Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a353830303a3a2f33372d3337203d3e20323634303232.roa
File:                     323830343a323939303a353830303a3a2f33372d3337203d3e20323634303232.roa (raw, json)
Hash identifier:          gxfh0YMJi5tMX5SUi7oRkVsslgqcMkC0sM/uIsFjcV4=
Subject key identifier:   09:C8:95:47:18:E3:95:1F:07:CB:32:99:FC:87:2A:46:2C:64:AC:7D
Certificate issuer:       /CN=FD369747AFFC9F90DBBA7D86902B079C7F2F08BB
Certificate serial:       38BB1B8D9EB3EBB6FCD6BE7306D79284EB196664
Authority key identifier: FD:36:97:47:AF:FC:9F:90:DB:BA:7D:86:90:2B:07:9C:7F:2F:08:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD369747AFFC9F90DBBA7D86902B079C7F2F08BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a353830303a3a2f33372d3337203d3e20323634303232.roa
Signing time:             Thu 20 Oct 2022 12:11:53 +0000
ROA not before:           Thu 20 Oct 2022 12:06:53 +0000
ROA not after:            Thu 19 Oct 2023 12:11:53 +0000
asID:                     264022
IP address blocks:        2804:2990:5800::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:bb:1b:8d:9e:b3:eb:b6:fc:d6:be:73:06:d7:92:84:eb:19:66:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD369747AFFC9F90DBBA7D86902B079C7F2F08BB
        Validity
            Not Before: Oct 20 12:06:53 2022 GMT
            Not After : Oct 19 12:11:53 2023 GMT
        Subject: CN=09C8954718E3951F07CB3299FC872A462C64AC7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1a:fc:e9:78:73:b4:45:dd:50:0e:73:fa:ba:
                    09:38:d6:03:b8:31:f3:b3:d8:f1:1d:a1:e1:eb:cb:
                    58:dc:b4:64:fd:7c:9a:8e:0d:5b:27:61:54:02:81:
                    45:29:7c:54:f8:c2:7f:cd:cd:0b:26:7a:be:4b:0e:
                    f7:f7:9f:28:60:1a:33:f5:40:89:43:d3:36:12:df:
                    3b:d6:49:d2:72:94:70:ed:57:b0:55:4b:19:db:02:
                    5d:e9:1e:99:3e:39:ea:b0:63:2c:2e:6f:ed:d2:be:
                    31:c8:ad:d9:0f:51:a8:23:cf:a8:ff:1e:86:66:a9:
                    ff:19:59:37:72:1d:01:2a:db:d9:92:06:d5:4d:7b:
                    e0:d1:fb:d7:ca:bd:1f:07:07:19:ff:61:47:34:be:
                    e3:99:e8:f8:e3:32:9c:24:33:76:64:d7:09:4c:9d:
                    35:98:8b:bf:d3:0e:04:0f:02:c7:55:4b:eb:b4:da:
                    2f:d6:38:40:8b:31:89:e3:60:70:5b:4b:96:ee:8b:
                    60:ad:76:1b:3e:dc:0a:c2:76:54:1e:ee:65:9e:7a:
                    13:76:5a:93:98:b1:38:6d:d6:7f:f8:13:b0:26:b6:
                    5f:93:1f:0d:46:5b:3d:a0:2d:c2:8d:95:d4:84:f8:
                    a0:15:29:de:ec:d1:32:47:09:99:5d:ff:44:2f:be:
                    c7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C8:95:47:18:E3:95:1F:07:CB:32:99:FC:87:2A:46:2C:64:AC:7D
            X509v3 Authority Key Identifier:
                keyid:FD:36:97:47:AF:FC:9F:90:DB:BA:7D:86:90:2B:07:9C:7F:2F:08:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/FD369747AFFC9F90DBBA7D86902B079C7F2F08BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FD369747AFFC9F90DBBA7D86902B079C7F2F08BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/52WLuXwcw7Cyc8vXhvaye3DG4rafLcgLP9QdCe3YqMdq/0/323830343a323939303a353830303a3a2f33372d3337203d3e20323634303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2990:5800::/37

    Signature Algorithm: sha256WithRSAEncryption
         b3:66:9f:0b:ed:c1:88:8c:84:28:84:13:02:99:77:39:c1:2b:
         07:3d:90:42:38:30:13:bc:35:b4:88:d9:49:ba:75:53:95:ca:
         c1:7d:11:7f:ff:96:b1:3d:4a:39:9d:4c:4b:3c:0f:c1:eb:bf:
         24:aa:ee:bd:fb:3e:f8:7b:d7:f3:aa:a2:b6:22:88:f5:07:d4:
         e3:b0:53:d9:12:3c:10:db:36:89:56:66:cf:83:b2:db:e8:39:
         86:9d:cb:dc:9b:c4:1b:81:53:92:fe:ca:3b:0e:cd:fa:26:62:
         d6:6f:20:bd:53:a9:e7:9b:4f:d9:f4:8a:c6:fb:aa:a9:12:db:
         e6:db:f4:8f:53:12:92:44:45:1d:c1:f5:a2:b6:2b:3b:87:d1:
         3b:05:dc:4f:f4:85:6b:3b:13:30:c3:48:96:a8:18:7c:7b:a2:
         51:a9:70:5c:2d:31:0f:2c:3b:5d:6e:30:2c:6c:00:5e:db:4e:
         52:15:ff:31:47:6b:f8:a2:3a:06:c6:0b:57:b0:5c:c1:35:a1:
         6a:db:9b:2a:33:c3:b3:91:bb:ca:a9:28:ea:e2:c3:fa:b9:cc:
         91:85:e9:ba:d8:f8:7c:49:91:b9:73:ac:58:ad:86:45:fa:a5:
         18:28:17:dc:dd:2c:ae:5c:bf:ef:f4:b8:b6:a1:5f:ef:19:7d:
         be:05:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org