Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/323830343a376463303a3a2f33322d3334203d3e20323731353830.roa
File:                     323830343a376463303a3a2f33322d3334203d3e20323731353830.roa (raw, json)
Hash identifier:          vP1q79hS5t8i3+vTKZ+USdUP4d2O02iR8SGDNnLUs5Y=
Subject key identifier:   02:5D:65:9C:0F:50:0B:1B:D4:1A:F9:90:66:ED:AF:77:2B:68:57:AB
Certificate issuer:       /CN=F33BCBFC144255AA76CBEBEA3A97556863B8E89A
Certificate serial:       81135E755786A57BFF2A02E90C31DF3E84CF04
Authority key identifier: F3:3B:CB:FC:14:42:55:AA:76:CB:EB:EA:3A:97:55:68:63:B8:E8:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F33BCBFC144255AA76CBEBEA3A97556863B8E89A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/323830343a376463303a3a2f33322d3334203d3e20323731353830.roa
Signing time:             Tue 21 Jun 2022 13:12:15 +0000
ROA not before:           Tue 21 Jun 2022 13:07:15 +0000
ROA not after:            Tue 20 Jun 2023 13:12:15 +0000
asID:                     271580
IP address blocks:        2804:7dc0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            81:13:5e:75:57:86:a5:7b:ff:2a:02:e9:0c:31:df:3e:84:cf:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F33BCBFC144255AA76CBEBEA3A97556863B8E89A
        Validity
            Not Before: Jun 21 13:07:15 2022 GMT
            Not After : Jun 20 13:12:15 2023 GMT
        Subject: CN=025D659C0F500B1BD41AF99066EDAF772B6857AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:e0:1a:d8:d3:d7:c3:dc:95:08:f2:e3:03:
                    fd:71:d4:75:cf:c0:4b:6f:03:e7:86:97:af:8d:9e:
                    b4:c2:d1:7f:93:76:a4:a8:10:e6:73:b3:fc:f1:5e:
                    46:5f:90:fa:9c:f2:d8:33:1c:b3:0c:46:c0:7f:a6:
                    b6:13:93:89:7b:00:f3:06:e1:f8:a2:f4:4c:8d:d8:
                    8b:d6:ec:12:14:4e:9b:96:ad:8a:c8:8e:18:42:5c:
                    82:99:42:ba:02:ef:eb:35:28:54:f6:93:39:39:56:
                    d3:51:82:7c:15:73:8f:d6:1f:6f:a8:cc:13:de:89:
                    88:f1:f3:33:66:2f:b7:bb:1d:85:44:43:3f:16:b8:
                    9a:00:36:2f:54:a5:61:ae:c6:02:50:18:d5:59:68:
                    5f:50:26:16:a1:3d:41:2d:c9:2a:8b:6a:32:b7:0c:
                    22:5d:8e:c4:17:50:30:08:ca:56:7e:b7:a6:b1:4f:
                    cf:6f:4e:29:49:23:e3:17:33:33:62:ad:d2:88:48:
                    c9:f9:94:6c:aa:06:6c:a6:c1:bf:aa:a4:40:05:4e:
                    65:b9:c2:72:7e:26:bf:dc:bd:c1:5a:a3:5b:76:e9:
                    e3:8a:50:8d:db:08:02:ee:1a:59:cc:7c:81:9e:df:
                    c1:67:8c:d0:cc:b0:32:13:93:17:13:f7:c6:51:fc:
                    1d:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5D:65:9C:0F:50:0B:1B:D4:1A:F9:90:66:ED:AF:77:2B:68:57:AB
            X509v3 Authority Key Identifier:
                keyid:F3:3B:CB:FC:14:42:55:AA:76:CB:EB:EA:3A:97:55:68:63:B8:E8:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/F33BCBFC144255AA76CBEBEA3A97556863B8E89A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F33BCBFC144255AA76CBEBEA3A97556863B8E89A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3LLVpYEwDVZfDhydvokcmu4m9eGMQKpediankCDrg6EH/0/323830343a376463303a3a2f33322d3334203d3e20323731353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:83:d8:d2:00:b7:30:d5:e3:b2:93:d5:b0:de:72:d2:7c:a9:
         37:1e:40:14:d1:e4:11:67:73:ad:f4:83:9c:bc:9c:89:60:a2:
         7c:85:05:e9:44:65:ca:80:05:5f:11:40:8b:62:d9:e9:d9:4e:
         3d:97:bb:89:fc:68:70:ab:71:b1:ee:4d:ad:7c:90:0e:20:9a:
         e3:7f:0c:66:21:e7:cc:b3:b5:d1:87:4d:b3:51:d0:3d:f6:4d:
         8b:7d:f6:b6:c2:7e:30:93:b6:c4:07:59:65:49:d3:e4:ab:d3:
         a4:7b:31:43:ef:00:46:38:06:8e:91:f0:88:6f:2a:32:c9:76:
         da:d6:a0:a4:5a:e9:ff:57:7a:6d:73:f3:2c:93:eb:39:f3:2f:
         2d:e7:a8:fa:fa:02:38:8d:b0:7d:6d:25:3e:c3:f9:79:1c:df:
         d7:3e:52:ef:97:26:19:70:88:05:a0:99:12:ec:40:bf:1a:3e:
         39:8e:17:77:ae:a4:2a:44:e0:2a:10:d9:ce:64:52:db:28:cf:
         fb:94:2f:41:ac:6e:4c:4f:7f:fb:70:c4:dc:08:2f:72:f1:3d:
         17:6e:1e:e3:0a:0a:9b:0d:83:e1:f8:cd:74:8d:f6:c5:23:04:
         46:b2:3e:a5:46:8a:cd:21:e5:cb:58:b4:f8:88:15:4a:a8:a7:
         dd:e4:dc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:23 2024 by rpki-client on console-ams.rpki-client.org