Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/323830343a346133343a3a2f33332d3333203d3e20323637323234.roa
File:                     323830343a346133343a3a2f33332d3333203d3e20323637323234.roa (raw, json)
Hash identifier:          jad59zez9LQg++zMmT+M9QAJ05n7HeUy5yq/q0Mxvxs=
Subject key identifier:   16:BC:22:13:4C:CF:11:BE:A2:FF:B1:57:8A:AA:F4:1E:FA:A4:53:8E
Certificate issuer:       /CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
Certificate serial:       6FF65CE50C1C8B13F7624F0ADA8568D01496096D
Authority key identifier: FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/323830343a346133343a3a2f33332d3333203d3e20323637323234.roa
Signing time:             Tue 14 Nov 2023 19:34:02 +0000
ROA not before:           Tue 14 Nov 2023 19:29:02 +0000
ROA not after:            Tue 12 Nov 2024 19:34:02 +0000
asID:                     267224
IP address blocks:        2804:4a34::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:f6:5c:e5:0c:1c:8b:13:f7:62:4f:0a:da:85:68:d0:14:96:09:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA44A0A85A78C688ED4CC9072B8F3CB37AED938F
        Validity
            Not Before: Nov 14 19:29:02 2023 GMT
            Not After : Nov 12 19:34:02 2024 GMT
        Subject: CN=16BC22134CCF11BEA2FFB1578AAAF41EFAA4538E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:ec:38:93:98:a8:54:d5:d4:c3:b4:7f:76:
                    1d:84:6b:ff:43:df:be:51:f0:69:8e:e8:ae:bb:01:
                    52:f4:0a:0f:fc:3b:ec:91:0b:23:8a:fa:7a:16:f1:
                    6c:5e:6d:c8:da:48:e4:9f:a5:1c:9d:ea:b8:4e:4b:
                    29:c5:57:39:86:4e:5f:25:1a:bf:c5:26:84:ee:81:
                    26:9b:eb:64:b9:dc:3c:e7:ba:f3:89:4d:04:a3:de:
                    92:00:58:7d:8e:65:ab:12:9d:73:19:a9:87:c1:a1:
                    75:c9:85:2d:22:8b:1e:03:96:77:1f:cb:a3:3d:9d:
                    fa:39:39:e0:08:d4:5f:55:33:d4:d1:13:75:9e:74:
                    22:b5:47:d7:8f:26:34:a3:5a:e3:28:66:3a:1c:d0:
                    0b:f5:f2:a1:91:e6:5f:5b:68:19:34:6c:28:88:a4:
                    63:2c:a7:b4:56:aa:16:0d:71:48:31:f5:20:93:d9:
                    58:f9:bd:22:54:16:33:fb:98:fc:41:46:c8:58:54:
                    fb:bb:8e:d3:3e:93:f4:3d:5a:6b:7e:9e:c5:d8:a1:
                    f8:24:4e:1a:03:be:4d:49:fe:f1:e9:e8:c8:0d:4f:
                    de:67:56:a8:a1:bc:b0:eb:8e:87:01:f7:c7:73:48:
                    2b:8b:af:df:50:24:ea:95:2a:06:cd:4d:e8:95:fb:
                    ef:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BC:22:13:4C:CF:11:BE:A2:FF:B1:57:8A:AA:F4:1E:FA:A4:53:8E
            X509v3 Authority Key Identifier:
                keyid:FA:44:A0:A8:5A:78:C6:88:ED:4C:C9:07:2B:8F:3C:B3:7A:ED:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA44A0A85A78C688ED4CC9072B8F3CB37AED938F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2PhpJNPaGQMy49rRfw9SXVMSCtCW7BKbx4R4W4eH1Log/0/323830343a346133343a3a2f33332d3333203d3e20323637323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a34::/33

    Signature Algorithm: sha256WithRSAEncryption
         c3:59:29:4c:d2:ce:3d:cf:56:14:42:e4:de:8a:04:42:e1:58:
         b8:4c:71:40:8d:27:4d:71:ca:e8:2b:17:2b:a0:44:68:73:37:
         14:c3:ce:d2:2b:6d:cd:e8:11:ec:2f:6f:27:c8:2f:c5:52:9a:
         4d:29:d7:6e:60:98:93:98:73:9c:5e:b0:9e:cd:ea:8c:ae:88:
         28:c5:7a:0e:23:45:36:b7:33:e9:3c:14:d1:04:9e:ff:ba:3c:
         8b:8d:7e:30:4e:5b:7b:bc:6a:94:16:0a:c5:33:90:f6:f8:2d:
         0a:dd:c7:30:3b:a8:92:6e:17:ae:82:b5:cf:e1:b1:2d:35:6b:
         79:0e:07:84:09:7c:84:5b:c2:3c:4f:46:21:7a:8c:92:87:29:
         80:0c:1a:ec:42:d0:86:70:31:48:49:25:bc:c3:5e:66:54:3b:
         fd:ff:5d:cc:67:ef:eb:56:d9:86:46:f5:c7:75:1a:69:1b:c3:
         eb:91:e1:aa:4b:d9:30:e6:a6:b4:d2:dd:3e:c8:d3:3e:b5:78:
         78:82:de:06:d4:4e:ac:4a:2e:44:0c:6d:a2:30:ab:62:cd:5c:
         22:2e:c9:d5:f6:70:18:ba:69:be:db:86:dc:a2:a3:4a:fc:b2:
         2a:a7:c2:fd:2a:24:39:0e:33:8d:ff:eb:84:79:e0:6c:f2:04:
         dc:75:86:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org