Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/0/323830343a3261633a3a2f33322d3634203d3e203238333030.roa
File:                     323830343a3261633a3a2f33322d3634203d3e203238333030.roa (raw, json)
Hash identifier:          9CMOb3uYuGfIdi6BOItXhhapU9FB/uqPxCWjt21mUSU=
Subject key identifier:   BB:2B:2E:98:2C:A7:CC:C5:0C:33:B2:F7:65:1A:E4:D7:4D:61:A4:B2
Certificate issuer:       /CN=FDF7E2D6B87D7FE76069038F057C183A2FD0ABDB
Certificate serial:       0CFD1FA6CE0D48194AE21E109DCCB1A132FDB780
Authority key identifier: FD:F7:E2:D6:B8:7D:7F:E7:60:69:03:8F:05:7C:18:3A:2F:D0:AB:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF7E2D6B87D7FE76069038F057C183A2FD0ABDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/0/323830343a3261633a3a2f33322d3634203d3e203238333030.roa
Signing time:             Tue 14 Jun 2022 12:36:05 +0000
ROA not before:           Tue 14 Jun 2022 12:31:05 +0000
ROA not after:            Tue 13 Jun 2023 12:36:05 +0000
asID:                     28300
IP address blocks:        2804:2ac::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fd:1f:a6:ce:0d:48:19:4a:e2:1e:10:9d:cc:b1:a1:32:fd:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDF7E2D6B87D7FE76069038F057C183A2FD0ABDB
        Validity
            Not Before: Jun 14 12:31:05 2022 GMT
            Not After : Jun 13 12:36:05 2023 GMT
        Subject: CN=BB2B2E982CA7CCC50C33B2F7651AE4D74D61A4B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:02:3f:ff:95:a2:1c:68:2c:81:9f:31:c1:fa:
                    a4:60:03:51:69:0a:da:bf:d7:9d:cd:41:c8:d6:29:
                    b2:8e:86:35:a8:dc:3b:d0:4f:29:5b:5f:9f:27:f8:
                    e4:a6:2a:85:b3:bf:9e:fa:ae:1e:66:d5:49:55:82:
                    c9:e7:8c:41:84:eb:42:51:08:a0:57:b3:3a:2e:9f:
                    ba:46:f5:99:17:bb:4b:4c:a6:17:b1:7b:3c:4c:d2:
                    bb:bd:6b:2c:e4:3e:d0:c7:88:86:a6:56:a5:eb:12:
                    29:57:06:1c:e4:3b:e4:53:9f:fd:f2:cb:de:ac:ee:
                    ac:76:b8:97:11:37:c9:98:7a:13:60:58:48:f6:d1:
                    77:75:b6:df:96:54:68:ac:5d:74:26:56:09:4d:93:
                    7c:34:ff:f0:5a:e9:2d:4c:2f:eb:a2:24:3b:af:bf:
                    fc:d8:48:09:e0:71:35:2d:74:03:17:82:af:87:98:
                    d7:8e:52:1c:d1:67:f2:e2:ce:4a:06:08:a8:01:b5:
                    68:fb:19:b1:16:29:75:ff:3f:ea:ee:25:e4:f1:5a:
                    53:88:68:d1:ad:34:f9:21:fd:98:08:1c:bc:8e:fc:
                    14:ef:a8:fd:17:81:b4:1a:85:05:fc:47:c8:f9:e3:
                    fd:8e:2a:6b:3a:36:d4:93:3d:2d:9e:6f:82:ed:f9:
                    fe:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2B:2E:98:2C:A7:CC:C5:0C:33:B2:F7:65:1A:E4:D7:4D:61:A4:B2
            X509v3 Authority Key Identifier:
                keyid:FD:F7:E2:D6:B8:7D:7F:E7:60:69:03:8F:05:7C:18:3A:2F:D0:AB:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/0/FDF7E2D6B87D7FE76069038F057C183A2FD0ABDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FDF7E2D6B87D7FE76069038F057C183A2FD0ABDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9j7zu2yAnVkGUZMfa1LPWzLtBvr4kCTzZ2NCBGsqMYC7/0/323830343a3261633a3a2f33322d3634203d3e203238333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:63:bd:b3:e2:60:10:71:9e:c8:7c:f0:88:17:9d:75:a9:1f:
         a4:99:3a:fa:ae:1a:e3:f6:94:ff:fe:44:ca:a6:46:d7:d8:2e:
         8f:9e:6a:7a:3e:5c:e0:df:12:0b:93:09:77:8f:c8:e7:f7:9c:
         c0:9c:e4:5e:18:27:e5:93:1b:bf:72:1a:11:d2:e8:13:c3:8f:
         e6:e6:1f:1f:7a:16:6d:e5:34:54:a5:8c:18:b5:f0:75:04:4e:
         04:c9:b7:68:06:7f:db:cd:cd:d1:fe:3c:e6:dc:28:03:86:a9:
         8d:4c:2a:92:ca:c8:75:8f:a4:c5:b7:46:af:05:48:1a:23:98:
         84:8f:55:c2:8a:41:c7:f9:ba:d5:93:b0:9c:c0:ee:6e:b2:2b:
         29:43:2e:84:18:c5:4b:76:df:23:e8:5a:2b:70:03:62:c7:7e:
         9c:47:80:af:02:bd:b1:a1:82:dc:da:42:45:53:6e:8c:37:b1:
         84:84:ee:37:5a:eb:7e:18:1f:3b:65:65:9e:15:8c:c4:a7:ab:
         ea:50:19:9d:b4:da:4d:a0:3e:3c:cd:56:d0:5c:48:4d:2b:6c:
         3f:f5:52:cb:0b:91:24:b8:32:ce:85:60:15:9b:f5:0d:a4:2c:
         bd:bd:e8:a1:ba:88:01:05:fe:79:43:41:ea:7f:d4:c5:f9:3a:
         e4:c1:d3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org