Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/323830343a333337343a3a2f33322d3438203d3e20323635333937.roa
File:                     323830343a333337343a3a2f33322d3438203d3e20323635333937.roa (raw, json)
Hash identifier:          xr5JfIgqZO0wJazajvZubdo5ZcN4NPrCol67jS4xCwE=
Subject key identifier:   FB:AB:7A:01:BA:57:06:2A:40:F2:C9:84:11:B3:3D:9B:76:57:30:26
Certificate issuer:       /CN=08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD
Certificate serial:       68BBFCA4812C660F74C4C7D84A00D479210301D8
Authority key identifier: 08:C1:AA:05:5C:47:7D:F9:A2:16:4D:FC:71:4B:69:AE:9F:AD:4A:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/323830343a333337343a3a2f33322d3438203d3e20323635333937.roa
Signing time:             Thu 28 Mar 2024 15:55:11 +0000
ROA not before:           Thu 28 Mar 2024 15:50:11 +0000
ROA not after:            Thu 27 Mar 2025 15:55:11 +0000
asID:                     265397
IP address blocks:        2804:3374::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bb:fc:a4:81:2c:66:0f:74:c4:c7:d8:4a:00:d4:79:21:03:01:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD
        Validity
            Not Before: Mar 28 15:50:11 2024 GMT
            Not After : Mar 27 15:55:11 2025 GMT
        Subject: CN=FBAB7A01BA57062A40F2C98411B33D9B76573026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a9:6f:e8:84:63:5e:24:40:a4:8b:84:77:9b:
                    a1:60:08:3a:94:c3:03:78:ae:47:a0:50:a2:1a:aa:
                    12:ae:d4:03:8b:ab:89:bb:08:a3:6b:85:39:4f:23:
                    4f:bc:9b:d1:6e:63:cc:6b:98:4b:b1:28:f2:47:aa:
                    92:fa:1a:46:8a:44:36:ce:99:22:83:7f:b1:76:19:
                    72:f4:93:8b:b4:9c:e5:30:83:4f:67:3f:4e:ab:d8:
                    54:44:07:e0:cc:00:74:b4:3e:f6:e4:2c:78:d9:e2:
                    6a:c2:2f:32:8b:78:9e:8c:a0:6c:ee:b9:6a:0f:53:
                    64:8e:91:6f:89:57:81:2d:0d:8a:77:23:c1:cf:43:
                    9a:38:06:68:72:30:68:85:a3:e8:e1:2e:f6:c0:85:
                    6f:27:c6:86:47:89:bd:f8:d7:f5:81:ba:15:c6:24:
                    da:34:a7:e8:b5:62:5c:99:02:5a:fd:46:33:26:eb:
                    35:79:9d:00:77:0a:61:e4:46:9c:90:61:7a:77:b0:
                    98:1e:d5:f1:8d:d6:30:5e:42:40:e4:09:7c:80:46:
                    92:00:36:07:05:c5:83:75:e2:22:42:be:2c:73:bf:
                    8b:1a:0b:35:cc:01:12:73:a8:0f:27:53:c4:bc:ad:
                    6f:ef:d8:6b:aa:4c:61:a2:ed:9e:48:c7:27:73:cc:
                    77:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AB:7A:01:BA:57:06:2A:40:F2:C9:84:11:B3:3D:9B:76:57:30:26
            X509v3 Authority Key Identifier:
                keyid:08:C1:AA:05:5C:47:7D:F9:A2:16:4D:FC:71:4B:69:AE:9F:AD:4A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C1AA055C477DF9A2164DFC714B69AE9FAD4ACD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/323830343a333337343a3a2f33322d3438203d3e20323635333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3374::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:e8:26:f5:fb:c7:84:b8:0b:3d:c3:e1:0a:01:ab:2b:e9:0f:
         5a:4a:a8:0e:1a:a9:76:3b:8e:6c:b8:87:d5:f1:6f:04:88:a0:
         fe:25:03:7d:1e:6a:4e:27:cc:d8:f0:92:11:fe:64:ff:75:dc:
         06:53:63:e1:68:7a:fa:c4:6d:93:2c:c4:a0:de:46:91:45:29:
         2e:fb:52:e2:ac:f7:ac:cf:04:7d:20:6f:87:d1:78:e7:22:e5:
         bf:c1:83:18:0c:bb:d6:76:99:98:ea:b9:03:0b:93:45:9e:ad:
         dd:7f:24:61:33:3e:1b:79:30:0a:51:e8:3f:84:8d:3f:a5:10:
         2d:5c:1a:a5:0f:e5:51:57:d7:02:1b:59:98:ac:c4:cf:7c:b1:
         f8:4c:c6:53:1a:cc:56:ca:0f:2e:df:c0:43:d6:98:9d:91:8d:
         3a:e8:8d:94:a2:ec:ae:06:d8:db:70:0a:ca:66:3e:c0:f3:f2:
         d7:9e:1a:6f:a2:14:d9:9b:35:f1:75:7f:83:31:63:d5:4e:bb:
         8e:4a:a1:5c:30:91:ea:13:03:98:76:98:aa:e3:e9:af:ea:1d:
         78:f3:13:e0:8e:de:29:49:dd:86:0d:6a:e0:10:dc:b4:06:5b:
         d0:de:85:b0:94:e9:8a:88:a4:c0:82:55:e4:31:2c:66:ad:90:
         5a:8c:6f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org