Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/323830343a346133343a383030303a3a2f33332d3333203d3e20323637323234.roa
File:                     323830343a346133343a383030303a3a2f33332d3333203d3e20323637323234.roa (raw, json)
Hash identifier:          zeG4Sr0MNsoifhuUAx4O1LJjY6gaBTDXaKALU0FxDk8=
Subject key identifier:   D5:B4:E3:C1:AB:D7:6B:EC:A7:E1:D0:3E:48:24:9D:E5:66:6F:90:3E
Certificate issuer:       /CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
Certificate serial:       0EA7CF759D7DD3889DEFBA63E354D0788C150468
Authority key identifier: FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/323830343a346133343a383030303a3a2f33332d3333203d3e20323637323234.roa
Signing time:             Tue 14 Nov 2023 19:34:09 +0000
ROA not before:           Tue 14 Nov 2023 19:29:09 +0000
ROA not after:            Tue 12 Nov 2024 19:34:09 +0000
asID:                     267224
IP address blocks:        2804:4a34:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a7:cf:75:9d:7d:d3:88:9d:ef:ba:63:e3:54:d0:78:8c:15:04:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
        Validity
            Not Before: Nov 14 19:29:09 2023 GMT
            Not After : Nov 12 19:34:09 2024 GMT
        Subject: CN=D5B4E3C1ABD76BECA7E1D03E48249DE5666F903E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8a:2a:6f:34:23:94:cd:7c:93:bc:ea:66:28:
                    f1:de:cc:29:b7:75:0b:78:3b:63:21:60:88:b0:97:
                    7d:b9:a0:68:9a:21:4a:a8:05:ca:2b:f1:87:8a:76:
                    67:45:27:07:56:d0:f2:57:40:5d:8d:fd:d5:64:bf:
                    2b:30:4c:fa:4f:b9:a3:ac:e6:65:69:77:7a:d1:53:
                    e3:18:79:05:93:7d:1a:a8:de:28:7e:07:32:2f:1a:
                    d1:1f:86:84:cf:aa:d1:ac:08:5b:43:31:2e:8b:6c:
                    70:c2:8c:27:ad:8a:ac:06:5f:5b:3b:46:e2:a6:2e:
                    bc:31:69:9e:96:b8:04:f2:e1:51:5e:10:d9:f0:e6:
                    4b:51:8b:c9:bc:c9:6f:23:d4:b7:f1:54:72:8d:af:
                    ce:d9:4a:7f:ca:11:a4:63:84:4d:58:b8:6b:c8:81:
                    e7:f9:58:fe:0d:fb:80:a9:87:03:1b:00:6f:2c:d1:
                    97:9c:d3:93:fa:30:34:72:1d:6b:14:f8:e9:8c:30:
                    31:92:97:9c:bb:17:d5:b7:3e:66:72:7d:0f:03:13:
                    10:b7:b0:41:96:2b:ac:15:96:bf:94:72:47:f5:5c:
                    c4:28:84:5a:45:e8:27:4c:b4:2a:87:3b:6f:3d:b5:
                    b8:4a:8e:e4:21:ba:ab:bf:4a:23:96:c0:36:2b:d0:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B4:E3:C1:AB:D7:6B:EC:A7:E1:D0:3E:48:24:9D:E5:66:6F:90:3E
            X509v3 Authority Key Identifier:
                keyid:FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/323830343a346133343a383030303a3a2f33332d3333203d3e20323637323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a34:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         08:63:9f:9b:93:94:00:5e:97:b1:24:ff:03:12:56:5c:66:9a:
         f5:21:eb:1a:6d:89:c9:a0:83:ee:8e:bd:aa:48:be:e2:f0:af:
         8d:79:db:00:17:34:76:7f:94:3b:96:78:83:77:2f:ea:64:f1:
         c3:3a:51:ec:ff:4c:bb:80:c5:a0:94:04:a3:ee:a1:83:81:e3:
         10:63:1e:f7:26:e1:59:90:bb:79:ac:fb:b1:7a:be:b7:50:9c:
         b1:9e:31:b0:9b:af:97:2d:34:b3:50:d9:0f:04:26:7d:dc:07:
         f5:30:46:a0:c6:be:0d:0e:f4:cd:bb:44:12:b1:1f:56:bd:db:
         fe:55:3a:cd:36:cb:1b:90:b4:e5:b8:c4:82:be:0e:04:45:b0:
         36:ea:64:c9:f9:44:5c:cd:1e:60:c7:ce:f3:bf:a3:dc:aa:4a:
         db:14:3a:b7:10:e2:3b:63:8d:55:ee:b1:eb:1e:4b:e1:4c:d9:
         01:87:74:d2:e0:d0:9c:de:ed:70:d3:2b:6b:bd:d5:6b:b1:77:
         40:e1:16:85:5c:2f:60:16:b3:e6:88:72:12:de:5e:a0:96:4b:
         16:78:e6:e6:ce:0b:bb:30:78:5f:18:3b:cc:27:27:c1:cd:01:
         9e:51:0f:f1:08:51:b6:5f:2d:e3:4a:dd:d3:04:b6:52:be:8a:
         0a:16:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org