e:4f:6c:87:f7:70:46:4e:e0:ae:43:67:4a:
                    05:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F7:12:91:3A:68:5F:F6:F9:AB:E3:45:E0:20:83:FE:D5:49:0B:77
            X509v3 Authority Key Identifier:
                keyid:FC:08:54:60:12:DB:B8:FB:B5:26:97:DB:75:20:55:6A:0E:25:18:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/FC08546012DBB8FBB52697DB7520556A0E251895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FC08546012DBB8FBB52697DB7520556A0E251895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/323830343a333732633a3a2f33332d3334203d3e20323636333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:372c::/33

    Signature Algorithm: sha256WithRSAEncryption
         33:6f:be:da:d8:ed:ba:1b:56:21:11:43:0b:e3:4e:b3:d1:ce:
         fd:0d:d2:1d:43:26:01:04:ba:ca:3f:25:2c:49:f0:07:7d:e7:
         95:25:69:c2:0d:18:71:a5:ab:67:e1:dd:ee:a8:8d:03:71:d5:
         3d:f8:58:57:82:61:0c:52:1f:5c:51:67:74:89:a1:9e:36:e4:
         e8:0f:8d:b3:26:e6:12:ab:67:77:cd:16:c3:18:68:a5:3e:b8:
         f7:68:cc:fd:99:5f:22:b5:58:3c:c4:48:be:0b:81:30:db:1a:
         c4:80:94:de:ba:a5:45:02:b9:5f:61:53:58:24:76:7e:a5:91:
         01:3e:bd:f0:3a:77:ca:ff:97:76:29:a8:2a:cf:48:8c:b4:13:
         e2:c0:ce:ec:06:de:9d:95:27:65:45:50:0b:17:35:d9:fa:c5:
         39:03:bf:3a:29:d5:26:d3:c5:44:14:f0:b0:6d:9f:cc:a9:3e:
         91:36:bd:d2:50:ce:6c:84:ed:4b:28:0c:84:79:e1:28:dd:f9:
         53:07:1a:91:1b:f2:70:a0:9b:66:26:57:9f:73:37:74:80:ae:
         76:d8:a4:29:7b:3b:b1:22:c7:cd:0d:6a:e6:f7:b1:19:9c:f4:
         16:08:e5:3f:df:56:fd:f5:eb:54:06:01:f4:c8:31:48:19:cd:
         9b:3b:fc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org