Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3zB68RhqGS1z2CY1wnmtyGEYtdpFJR3vCFoWoTnzcN7e/0/323830313a38303a326530303a3a2f34302d3430203d3e20323637393736.roa
File:                     323830313a38303a326530303a3a2f34302d3430203d3e20323637393736.roa (raw, json)
Hash identifier:          fJvpyoTuXJGl/COuSgVfFrkYjgW3MN59RSAlQX65bnU=
Subject key identifier:   C1:12:9E:56:65:2D:1B:33:10:CD:B4:68:0B:D3:52:2C:0C:04:30:4F
Certificate issuer:       /CN=FDB63F9DB6018A8F087A2B97EA59E0B319AAFB23
Certificate serial:       4AD8A951476891E4CD75E903A4D56B10DCDFED9D
Authority key identifier: FD:B6:3F:9D:B6:01:8A:8F:08:7A:2B:97:EA:59:E0:B3:19:AA:FB:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDB63F9DB6018A8F087A2B97EA59E0B319AAFB23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3zB68RhqGS1z2CY1wnmtyGEYtdpFJR3vCFoWoTnzcN7e/0/323830313a38303a326530303a3a2f34302d3430203d3e20323637393736.roa
Signing time:             Thu 02 Mar 2023 11:30:10 +0000
ROA not before:           Thu 02 Mar 2023 11:25:10 +0000
ROA not after:            Thu 29 Feb 2024 11:30:10 +0000
asID:                     267976
IP address blocks:        2801:80:2e00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d8:a9:51:47:68:91:e4:cd:75:e9:03:a4:d5:6b:10:dc:df:ed:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDB63F9DB6018A8F087A2B97EA59E0B319AAFB23
        Validity
            Not Before: Mar  2 11:25:10 2023 GMT
            Not After : Feb 29 11:30:10 2024 GMT
        Subject: CN=C1129E56652D1B3310CDB4680BD3522C0C04304F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:c4:83:a0:04:66:a7:60:73:ac:26:14:35:
                    2b:e2:62:39:d0:eb:3a:f0:93:f8:f2:cf:8a:6e:45:
                    8f:f9:72:68:2e:d7:84:4f:5b:4a:de:fc:13:77:14:
                    85:2b:da:a8:0a:78:9a:f3:bd:c1:76:31:0b:c6:3d:
                    96:ce:af:8e:c1:44:9e:f4:06:3d:7d:98:60:37:38:
                    c5:55:9e:3f:86:d7:f4:db:f2:1a:e3:15:92:b3:27:
                    21:65:e0:de:1b:b4:85:5f:df:74:76:67:a6:49:a6:
                    b2:09:60:55:a1:1a:47:5a:42:45:54:33:35:df:51:
                    96:0f:21:06:28:22:5c:83:83:07:c4:3f:2e:93:99:
                    70:34:2a:0a:6e:5c:42:f3:06:94:d9:a9:9f:00:50:
                    ff:38:03:ac:c3:a0:b5:f3:56:44:91:09:6d:1c:a3:
                    8a:2f:1d:f9:60:39:ea:ea:09:f6:61:a7:be:fd:83:
                    96:76:63:18:7b:72:01:0d:c7:37:ff:dc:49:34:25:
                    8b:58:4a:4f:04:6d:e7:f4:c9:39:f2:eb:a9:df:97:
                    a9:5b:a7:0a:33:67:a2:aa:5f:91:2f:34:1e:d2:2e:
                    b5:f3:4b:7d:7c:cb:98:6a:4b:39:11:d3:e7:b2:20:
                    3d:b5:dd:85:ea:3e:24:53:9c:f1:2b:3c:10:8d:c3:
                    7d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:12:9E:56:65:2D:1B:33:10:CD:B4:68:0B:D3:52:2C:0C:04:30:4F
            X509v3 Authority Key Identifier:
                keyid:FD:B6:3F:9D:B6:01:8A:8F:08:7A:2B:97:EA:59:E0:B3:19:AA:FB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3zB68RhqGS1z2CY1wnmtyGEYtdpFJR3vCFoWoTnzcN7e/0/FDB63F9DB6018A8F087A2B97EA59E0B319AAFB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDB63F9DB6018A8F087A2B97EA59E0B319AAFB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3zB68RhqGS1z2CY1wnmtyGEYtdpFJR3vCFoWoTnzcN7e/0/323830313a38303a326530303a3a2f34302d3430203d3e20323637393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:2e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:f5:72:29:7a:85:ac:37:2a:8a:70:ea:eb:9b:bf:77:10:3f:
         07:fe:c3:a2:e4:c8:87:b2:39:cd:4e:6f:03:cf:14:b8:ae:2f:
         fa:7d:f8:b9:7e:af:28:7a:75:e4:e6:35:b6:dd:8f:8a:39:48:
         75:b9:e0:25:99:c0:51:07:e2:2a:1a:0c:b4:41:2f:92:7f:d4:
         9d:d4:2d:d5:ee:62:ae:9a:35:f9:ed:c9:93:38:a3:49:7e:e1:
         de:a2:6e:97:88:07:ca:f1:c4:a3:33:df:ca:91:22:55:a6:09:
         bb:21:53:25:54:69:49:fe:ff:80:c2:5f:1a:37:6d:d3:85:b2:
         bf:a1:ec:9b:ed:22:45:a3:ce:ac:de:97:5c:81:95:64:84:b7:
         9d:c9:38:55:59:0d:bd:00:ce:67:57:62:9a:bd:66:1d:b2:0f:
         67:80:83:e9:be:07:49:b6:9d:72:58:d4:16:a6:26:e5:04:4a:
         d8:d8:15:e5:20:84:95:bd:f7:54:d6:01:ee:d2:08:12:25:90:
         fb:17:3c:8a:a4:8a:93:18:8e:ef:24:7f:34:5c:a5:46:b6:6a:
         3f:7d:42:f3:13:ee:57:e3:d2:cb:fe:98:3e:3a:70:8a:2f:fc:
         4c:e1:76:d7:f6:b8:06:a9:b4:4c:a5:ee:04:1e:1b:c3:5b:ce:
         6c:ef:7b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org