Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a3a2f33322d3335203d3e203533303138.roa
File:                     323830343a333534633a3a2f33322d3335203d3e203533303138.roa (raw, json)
Hash identifier:          UDYq4onHi9O/aLoKap1BWX2yfAD2U1VONV3e5Q5IfXw=
Subject key identifier:   C9:A7:32:3C:85:1E:F9:0F:AD:FD:9C:AC:A1:3A:1F:31:6E:30:FD:B0
Certificate issuer:       /CN=FF200E4C71F382D87AE431559DD6BD74D192236B
Certificate serial:       63EF2D2CE5A529477EB164BD7635898C711DD693
Authority key identifier: FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a3a2f33322d3335203d3e203533303138.roa
Signing time:             Fri 08 Mar 2024 18:59:37 +0000
ROA not before:           Fri 08 Mar 2024 18:54:37 +0000
ROA not after:            Fri 07 Mar 2025 18:59:37 +0000
asID:                     53018
IP address blocks:        2804:354c::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ef:2d:2c:e5:a5:29:47:7e:b1:64:bd:76:35:89:8c:71:1d:d6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF200E4C71F382D87AE431559DD6BD74D192236B
        Validity
            Not Before: Mar  8 18:54:37 2024 GMT
            Not After : Mar  7 18:59:37 2025 GMT
        Subject: CN=C9A7323C851EF90FADFD9CACA13A1F316E30FDB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:53:f0:60:01:35:3d:84:0c:e0:87:55:5c:
                    ee:fc:99:b8:00:03:89:54:ad:36:ef:df:b6:56:a7:
                    40:1d:0c:82:4c:18:07:19:53:f8:85:ca:20:11:d5:
                    f7:2a:2d:ce:2b:be:f8:a4:bc:9c:be:ef:01:ee:d6:
                    57:4e:18:23:4a:e4:09:10:f1:ce:5f:a7:ee:f6:d3:
                    f2:f3:db:e3:a9:a3:65:38:af:4f:5c:56:1a:a6:35:
                    f5:89:d8:53:b7:4d:08:51:83:6b:69:04:ac:ce:42:
                    b3:0f:45:3b:2e:fb:ec:24:30:61:ce:35:f3:9c:91:
                    c0:2a:10:09:18:db:e1:7e:e0:70:96:91:cf:01:67:
                    c2:7e:9a:79:8d:0e:08:94:b9:b3:01:1c:25:87:38:
                    4a:82:38:f7:76:28:bc:57:e8:22:2d:9e:93:7d:82:
                    16:8b:69:d2:94:57:ed:4b:e7:75:16:64:ac:c5:01:
                    a3:df:96:b3:09:14:c7:4a:4e:f2:2b:d9:88:e5:3c:
                    b4:ae:38:51:31:94:2f:cc:13:1b:cd:c7:2e:d2:23:
                    21:22:be:58:4a:27:a5:90:52:6c:bc:88:7b:1c:2c:
                    2d:3b:d0:7f:02:c3:36:6e:fb:01:23:76:a0:ec:a8:
                    d2:18:80:8d:9f:ca:49:71:45:7d:ae:e0:51:2d:bc:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A7:32:3C:85:1E:F9:0F:AD:FD:9C:AC:A1:3A:1F:31:6E:30:FD:B0
            X509v3 Authority Key Identifier:
                keyid:FF:20:0E:4C:71:F3:82:D8:7A:E4:31:55:9D:D6:BD:74:D1:92:23:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/FF200E4C71F382D87AE431559DD6BD74D192236B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FF200E4C71F382D87AE431559DD6BD74D192236B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7E7NMARpg3cPc3tUZkFMrKzRtGb5RHtyBGpztFVWMuJf/0/323830343a333534633a3a2f33322d3335203d3e203533303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:354c::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:34:38:3c:c3:60:20:03:89:83:54:4a:c3:8d:2a:7e:4c:77:
         d1:3f:76:04:e6:53:de:bd:44:de:3a:d0:9c:46:47:b6:aa:7f:
         ae:7c:d5:d5:71:3d:3a:29:a6:b9:c6:55:59:e0:9d:11:6f:c2:
         6c:79:f1:5e:f1:03:e4:e8:9e:24:68:13:f8:30:65:ba:20:fb:
         c2:f6:f0:69:fd:91:3f:2b:fb:4b:56:b2:93:88:59:b2:cf:9e:
         20:8a:48:64:26:c5:f3:5d:a2:7a:38:19:05:54:8e:20:8d:08:
         6d:6a:1f:97:a6:9a:b7:a8:42:af:4e:10:ca:0c:66:2c:e8:8b:
         d9:5d:5f:48:bc:12:ff:d8:ba:3f:cd:3b:38:e0:a3:3d:fc:50:
         8a:e7:2e:7c:f7:e3:0a:8d:75:3a:27:d5:19:4d:07:47:db:80:
         f2:20:3e:95:70:c9:e1:ab:08:42:08:1f:a6:57:40:6f:32:01:
         c7:4f:37:45:b5:c3:b8:3a:4a:3a:fb:1c:2b:82:5d:f8:f2:a3:
         0b:f5:ff:0e:1b:35:52:51:f4:b5:46:89:c0:a9:a1:7b:84:6c:
         2d:a2:2c:95:a8:0c:e9:99:c6:6c:db:6e:57:62:95:58:36:d6:
         69:37:d5:5e:54:d0:66:dd:8c:97:03:b3:37:b6:5d:9d:e2:ac:
         71:28:bb:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:37 2024 by rpki-client on console-ams.rpki-client.org