Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/323830343a316463343a3a2f33322d3332203d3e20323634333932.roa
File:                     323830343a316463343a3a2f33322d3332203d3e20323634333932.roa (raw, json)
Hash identifier:          KRuKf2RN+1VCDAl+EjZBpMvaaO2h5XXFWqmeznlIQiQ=
Subject key identifier:   F1:02:43:6B:9C:AD:D6:B0:44:4F:78:B0:3D:74:32:D2:FE:B0:88:FF
Certificate issuer:       /CN=FCD7E8134A54BC69039878FDD2365C466F86B95F
Certificate serial:       122ADF89EEB42CFC79E26E86D0A0546E1461B29E
Authority key identifier: FC:D7:E8:13:4A:54:BC:69:03:98:78:FD:D2:36:5C:46:6F:86:B9:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/323830343a316463343a3a2f33322d3332203d3e20323634333932.roa
Signing time:             Tue 05 Mar 2024 16:51:51 +0000
ROA not before:           Tue 05 Mar 2024 16:46:51 +0000
ROA not after:            Tue 04 Mar 2025 16:51:51 +0000
asID:                     264392
IP address blocks:        2804:1dc4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:2a:df:89:ee:b4:2c:fc:79:e2:6e:86:d0:a0:54:6e:14:61:b2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCD7E8134A54BC69039878FDD2365C466F86B95F
        Validity
            Not Before: Mar  5 16:46:51 2024 GMT
            Not After : Mar  4 16:51:51 2025 GMT
        Subject: CN=F102436B9CADD6B0444F78B03D7432D2FEB088FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:aa:1c:41:af:81:86:a4:58:a6:6e:b9:92:63:
                    fb:0d:27:a4:28:b0:43:51:f8:e2:f6:ec:00:45:91:
                    7a:69:cc:3d:df:5b:fa:bf:54:b9:c8:b1:9f:26:d4:
                    1e:08:e1:03:ea:ad:ca:45:e6:9c:f9:aa:24:08:de:
                    dc:ca:88:51:7f:24:05:7a:4b:d4:54:78:51:6d:67:
                    ad:01:62:5d:40:e9:71:a4:a4:e5:4a:3a:f3:18:6a:
                    fb:35:60:7c:1e:d0:82:ff:2a:2a:f5:e9:01:b0:ac:
                    aa:8a:1b:a3:75:ba:4b:bd:d8:f9:ec:50:ed:92:43:
                    6b:f9:06:7c:15:0e:34:32:cc:49:dd:09:60:48:35:
                    c2:e5:11:8c:89:2c:7c:91:90:df:7e:71:a2:bd:c2:
                    c2:62:96:85:8b:52:40:43:f8:af:ba:90:e1:d3:9a:
                    31:62:dd:9d:7f:13:c5:df:6b:6b:32:e9:eb:09:ca:
                    9f:3e:c9:29:ef:0f:d2:d3:b8:f7:3a:1a:ae:47:2b:
                    02:96:9d:4b:a9:34:e2:9d:82:9e:76:16:ff:69:3f:
                    f8:b1:c2:6b:46:e7:08:e2:00:5d:e0:53:f1:bc:14:
                    38:f1:60:b0:ab:27:48:a2:cd:6a:9d:39:87:24:8f:
                    61:34:9f:af:ff:e8:89:7c:40:ae:46:e6:0c:22:33:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:02:43:6B:9C:AD:D6:B0:44:4F:78:B0:3D:74:32:D2:FE:B0:88:FF
            X509v3 Authority Key Identifier:
                keyid:FC:D7:E8:13:4A:54:BC:69:03:98:78:FD:D2:36:5C:46:6F:86:B9:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCD7E8134A54BC69039878FDD2365C466F86B95F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/323830343a316463343a3a2f33322d3332203d3e20323634333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:8f:c1:5b:eb:4b:15:1e:17:54:1f:d6:77:00:56:8a:20:6d:
         03:92:6a:b8:ba:2b:00:ef:a4:0c:d6:c4:4d:a3:6f:c8:c9:fb:
         5b:fd:c0:e3:ae:34:22:d3:a2:14:ed:22:e4:37:4f:51:14:e0:
         9d:ef:93:85:f8:30:73:1c:2b:c2:db:20:91:42:88:78:da:84:
         16:77:f7:8d:54:ca:db:90:61:ef:d6:fd:ef:09:d1:70:af:25:
         d7:e1:35:98:06:a4:4f:3e:6b:4d:e3:04:ea:4b:ed:22:05:bd:
         64:4b:69:0b:74:14:56:52:cd:8d:8b:88:6d:53:58:f4:6c:e4:
         b7:cf:cf:b4:a0:e6:33:88:89:90:cd:31:72:50:95:8b:37:f1:
         e5:c2:5a:34:89:fd:a7:3b:0f:23:25:09:7e:9b:52:e8:be:80:
         84:c2:08:da:79:3f:30:35:4b:00:0a:3c:e7:49:a3:68:ae:78:
         d7:58:70:ad:11:cb:c0:09:01:1f:41:23:db:dd:20:34:65:f4:
         6b:cb:aa:ad:99:59:e3:96:49:82:62:e6:65:cd:b6:04:9f:54:
         43:cd:d2:6e:d7:34:9f:bf:6c:17:25:99:e7:ed:ea:ce:8f:a3:
         68:2d:88:27:9f:15:ae:f7:df:89:d7:c3:be:99:a8:78:86:cf:
         eb:b9:d6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org