Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/323830343a333061633a3a2f33322d3438203d3e20323634393638.roa
File:                     323830343a333061633a3a2f33322d3438203d3e20323634393638.roa (raw, json)
Hash identifier:          GJRAp9rAy7pEfFZwmBETGea3uoNRVWTHxzq/eKD2G/k=
Subject key identifier:   D0:20:6F:9A:6C:A6:5D:38:03:39:73:DF:39:58:C8:F4:54:2C:23:B4
Certificate issuer:       /CN=FB90B305DB276A008037A566C2CA28A4DF1ADBAE
Certificate serial:       1C57E29626425DB70E4787E2E37074544470CEFD
Authority key identifier: FB:90:B3:05:DB:27:6A:00:80:37:A5:66:C2:CA:28:A4:DF:1A:DB:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB90B305DB276A008037A566C2CA28A4DF1ADBAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/323830343a333061633a3a2f33322d3438203d3e20323634393638.roa
Signing time:             Wed 12 Jul 2023 12:40:00 +0000
ROA not before:           Wed 12 Jul 2023 12:35:00 +0000
ROA not after:            Wed 10 Jul 2024 12:40:00 +0000
asID:                     264968
IP address blocks:        2804:30ac::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:57:e2:96:26:42:5d:b7:0e:47:87:e2:e3:70:74:54:44:70:ce:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90B305DB276A008037A566C2CA28A4DF1ADBAE
        Validity
            Not Before: Jul 12 12:35:00 2023 GMT
            Not After : Jul 10 12:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:1a:0f:a3:e0:33:fc:cc:26:6d:4f:79:86:
                    7e:57:31:fa:bf:7b:13:ab:a0:a7:ea:49:2d:39:2d:
                    02:49:1a:eb:11:13:ac:f3:28:05:8a:15:25:62:90:
                    11:36:75:4f:ea:76:85:c2:39:c6:cc:1f:7c:ab:3d:
                    88:0d:4f:95:19:b5:31:24:b5:9c:1d:06:df:03:ff:
                    83:3d:c1:b0:5a:c8:26:aa:cc:a0:b8:27:9d:c5:27:
                    09:26:17:32:ed:74:8d:e5:3e:5b:f9:c2:86:f6:b8:
                    63:9e:5f:7c:a3:c3:79:f0:4e:f1:ac:76:f3:3d:88:
                    64:47:79:8f:6f:a8:ed:48:79:22:31:c7:6d:5d:05:
                    0c:ce:5d:cf:4a:4d:8b:55:59:19:4c:79:fc:86:e0:
                    7c:a6:be:49:30:d2:8d:c0:92:fa:3b:ce:f2:fd:d6:
                    bb:e6:95:3e:c8:da:f9:3a:e2:dd:e8:d7:da:af:6a:
                    f9:ab:73:f2:57:42:ce:f1:3f:64:42:4c:cb:c3:f8:
                    f7:f5:76:4d:85:49:d1:50:a9:e0:5c:7e:4d:52:d4:
                    a8:f4:7b:d3:39:ac:0a:39:bd:ec:6c:1b:06:83:db:
                    0a:9b:a7:9c:1d:67:35:85:a3:cd:72:e6:f7:b9:4e:
                    b9:14:6b:46:6d:68:fb:c8:73:d3:ea:45:8c:33:ed:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:20:6F:9A:6C:A6:5D:38:03:39:73:DF:39:58:C8:F4:54:2C:23:B4
            X509v3 Authority Key Identifier:
                keyid:FB:90:B3:05:DB:27:6A:00:80:37:A5:66:C2:CA:28:A4:DF:1A:DB:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/FB90B305DB276A008037A566C2CA28A4DF1ADBAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB90B305DB276A008037A566C2CA28A4DF1ADBAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Y6q7P9jyxptAqcYdskSTtr14JceZkGU3aFAV47JfksF/0/323830343a333061633a3a2f33322d3438203d3e20323634393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:30ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:eb:1c:f8:6b:7c:9a:61:31:98:cc:65:80:5b:72:de:a1:58:
         63:1e:1f:e3:6a:9b:01:07:63:3f:fc:57:30:08:89:d7:02:90:
         cf:b0:80:9f:b3:13:15:03:3e:29:c5:ca:7f:ea:09:49:75:a5:
         b3:ca:46:86:03:70:1a:7b:59:f9:96:70:29:eb:66:21:1f:0e:
         81:2e:41:cd:50:5d:a1:af:fd:d5:a9:93:4f:c8:39:17:2c:98:
         35:6c:2f:e2:70:d9:8e:d9:49:ae:da:26:00:8a:c6:fc:13:17:
         8b:d9:39:3e:05:bd:9d:7c:cc:42:a7:72:96:2b:b7:52:de:10:
         a3:cf:2f:93:ec:ed:57:e4:f7:5f:76:14:1e:fc:de:5e:75:aa:
         b2:9c:b4:c5:73:95:f5:54:45:cd:df:71:98:e8:26:6a:e3:dc:
         ff:f4:d1:b8:ac:0b:06:e7:19:cd:3b:ba:15:9e:6b:2a:85:6a:
         96:1a:2c:38:d9:83:68:61:6b:57:cb:55:ec:6d:fd:d3:1a:6b:
         af:48:08:aa:c6:5b:88:10:45:2d:0a:57:03:ff:39:81:06:3f:
         92:27:6d:07:52:e9:f0:db:52:4c:b4:c0:29:2f:bd:c5:f9:e5:
         ab:66:4d:10:e4:f6:e2:5b:0c:8c:89:6b:81:50:7d:e1:37:7d:
         0f:8e:25:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org