Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/323830343a343333633a3a2f33322d313238203d3e20323637353537.roa
File:                     323830343a343333633a3a2f33322d313238203d3e20323637353537.roa (raw, json)
Hash identifier:          EPEL8h2ogpj8h1RmPRFedirZ2UTsV7eXkB4zAxRkJX8=
Subject key identifier:   18:D7:15:85:91:52:5B:DD:61:75:A8:15:8A:C8:EC:3C:7D:AE:1E:CB
Certificate issuer:       /CN=FA86FE2D056416CC0DB0643754AE56BA4FB35A44
Certificate serial:       6F0CA8F9F9C2D63DB813EB371F5A90D203A55E15
Authority key identifier: FA:86:FE:2D:05:64:16:CC:0D:B0:64:37:54:AE:56:BA:4F:B3:5A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA86FE2D056416CC0DB0643754AE56BA4FB35A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/323830343a343333633a3a2f33322d313238203d3e20323637353537.roa
Signing time:             Fri 28 Apr 2023 14:53:33 +0000
ROA not before:           Fri 28 Apr 2023 14:48:33 +0000
ROA not after:            Fri 26 Apr 2024 14:53:33 +0000
asID:                     267557
IP address blocks:        2804:433c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:0c:a8:f9:f9:c2:d6:3d:b8:13:eb:37:1f:5a:90:d2:03:a5:5e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA86FE2D056416CC0DB0643754AE56BA4FB35A44
        Validity
            Not Before: Apr 28 14:48:33 2023 GMT
            Not After : Apr 26 14:53:33 2024 GMT
        Subject: CN=18D7158591525BDD6175A8158AC8EC3C7DAE1ECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c8:3c:4c:9f:7a:a8:4e:c6:e8:15:84:f1:4a:
                    51:3b:70:83:ec:6e:36:a6:34:91:43:7e:bd:0c:17:
                    7a:a0:b9:1d:85:0d:35:13:28:09:db:e2:73:35:e8:
                    d4:65:ac:a7:c8:9a:7b:e4:b2:5c:1b:85:88:48:54:
                    97:bb:d6:34:8f:ad:9f:68:37:b0:63:e5:d8:7d:4a:
                    b7:30:21:90:ac:a7:fa:25:c8:1f:49:35:eb:02:9b:
                    40:2b:53:07:86:54:a0:30:72:8a:56:da:a5:fd:c5:
                    75:15:77:75:be:84:c5:cd:91:a2:8e:9e:9e:52:2a:
                    b5:8f:cd:31:0f:42:b2:93:2d:2a:c9:7e:9b:bd:b6:
                    6f:54:ed:df:e6:94:77:26:51:b4:47:78:2e:a0:65:
                    cb:45:1c:91:d0:16:a4:20:13:11:29:25:65:89:a4:
                    82:01:db:73:ee:62:83:a3:35:9f:ec:f1:2a:6e:93:
                    d0:ed:e5:71:c9:38:c1:6f:9e:01:24:e9:03:43:f6:
                    9c:d2:29:32:4e:5e:30:63:d4:c4:a8:cb:e0:38:36:
                    06:2a:2f:3d:72:5a:c1:41:b7:56:f9:0d:ea:ad:2d:
                    3a:b4:bc:ff:bd:d6:1d:eb:85:28:a9:b9:dc:43:a7:
                    bb:f9:6f:6d:8b:1d:e0:c1:d7:20:06:a2:af:8d:cb:
                    8d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D7:15:85:91:52:5B:DD:61:75:A8:15:8A:C8:EC:3C:7D:AE:1E:CB
            X509v3 Authority Key Identifier:
                keyid:FA:86:FE:2D:05:64:16:CC:0D:B0:64:37:54:AE:56:BA:4F:B3:5A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/FA86FE2D056416CC0DB0643754AE56BA4FB35A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA86FE2D056416CC0DB0643754AE56BA4FB35A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/323830343a343333633a3a2f33322d313238203d3e20323637353537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:433c::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:b1:06:b9:b4:16:7c:f3:05:ed:ee:6e:9d:6c:e1:ee:a4:6f:
         88:ab:3b:33:71:f6:d7:5d:20:86:95:14:dc:73:a9:8a:a1:18:
         3d:1c:59:d5:fe:21:18:d4:72:d6:93:90:df:65:65:6c:8c:9d:
         8c:e8:1a:d0:17:3c:9d:6e:f9:24:20:2d:43:96:cb:e1:18:3a:
         33:9b:5b:92:82:09:e3:43:1d:ed:ff:ab:6e:05:94:b9:83:63:
         bc:d0:4d:5c:80:ec:d2:3e:2c:db:b7:7e:e9:d9:9b:a2:ec:73:
         40:2b:f7:17:6c:e7:09:f4:36:2f:ca:29:d8:de:75:8b:09:fe:
         17:23:dc:29:a3:12:67:d3:56:48:5d:93:6e:1a:a6:df:3a:f9:
         ca:64:d1:0d:f4:a5:50:d6:bb:e3:ba:a2:35:e7:ed:1b:55:0b:
         5c:5a:2e:22:17:f0:9e:c5:ee:ce:39:1e:d4:bd:7b:7d:b4:bd:
         44:6a:c0:55:66:fa:14:97:5c:1c:8b:f9:75:bf:6f:6d:a5:39:
         88:58:9c:f5:68:02:cc:f2:0d:9e:f1:ed:9a:05:12:18:e8:b2:
         0b:2a:08:3e:41:29:48:c0:73:9e:02:52:1f:a8:25:58:d8:09:
         d1:ff:b8:25:33:59:d9:53:29:bf:8e:30:a1:f2:c4:59:86:9b:
         af:a0:44:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org