Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/323830343a366334343a3a2f33322d3336203d3e20323730343536.roa
File:                     323830343a366334343a3a2f33322d3336203d3e20323730343536.roa (raw, json)
Hash identifier:          7pzRV2ICCiNZW0cxjJjJRdEIR2Qq3byV6d6+D6PPBiU=
Subject key identifier:   8B:76:33:A0:E8:41:53:32:21:06:5E:AB:0B:32:3E:A4:F8:30:05:CA
Certificate issuer:       /CN=FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4
Certificate serial:       78A3CB01B83422C786E23D346BBCF6F163C9BA47
Authority key identifier: FE:95:FB:96:0D:3B:ED:76:8A:7C:DF:B2:1C:EB:EF:56:32:FE:B7:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/323830343a366334343a3a2f33322d3336203d3e20323730343536.roa
Signing time:             Thu 04 Apr 2024 18:53:19 +0000
ROA not before:           Thu 04 Apr 2024 18:48:19 +0000
ROA not after:            Thu 03 Apr 2025 18:53:19 +0000
asID:                     270456
IP address blocks:        2804:6c44::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:a3:cb:01:b8:34:22:c7:86:e2:3d:34:6b:bc:f6:f1:63:c9:ba:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4
        Validity
            Not Before: Apr  4 18:48:19 2024 GMT
            Not After : Apr  3 18:53:19 2025 GMT
        Subject: CN=8B7633A0E841533221065EAB0B323EA4F83005CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fb:3b:64:4e:2f:61:11:47:f0:12:dc:de:d4:
                    55:39:16:c9:68:24:d7:4c:df:d9:27:83:96:c1:54:
                    a5:6e:b6:96:71:76:60:42:44:ed:e7:03:70:6b:22:
                    82:51:bc:07:34:88:50:82:a2:95:8c:2a:31:88:6e:
                    2d:42:c6:45:ce:bb:dd:a2:02:1f:4f:be:47:7a:0a:
                    66:52:0a:51:23:7b:88:e9:09:e2:28:19:22:03:0c:
                    bf:b1:9a:57:dc:01:9e:0f:e6:43:4c:c9:a7:6e:66:
                    af:63:2e:17:23:c1:41:da:98:4f:f4:ee:3a:8b:81:
                    b9:b0:5d:6e:c8:e5:7f:f1:69:e5:dc:3d:91:15:47:
                    60:cf:4d:f7:ee:2a:57:ef:61:6e:ea:e8:55:e4:92:
                    5f:96:3a:30:4c:37:ed:c7:23:59:6c:dd:e6:28:f0:
                    c0:14:9d:65:e7:e8:cf:2a:00:90:b7:96:00:cf:2e:
                    35:66:35:b2:9e:e1:d8:72:9c:e4:23:ce:11:e4:38:
                    b1:3f:65:42:2a:d9:38:5b:90:36:83:e7:76:58:4c:
                    3b:ec:95:9f:f7:f6:ea:21:4d:3d:f4:02:91:c6:e4:
                    f0:9b:ee:8e:a9:40:e4:75:c9:fd:b2:cc:65:dd:2e:
                    b8:a2:e2:72:31:f1:6d:ca:71:b4:ad:84:9b:db:e5:
                    c8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:76:33:A0:E8:41:53:32:21:06:5E:AB:0B:32:3E:A4:F8:30:05:CA
            X509v3 Authority Key Identifier:
                keyid:FE:95:FB:96:0D:3B:ED:76:8A:7C:DF:B2:1C:EB:EF:56:32:FE:B7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE95FB960D3BED768A7CDFB21CEBEF5632FEB7F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9yqUTwgWiLByugmrAR4GGLC6vmesmoW62E6kpHHzZUwa/1/323830343a366334343a3a2f33322d3336203d3e20323730343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c44::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:fe:bf:8b:06:ca:ad:22:3d:49:7f:c3:e2:e1:6c:d0:48:81:
         51:bd:79:a0:1b:a8:4f:93:bc:e0:f6:eb:2b:cb:21:80:1f:46:
         78:f6:18:b7:2b:fb:64:5b:13:7d:38:bb:17:3f:99:23:04:0d:
         0f:d7:be:57:7d:80:6a:54:60:d2:da:9a:f8:90:f5:0b:e8:88:
         d1:ae:05:e2:db:b7:7b:24:61:19:51:83:cb:7b:24:e4:2f:62:
         e9:86:ec:04:8a:86:90:6b:3c:92:7b:dc:04:a4:78:2d:5a:a7:
         48:b0:1b:85:5d:4d:28:d9:21:30:16:af:6a:90:fc:82:4a:da:
         77:48:b9:ac:bf:b1:df:7d:b9:ea:22:7d:8a:55:e7:7d:d3:3d:
         78:7f:75:9d:e5:4a:7c:72:47:c6:c9:72:43:73:b2:7e:ca:c3:
         59:7c:5f:91:4c:7d:a8:de:ce:35:91:53:09:1e:85:5b:52:3a:
         64:f7:32:e6:29:ad:eb:26:a8:04:30:5d:bd:d4:14:b0:ba:46:
         67:a3:42:8a:9e:44:17:da:e3:29:d6:8c:b8:c6:c9:26:52:93:
         bc:f9:33:0e:ff:7c:e0:b2:5f:c7:fd:97:ad:d9:68:41:16:a3:
         2e:94:cf:2c:82:59:32:07:a4:c5:75:24:4f:ea:7b:d5:4b:91:
         5e:7e:ec:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org