Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5xkesWsWvLGC2XLJRLKdJWjJfyGiGU736CjZoHoozvt5/0/323830343a363561633a3a2f33322d3430203d3e20323639353037.roa
File:                     323830343a363561633a3a2f33322d3430203d3e20323639353037.roa (raw, json)
Hash identifier:          oVPYuxDWEAg/zkaLfVmNwOBRBtVyqEhCGrfXeeQkto4=
Subject key identifier:   14:AE:DD:AE:36:67:04:9D:4D:10:0B:B6:18:36:7B:C8:71:E1:8C:67
Certificate issuer:       /CN=FB7F7AB233D92CDBB9AB0F8598ED11CECCB3B1B7
Certificate serial:       3F6B2489EF7C11DE9EE9924A39FE8981AABC4A22
Authority key identifier: FB:7F:7A:B2:33:D9:2C:DB:B9:AB:0F:85:98:ED:11:CE:CC:B3:B1:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB7F7AB233D92CDBB9AB0F8598ED11CECCB3B1B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5xkesWsWvLGC2XLJRLKdJWjJfyGiGU736CjZoHoozvt5/0/323830343a363561633a3a2f33322d3430203d3e20323639353037.roa
Signing time:             Wed 11 May 2022 15:16:40 +0000
ROA not before:           Wed 11 May 2022 15:11:40 +0000
ROA not after:            Wed 10 May 2023 15:16:40 +0000
asID:                     269507
IP address blocks:        2804:65ac::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6b:24:89:ef:7c:11:de:9e:e9:92:4a:39:fe:89:81:aa:bc:4a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB7F7AB233D92CDBB9AB0F8598ED11CECCB3B1B7
        Validity
            Not Before: May 11 15:11:40 2022 GMT
            Not After : May 10 15:16:40 2023 GMT
        Subject: CN=14AEDDAE3667049D4D100BB618367BC871E18C67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f3:4b:84:f7:94:eb:0b:b0:cb:e5:58:e9:24:
                    34:9f:32:08:c1:1d:ad:cf:b7:46:e2:c9:9b:f2:ba:
                    72:17:38:d9:83:ad:8a:e6:0e:9a:e9:13:95:60:d7:
                    67:35:94:17:ee:4d:e5:d2:3c:eb:90:c9:2f:26:d2:
                    16:7f:13:64:b4:7a:33:d6:ea:45:4c:2c:81:0c:6e:
                    b7:66:e5:b7:c2:bd:cb:db:c9:86:85:86:1d:3f:5d:
                    38:f7:c9:f4:22:34:59:38:4c:4f:4f:c6:3c:bf:ae:
                    89:a3:b2:cd:f4:c0:fa:6b:f1:05:c5:a3:c5:4c:ce:
                    8e:3f:aa:8c:ae:23:8d:c4:a0:a5:5c:38:0c:9b:8d:
                    54:49:90:4e:a3:bf:50:32:e8:4e:a0:34:14:28:c3:
                    4d:d2:27:dd:dc:1c:3a:99:fc:1b:ce:77:f5:6e:ef:
                    8e:2e:78:de:f6:06:7d:9b:b9:c3:9f:e0:9a:b4:6a:
                    55:f6:e7:f5:fc:2d:2b:2a:b9:9b:7c:1a:f6:6b:d7:
                    4f:1d:85:a5:1f:c1:ae:54:9e:b1:63:a6:f3:a7:3a:
                    77:71:e4:91:42:ed:8d:9a:d9:9d:45:14:2d:32:5b:
                    70:0e:fd:15:92:f0:c7:06:9c:78:0f:a4:a1:cc:cb:
                    9c:2b:32:aa:4c:b6:04:67:28:20:44:da:a4:d4:4a:
                    32:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AE:DD:AE:36:67:04:9D:4D:10:0B:B6:18:36:7B:C8:71:E1:8C:67
            X509v3 Authority Key Identifier:
                keyid:FB:7F:7A:B2:33:D9:2C:DB:B9:AB:0F:85:98:ED:11:CE:CC:B3:B1:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5xkesWsWvLGC2XLJRLKdJWjJfyGiGU736CjZoHoozvt5/0/FB7F7AB233D92CDBB9AB0F8598ED11CECCB3B1B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FB7F7AB233D92CDBB9AB0F8598ED11CECCB3B1B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5xkesWsWvLGC2XLJRLKdJWjJfyGiGU736CjZoHoozvt5/0/323830343a363561633a3a2f33322d3430203d3e20323639353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:65ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:8b:36:6d:97:62:71:b7:49:f5:c9:e1:62:d6:fe:55:46:fa:
         96:0e:f9:1e:9a:f2:25:67:7d:4d:ec:9d:aa:51:af:af:7b:d2:
         52:10:df:f3:4b:64:fb:16:e6:bb:ef:a1:da:3c:80:de:d2:9c:
         ce:d4:ce:6e:70:84:1c:a3:f9:f8:75:de:f9:a1:39:87:90:a2:
         1c:9e:3d:c9:2d:19:6f:be:c3:bf:3e:8b:9b:dd:8b:5e:6e:98:
         1f:5a:81:9c:93:b9:ce:28:ff:a7:fe:65:d4:c4:df:6f:f8:ee:
         11:5c:5f:25:3a:56:b2:cd:85:88:cf:f6:61:5b:e5:b7:3b:2c:
         10:11:42:e7:ca:d6:41:de:30:ba:9c:f5:e6:94:22:a2:ec:fc:
         9a:b5:6b:92:0d:d9:1d:fd:e3:84:f9:b5:a5:ae:cf:90:d1:4c:
         71:5a:fd:8a:56:40:11:97:a3:ca:39:f4:40:91:62:7b:53:95:
         55:ec:69:d9:8b:48:f2:48:44:32:59:41:a0:d9:1d:4a:f6:f1:
         69:de:df:b8:db:1c:75:d2:30:91:50:76:7d:c7:a9:e5:7d:01:
         af:a8:e2:b3:a1:6b:70:8c:f2:5d:fb:65:6a:d6:74:65:04:ab:
         2a:b7:cc:8e:5a:6e:f1:57:29:71:ad:74:28:fc:15:15:46:1b:
         b4:bc:e7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org