Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/323830343a313932343a3a2f33322d3333203d3e203631373734.roa
File:                     323830343a313932343a3a2f33322d3333203d3e203631373734.roa (raw, json)
Hash identifier:          0PQRtEUt8VbqsA58hZ6JFFxCuEI5omcnoGDoNRw51w8=
Subject key identifier:   5B:36:EE:26:7B:72:15:45:20:7B:CA:33:1B:4C:02:8A:98:F6:61:CE
Certificate issuer:       /CN=FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F
Certificate serial:       45902AAF4974A3B4029D22FD03EBD316C94EB1BE
Authority key identifier: FA:11:21:EC:AC:AF:0E:8C:2C:26:95:DA:5A:E6:A8:1C:33:C4:09:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/323830343a313932343a3a2f33322d3333203d3e203631373734.roa
Signing time:             Thu 04 Apr 2024 02:53:05 +0000
ROA not before:           Thu 04 Apr 2024 02:48:05 +0000
ROA not after:            Thu 03 Apr 2025 02:53:05 +0000
asID:                     61774
IP address blocks:        2804:1924::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:90:2a:af:49:74:a3:b4:02:9d:22:fd:03:eb:d3:16:c9:4e:b1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F
        Validity
            Not Before: Apr  4 02:48:05 2024 GMT
            Not After : Apr  3 02:53:05 2025 GMT
        Subject: CN=5B36EE267B721545207BCA331B4C028A98F661CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:6f:10:1a:bb:1e:3d:e1:9f:00:73:26:b5:
                    09:c8:3c:49:43:8b:4f:78:f6:d6:bb:62:f3:fb:a6:
                    26:13:ac:be:59:cf:2e:a2:70:e0:c0:cf:c8:22:bf:
                    c8:26:da:c3:2f:0b:c8:27:81:f8:40:dc:f5:19:a2:
                    14:ab:4e:5c:c6:3b:81:e2:07:75:7c:e8:8f:bd:2f:
                    93:99:62:af:5c:b2:11:ef:14:d9:73:f5:fe:fb:50:
                    c3:4b:aa:68:d7:e5:07:b1:15:51:f9:7a:2e:f5:51:
                    e4:e6:c6:04:3a:d2:cb:a6:f7:9d:9d:c7:31:48:04:
                    b6:91:a7:f8:24:12:43:e0:e8:40:be:1a:d2:c0:2d:
                    4f:8c:74:57:7a:f9:ed:8b:10:ee:44:03:92:16:91:
                    22:b5:2d:4e:64:26:95:a1:24:fd:bf:2e:26:5f:b9:
                    e0:2d:26:70:f0:e8:f1:87:0a:ed:45:67:3f:81:f0:
                    2e:74:9f:4e:82:64:2b:67:65:ad:f6:74:e4:6d:26:
                    08:ad:26:70:48:26:f0:48:66:72:3a:65:eb:c3:f3:
                    81:d3:22:1b:8e:7d:f1:4c:c9:22:be:d1:bd:3a:5b:
                    77:68:46:6b:96:8a:8f:05:13:0d:48:b4:aa:cc:4c:
                    8b:53:af:67:b0:4a:6e:6e:9c:25:8b:5a:35:9f:72:
                    43:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:36:EE:26:7B:72:15:45:20:7B:CA:33:1B:4C:02:8A:98:F6:61:CE
            X509v3 Authority Key Identifier:
                keyid:FA:11:21:EC:AC:AF:0E:8C:2C:26:95:DA:5A:E6:A8:1C:33:C4:09:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA1121ECACAF0E8C2C2695DA5AE6A81C33C4097F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fopLjTvZriXaR6pFEQUwrcXPrhnUwCEB6eTJ9qWg9Hj/1/323830343a313932343a3a2f33322d3333203d3e203631373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1924::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:df:56:d1:f6:e9:50:1d:10:98:02:c6:52:c7:5b:33:04:44:
         4e:e3:9d:f9:88:11:32:34:55:0b:cc:e0:d4:55:78:ae:31:ab:
         91:c3:02:79:a2:9b:b6:b1:e5:a9:38:56:12:5d:8c:b9:23:b6:
         87:58:5b:39:bf:7e:30:f5:50:1d:99:2f:93:eb:00:1e:c6:3d:
         c1:b6:1b:c7:ce:21:17:36:30:6d:1e:91:4c:e3:3d:c1:51:ff:
         03:f0:f1:50:f6:0b:44:7e:21:89:d7:02:53:e1:1c:9c:c7:d1:
         ef:a0:2b:6c:53:26:41:0e:97:a3:a0:51:25:2b:e7:ba:de:88:
         83:86:8a:39:9a:5a:d0:b5:d9:44:fb:ac:1b:c6:73:2a:54:11:
         e0:73:98:0a:23:a3:fb:e9:69:46:fe:60:18:6f:2b:a7:55:c6:
         12:e2:be:14:80:80:80:20:b5:b1:72:d0:90:5d:61:64:ba:d1:
         52:e8:77:15:2c:45:64:4a:57:be:3b:76:f2:24:d7:26:75:9b:
         f5:7f:c4:7e:6a:5d:1f:d8:92:61:1b:46:40:c1:16:16:b3:4c:
         49:ed:b3:84:e4:c4:b3:74:6f:d3:2b:df:6b:00:38:d9:2a:df:
         c4:b3:6c:f7:33:dd:68:11:0e:ec:08:1f:2b:0a:21:77:f7:58:
         b7:59:cf:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 22:23:56 2024 by rpki-client on console-fra.rpki-client.org