Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/323830343a333966633a3a2f33322d3438203d3e20323636303633.roa
File:                     323830343a333966633a3a2f33322d3438203d3e20323636303633.roa (raw, json)
Hash identifier:          c12m6iwshhagMzixvwHQP/1UiUM09taP1eD75YA3sTw=
Subject key identifier:   FA:A3:06:34:82:9C:05:FD:DC:63:47:51:E3:AE:0F:04:AE:58:3E:C9
Certificate issuer:       /CN=2FD34957E649B1523E1FF87A9590244D5E9C6A98
Certificate serial:       50BAC9D25DEDE76DC1AC1B2CDECB57983037ABAC
Authority key identifier: 2F:D3:49:57:E6:49:B1:52:3E:1F:F8:7A:95:90:24:4D:5E:9C:6A:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FD34957E649B1523E1FF87A9590244D5E9C6A98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/323830343a333966633a3a2f33322d3438203d3e20323636303633.roa
Signing time:             Thu 12 Oct 2023 21:08:38 +0000
ROA not before:           Thu 12 Oct 2023 21:03:38 +0000
ROA not after:            Thu 10 Oct 2024 21:08:38 +0000
asID:                     266063
IP address blocks:        2804:39fc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ba:c9:d2:5d:ed:e7:6d:c1:ac:1b:2c:de:cb:57:98:30:37:ab:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FD34957E649B1523E1FF87A9590244D5E9C6A98
        Validity
            Not Before: Oct 12 21:03:38 2023 GMT
            Not After : Oct 10 21:08:38 2024 GMT
        Subject: CN=FAA30634829C05FDDC634751E3AE0F04AE583EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:3a:fd:28:44:e2:62:15:8d:e4:a6:86:6c:
                    b8:a1:af:ce:6d:29:17:0c:9c:23:1a:df:f8:e0:f2:
                    cb:6b:e9:ae:22:8d:be:91:71:f5:3e:b7:72:bc:76:
                    9e:94:a2:01:f5:b3:ef:c2:be:30:cd:e8:7a:b5:bf:
                    13:12:7b:ac:65:e8:d0:40:a4:ad:7d:fa:dd:9d:2c:
                    99:f2:7e:d9:a8:72:8f:46:79:b7:d5:e8:5d:49:6b:
                    78:4f:30:c8:82:b8:39:37:bb:90:2d:b4:64:a7:34:
                    d9:c2:f6:c2:2c:25:da:5d:da:87:ca:bd:47:82:9c:
                    e9:a5:14:b5:f5:6b:55:50:15:69:0f:6a:5d:28:4d:
                    11:db:d4:61:fc:10:e0:16:6d:73:cb:cc:31:fa:c3:
                    d0:fd:e8:db:24:f0:39:dc:52:6a:8a:3f:69:e8:1f:
                    46:ce:1f:00:89:c6:d0:ce:e3:52:cd:e2:49:e5:71:
                    75:3f:67:7a:23:85:28:6a:8d:dd:21:cd:d3:b2:c0:
                    34:cd:e8:62:e2:90:0f:18:cd:09:34:93:57:42:74:
                    bb:ef:c9:f6:bb:66:1e:0b:6a:ee:6e:1a:01:4a:b9:
                    b3:51:a8:85:3c:c7:ed:75:22:ad:4c:e6:4f:a0:c6:
                    f1:93:22:5a:14:4e:07:bb:8c:ce:ec:df:ae:1f:db:
                    42:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A3:06:34:82:9C:05:FD:DC:63:47:51:E3:AE:0F:04:AE:58:3E:C9
            X509v3 Authority Key Identifier:
                keyid:2F:D3:49:57:E6:49:B1:52:3E:1F:F8:7A:95:90:24:4D:5E:9C:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/2FD34957E649B1523E1FF87A9590244D5E9C6A98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FD34957E649B1523E1FF87A9590244D5E9C6A98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7wnDMHM12vFdgWCrUUQeTxi4sVAi7HwhxYuPbEYJc9B4/0/323830343a333966633a3a2f33322d3438203d3e20323636303633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:2b:c6:39:f7:a5:d0:e8:e5:b2:35:a1:53:9d:38:88:eb:bf:
         86:1a:5c:9c:21:c6:cc:67:26:86:9b:54:35:18:b4:5f:0c:90:
         34:b7:de:bf:32:da:f5:79:6a:28:ad:78:fe:bf:cb:bf:56:60:
         9a:8c:cf:f1:db:26:85:6e:d3:15:aa:df:d8:94:04:5a:27:ec:
         85:bd:e3:94:86:20:7d:20:d8:16:0f:bf:3f:17:5f:b7:66:01:
         ab:fa:c4:15:cf:2c:3f:f9:a3:8c:9f:c7:29:10:d0:8d:0f:96:
         0d:68:41:91:3c:62:91:84:4f:11:e3:0d:e5:3f:2e:3e:f8:ab:
         1f:82:42:b3:77:9e:f9:2f:34:c4:60:8b:a2:4c:7c:40:5c:35:
         b2:29:da:4e:9e:be:41:95:98:dd:95:cc:a0:9f:83:df:1f:6f:
         c6:b5:ca:a8:b0:02:0c:10:0a:89:63:71:aa:8a:a6:59:f2:3a:
         0a:cc:3d:bd:d5:16:57:ae:52:8b:16:72:b3:56:ec:cf:60:a4:
         97:3b:1c:ce:d0:17:a9:73:a2:c4:13:80:57:d9:48:55:c9:ac:
         44:53:62:2f:1a:d6:1c:50:df:6b:79:58:46:05:a5:78:c6:a5:
         e4:67:37:8b:e1:db:2c:40:a6:ae:b0:d5:05:e3:81:c9:1d:22:
         23:49:3e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org