Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/323830343a333465383a3a2f33322d3332203d3e20323635343837.roa
File:                     323830343a333465383a3a2f33322d3332203d3e20323635343837.roa (raw, json)
Hash identifier:          8M5uiNx+CNSuN2gf8MOPugtTy3yT/+yhJvhtiNsrPiw=
Subject key identifier:   85:A1:F7:C2:C0:5C:E8:DF:91:5F:E8:AD:67:E4:15:D7:23:45:AB:01
Certificate issuer:       /CN=FBBB999805E32505BB469C0FE86BBE3FF9063230
Certificate serial:       7A7DAD5A022F6476CE0D8289D09AD594D5FEB970
Authority key identifier: FB:BB:99:98:05:E3:25:05:BB:46:9C:0F:E8:6B:BE:3F:F9:06:32:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBBB999805E32505BB469C0FE86BBE3FF9063230.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/323830343a333465383a3a2f33322d3332203d3e20323635343837.roa
Signing time:             Mon 27 Dec 2021 20:35:57 +0000
ROA not before:           Mon 27 Dec 2021 20:30:57 +0000
ROA not after:            Mon 26 Dec 2022 20:35:57 +0000
asID:                     265487
IP address blocks:        2804:34e8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7d:ad:5a:02:2f:64:76:ce:0d:82:89:d0:9a:d5:94:d5:fe:b9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBBB999805E32505BB469C0FE86BBE3FF9063230
        Validity
            Not Before: Dec 27 20:30:57 2021 GMT
            Not After : Dec 26 20:35:57 2022 GMT
        Subject: CN=85A1F7C2C05CE8DF915FE8AD67E415D72345AB01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:5c:53:5c:7d:27:a8:d6:11:cc:d6:33:49:
                    6f:75:e5:53:4c:84:0e:76:6b:f7:2c:1a:d5:41:12:
                    22:01:14:c8:f2:b8:49:96:e1:90:44:99:a3:4f:bd:
                    92:3a:b9:7f:d0:0a:08:8b:74:fe:6d:77:7c:11:94:
                    cc:1d:bf:24:2a:b4:67:98:42:89:6a:6f:2e:30:f2:
                    17:80:3d:62:88:16:38:a2:b3:15:12:ad:8d:46:50:
                    43:24:48:8f:c6:29:db:ec:30:f1:59:2f:71:3b:2b:
                    b0:0f:23:13:16:5d:f6:0f:db:3a:32:bf:fd:3d:50:
                    53:b5:2a:65:43:14:66:df:bd:60:61:02:80:2c:98:
                    af:d9:16:fe:e2:e5:10:53:43:a2:ad:5d:8a:34:7a:
                    ac:1f:6a:cf:cf:14:50:2f:41:20:aa:25:c0:84:41:
                    d1:3a:85:3a:8a:28:e4:5f:c1:5c:a4:76:19:c8:bb:
                    7f:75:5e:73:d3:68:d6:ea:b4:9b:0b:e3:91:21:4a:
                    cb:50:db:4a:30:91:7a:19:99:b1:cf:00:1e:d5:82:
                    79:e1:be:14:0d:a6:7a:dc:de:0d:6c:1c:9b:3f:81:
                    0e:81:e0:32:ec:c4:2a:aa:95:2b:bf:fb:fb:21:6d:
                    24:84:df:0f:01:30:93:56:bb:8c:96:b8:3d:60:47:
                    60:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A1:F7:C2:C0:5C:E8:DF:91:5F:E8:AD:67:E4:15:D7:23:45:AB:01
            X509v3 Authority Key Identifier:
                keyid:FB:BB:99:98:05:E3:25:05:BB:46:9C:0F:E8:6B:BE:3F:F9:06:32:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/FBBB999805E32505BB469C0FE86BBE3FF9063230.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FBBB999805E32505BB469C0FE86BBE3FF9063230.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/323830343a333465383a3a2f33322d3332203d3e20323635343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:b2:43:28:91:3e:33:00:f9:06:23:da:21:10:c0:11:37:db:
         e8:41:90:9a:71:fa:13:de:3a:1e:fc:6c:0f:ec:3f:b7:96:57:
         6e:c4:4a:65:ea:28:9f:5a:4b:77:48:bd:e2:c2:4c:0b:86:db:
         91:9e:8b:8d:d2:13:da:d1:57:a2:44:68:48:72:87:e8:30:c8:
         bd:3c:ac:4f:73:e2:60:0b:11:42:7d:92:a8:2a:0f:f3:d0:a8:
         5c:70:52:d0:a0:f5:fb:10:ba:90:3f:3f:21:f4:a2:67:e3:82:
         fa:1b:e7:d4:b9:6e:90:45:01:b8:d1:a6:50:b5:74:30:37:d3:
         c9:1c:c7:be:68:32:a5:42:37:e0:50:4f:25:8c:a7:ad:e6:9b:
         d4:69:0d:1e:1a:b9:59:1c:48:1d:cd:d5:20:ef:b5:9c:ff:5c:
         a5:4f:5f:61:ae:fe:c8:3c:b4:51:1f:1a:07:ea:05:4e:cc:51:
         33:82:be:0c:52:91:fb:78:12:80:3e:e6:bb:eb:7a:03:45:dc:
         1e:45:21:20:77:84:9e:45:3a:e4:4d:29:98:5e:40:b7:3d:15:
         df:ae:5b:03:bf:82:a9:5e:98:41:45:6f:b0:7b:8a:97:57:eb:
         33:67:21:30:2a:df:ab:81:1c:34:d2:f9:39:37:be:1b:96:fa:
         e5:b2:94:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org