Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a343030303a3a2f33342d3334203d3e20323637333935.roa
File:                     323830343a346364343a343030303a3a2f33342d3334203d3e20323637333935.roa (raw, json)
Hash identifier:          EmapX1+RZwTnTl5jt9GGEpb42lVh5Ga8iG6tmneGgG0=
Subject key identifier:   E4:26:90:E5:16:77:48:E8:9A:27:BB:2F:92:5A:21:4E:AA:FB:2C:A3
Certificate issuer:       /CN=FCC7A10CD64B84116220258C164688796EE17437
Certificate serial:       25F80679BE3388715538D54D268F705BD0783C26
Authority key identifier: FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a343030303a3a2f33342d3334203d3e20323637333935.roa
Signing time:             Thu 15 Feb 2024 13:48:07 +0000
ROA not before:           Thu 15 Feb 2024 13:43:07 +0000
ROA not after:            Thu 13 Feb 2025 13:48:07 +0000
asID:                     267395
IP address blocks:        2804:4cd4:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f8:06:79:be:33:88:71:55:38:d5:4d:26:8f:70:5b:d0:78:3c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCC7A10CD64B84116220258C164688796EE17437
        Validity
            Not Before: Feb 15 13:43:07 2024 GMT
            Not After : Feb 13 13:48:07 2025 GMT
        Subject: CN=E42690E5167748E89A27BB2F925A214EAAFB2CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:d9:f6:70:4f:b9:f2:af:df:d7:1e:b4:2e:
                    bd:14:f2:a5:76:e7:ae:5a:0b:a4:1c:b7:88:23:86:
                    fe:29:05:c3:1e:3c:1d:4e:53:ef:70:16:5b:16:17:
                    58:15:99:3f:97:3b:0a:31:46:b9:e9:41:ed:af:87:
                    a1:84:66:c5:80:b2:b3:13:66:d2:9f:fb:b1:da:b8:
                    d4:77:0e:31:8c:8f:c7:27:a6:2f:96:39:28:a6:ac:
                    43:7c:9f:5e:f1:6f:15:62:d0:86:e5:6a:40:4d:b6:
                    ca:b6:79:2d:c3:07:90:b4:03:1f:d7:6f:cd:11:91:
                    ba:6d:d3:09:09:4a:84:1f:02:f5:46:2b:4e:d2:30:
                    1e:04:02:74:ac:4a:6b:59:45:ef:d1:34:73:fc:2f:
                    50:0e:16:5a:97:d7:4e:4f:35:82:43:85:f1:09:dc:
                    98:85:dc:fb:a2:8d:de:5f:43:b5:78:d2:b0:85:29:
                    d4:35:6d:3c:f2:c2:d6:a8:a1:eb:bb:98:cb:92:e8:
                    84:c4:4d:d6:15:4e:80:c5:ff:66:f9:8f:8c:6f:9d:
                    73:33:be:18:ca:ec:0b:6e:36:91:64:5f:6f:ef:71:
                    fc:96:e8:ac:21:d1:a2:f5:4a:b6:16:03:a1:66:12:
                    6e:2f:ca:ed:9d:b0:75:5c:48:84:95:aa:a1:f2:07:
                    a0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:26:90:E5:16:77:48:E8:9A:27:BB:2F:92:5A:21:4E:AA:FB:2C:A3
            X509v3 Authority Key Identifier:
                keyid:FC:C7:A1:0C:D6:4B:84:11:62:20:25:8C:16:46:88:79:6E:E1:74:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/FCC7A10CD64B84116220258C164688796EE17437.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FCC7A10CD64B84116220258C164688796EE17437.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a343030303a3a2f33342d3334203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         be:e3:bd:b8:a5:c1:f9:c1:fe:ee:7c:11:95:b7:ea:c7:99:a8:
         c2:26:0d:8f:97:ac:55:09:eb:c8:b3:c7:4a:68:a6:bd:16:31:
         81:95:5e:4b:b1:ce:7b:0f:31:f2:ec:22:c1:a7:b6:aa:db:34:
         7d:67:f6:e9:25:2c:26:77:7f:03:36:22:18:93:55:f6:65:fc:
         7b:c9:56:f2:d9:70:94:d7:12:aa:f9:3f:c9:f4:cc:d1:83:de:
         62:46:33:fa:a3:a5:2e:44:71:7c:bd:50:14:f2:1a:00:ce:95:
         fd:23:6d:f8:1e:fd:9e:78:87:28:37:68:d9:8c:ed:8f:c9:57:
         fc:26:95:de:29:9a:ac:8e:d7:f7:58:5a:cb:92:7e:01:c1:ed:
         c7:fa:fb:d8:71:f6:46:b9:fb:e8:47:4e:0f:b5:8d:02:64:c8:
         ed:6f:c2:ed:be:6a:84:89:be:7a:42:f2:46:dd:0f:53:4b:5d:
         88:9a:00:0f:e6:2a:e5:d8:1d:8b:96:d6:8d:1f:07:8d:76:79:
         a1:55:8e:05:a6:3c:5a:f8:7a:e5:b1:c3:0f:88:31:6f:7f:1f:
         a3:e3:8f:82:db:b0:da:a0:50:d8:3e:2d:72:c3:b8:4c:5d:76:
         bd:2e:74:33:04:06:a5:78:e5:db:6f:f0:3b:bb:ed:f4:a6:38:
         b7:cc:3c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org