Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a383030303a3a2f33342d3334203d3e20323730373232.roa
File:                     323830343a373035633a383030303a3a2f33342d3334203d3e20323730373232.roa (raw, json)
Hash identifier:          Ay3yZ4UyZmyzyPr/1ZsghgMDNpnwdcf+ljUSqzi77hs=
Subject key identifier:   F5:2A:D8:1F:50:09:52:D8:64:E0:C9:05:DB:75:D2:C0:03:59:79:7A
Certificate issuer:       /CN=F67448549A64A3CB85C49B816FDEB8E90B7226DF
Certificate serial:       7AB69AA0D605BBBF066079DA4EC065F3A6FB7B18
Authority key identifier: F6:74:48:54:9A:64:A3:CB:85:C4:9B:81:6F:DE:B8:E9:0B:72:26:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a383030303a3a2f33342d3334203d3e20323730373232.roa
Signing time:             Fri 19 Jan 2024 19:05:16 +0000
ROA not before:           Fri 19 Jan 2024 19:00:16 +0000
ROA not after:            Fri 17 Jan 2025 19:05:16 +0000
asID:                     270722
IP address blocks:        2804:705c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b6:9a:a0:d6:05:bb:bf:06:60:79:da:4e:c0:65:f3:a6:fb:7b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F67448549A64A3CB85C49B816FDEB8E90B7226DF
        Validity
            Not Before: Jan 19 19:00:16 2024 GMT
            Not After : Jan 17 19:05:16 2025 GMT
        Subject: CN=F52AD81F500952D864E0C905DB75D2C00359797A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:c8:4e:27:21:e3:00:42:69:fb:25:06:cc:
                    8d:3d:eb:29:4f:d5:2a:88:1d:50:69:2a:a8:ae:b7:
                    59:76:c0:85:96:02:17:b3:bc:ca:3a:b8:75:74:31:
                    69:71:23:0b:3c:1a:70:56:62:78:4b:83:2a:6e:e7:
                    60:f8:ab:90:72:ad:29:fc:3b:8c:d6:0e:93:12:a7:
                    00:a9:b2:8e:39:3d:74:da:80:40:8d:0b:f9:b6:c6:
                    a6:19:74:7e:63:d2:64:fd:1a:9c:fc:91:77:e7:e1:
                    3f:67:7a:40:c8:11:9e:11:28:96:b5:3d:23:14:3a:
                    48:26:36:d8:5e:1e:2c:4a:01:ab:9e:b4:e5:ad:9d:
                    fc:58:47:ec:8a:0c:80:ca:b0:71:c2:a6:cc:49:99:
                    65:97:81:07:11:51:21:31:4c:15:d1:79:f4:c6:32:
                    27:24:ec:4f:63:03:df:a3:74:b4:c7:5b:70:f7:13:
                    aa:60:b7:f1:44:9e:05:4e:7c:65:1f:53:0b:a9:29:
                    5c:67:ee:ab:a9:5b:cd:e1:f3:ec:46:14:be:ce:2a:
                    f5:52:c4:6d:69:1c:bc:d6:30:ef:c9:9a:65:95:b6:
                    88:a5:ad:fa:5d:31:b5:c6:cf:68:35:1a:e9:d6:71:
                    36:8a:43:11:b0:d7:3a:03:e5:32:e8:ed:e4:1f:55:
                    15:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2A:D8:1F:50:09:52:D8:64:E0:C9:05:DB:75:D2:C0:03:59:79:7A
            X509v3 Authority Key Identifier:
                keyid:F6:74:48:54:9A:64:A3:CB:85:C4:9B:81:6F:DE:B8:E9:0B:72:26:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a383030303a3a2f33342d3334203d3e20323730373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:705c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         62:a6:21:17:10:8f:dd:87:0c:53:1f:e1:3d:96:f2:6d:e1:a0:
         28:54:84:27:3b:d9:b0:20:fd:25:d2:b9:2e:4d:6e:ae:8c:27:
         96:ea:c7:d0:36:01:88:20:68:18:ca:7e:79:53:ac:65:77:62:
         eb:b5:88:de:aa:ce:e4:41:a5:b5:c1:d1:22:56:92:7f:6f:ad:
         ac:bd:cd:62:c5:ce:04:62:17:be:20:49:6a:93:34:ee:95:89:
         f4:4f:03:bd:08:57:62:8f:e4:ac:e9:f8:c2:ed:03:e4:e5:4a:
         0c:20:94:20:6c:53:01:18:5c:88:b3:a1:b2:c2:37:26:00:e6:
         01:aa:59:09:3f:73:58:d2:26:57:f9:e8:fc:4b:f3:fc:61:6c:
         8a:bd:22:b5:40:23:55:92:64:2c:20:7c:9f:d0:ff:57:b3:28:
         b9:a2:43:36:d4:e9:b6:22:11:ab:1c:6a:ab:96:2c:2c:24:36:
         62:c8:64:7b:a7:c5:a1:b6:56:f1:9a:b8:a8:04:6e:69:52:0a:
         ca:0f:82:97:18:77:93:34:58:4c:3d:45:0d:bf:b8:cc:99:13:
         77:d2:be:ac:91:67:56:e3:70:04:fc:53:66:94:ff:5b:da:ba:
         c3:a2:ee:14:39:fc:1e:8d:34:a4:d5:15:57:c5:07:da:89:10:
         bd:13:fa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org